Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
20/09/2024, 21:55
Behavioral task
behavioral1
Sample
83e6725b570d68877ba3c5734ed3248201bf135ab9649785aa48e5ec9788c141N.exe
Resource
win7-20240903-en
General
-
Target
83e6725b570d68877ba3c5734ed3248201bf135ab9649785aa48e5ec9788c141N.exe
-
Size
83KB
-
MD5
6c26ec1c2103e41ae6e5c2404f113930
-
SHA1
8dba96810c95c33c986e13f32d72a3ead6a300c8
-
SHA256
83e6725b570d68877ba3c5734ed3248201bf135ab9649785aa48e5ec9788c141
-
SHA512
29d09362d39fa5055e24b3eaf92c115acd10365a2a828685eb9cad1f119b9df2845993007ebd7c126290965225e85797a80e724ea02e26db1b0f923eb1da5033
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+hK:LJ0TAz6Mte4A+aaZx8EnCGVuh
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2644-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2644-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2644-7-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x000f00000001228d-11.dat upx behavioral1/memory/2644-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2644-22-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 83e6725b570d68877ba3c5734ed3248201bf135ab9649785aa48e5ec9788c141N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD5bbbe9379857b70cfd0df5ea92f4f1217
SHA1f92f6dcf7048105c39e84f7eeeef18ea2873978d
SHA256c2692c5305927d843129eb91e354d26d3139121c897ac61f88e99797bb86986d
SHA51253615c8ec952c196f36af0e68249c6bd26e49cb90cfd2998a9fb726e6c3a2bd5949724c508f7d26128cecd015d24987c7eaa8af51d025d7005b26d0448def24f