Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
19/09/2024, 19:56
Static task
static1
Behavioral task
behavioral1
Sample
3c5b43178c1aa66eb1bbbaf1c41c41751f79db3e8eb6a484d7460eacb8d9c0dd.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3c5b43178c1aa66eb1bbbaf1c41c41751f79db3e8eb6a484d7460eacb8d9c0dd.exe
Resource
win10v2004-20240802-en
General
-
Target
3c5b43178c1aa66eb1bbbaf1c41c41751f79db3e8eb6a484d7460eacb8d9c0dd.exe
-
Size
206KB
-
MD5
4522ec240b2d823c71142c3d04858255
-
SHA1
72b259d507852adcd3014c25d62403bf2b1686b6
-
SHA256
3c5b43178c1aa66eb1bbbaf1c41c41751f79db3e8eb6a484d7460eacb8d9c0dd
-
SHA512
1830187f4236dfbab74e2e667128fa8508b67afe6d20be1d9ebfe13e80dee4bb527711c7b44ad13e31b13e98a4a1e7dcb18007d3688af38d757d29f456863c19
-
SSDEEP
6144:0Xv5sEN8fhKznU07UO70fUdPse0qh5gFNRFWopD55whIu:0f5szZOUDToPVX56RF/DHwhH
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 3c5b43178c1aa66eb1bbbaf1c41c41751f79db3e8eb6a484d7460eacb8d9c0dd.exe