Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
110s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
08/09/2024, 06:59
Static task
static1
Behavioral task
behavioral1
Sample
e1ab8af4ee0d9d2bb4fa23bdc6cb03b0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1ab8af4ee0d9d2bb4fa23bdc6cb03b0N.exe
Resource
win10v2004-20240802-en
General
-
Target
e1ab8af4ee0d9d2bb4fa23bdc6cb03b0N.exe
-
Size
85KB
-
MD5
e1ab8af4ee0d9d2bb4fa23bdc6cb03b0
-
SHA1
705b9a25b82c074eb05a5a37f8cd6e2616e0df99
-
SHA256
acf1973a86ed2c0766565385bf93cb4b29d5ca50c16a00b999ca04472e7a5812
-
SHA512
8681c2256bf7ecf5d75bc73a895ce7f902efb2b2aa807470b6e9cf7c048fcdb3cf6a6a245047a6ed9d419f3c268ccd39e568ad8fa139a644c02fbd3b6461b3f6
-
SSDEEP
1536:ePBXnoLsy48FUJkw/yBephlwawaA7av7qU0888888888888W88888888888Bv:ePBXnoLsYAygDafp+7qT88888888888G
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language e1ab8af4ee0d9d2bb4fa23bdc6cb03b0N.exe