Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
25/09/2024, 02:17
Behavioral task
behavioral1
Sample
08316cb0861a29b9f0a16d961d306ff3c0b3abc1227d60aaa365be86c722a409N.exe
Resource
win7-20240708-en
General
-
Target
08316cb0861a29b9f0a16d961d306ff3c0b3abc1227d60aaa365be86c722a409N.exe
-
Size
83KB
-
MD5
8a94470e6423572beb90e8210a52a4b0
-
SHA1
623c7774ea9b6e0ae3bebfa06345e0cea433a5ff
-
SHA256
08316cb0861a29b9f0a16d961d306ff3c0b3abc1227d60aaa365be86c722a409
-
SHA512
3e8c3dfb4a230264c01d00119157a723e8ab556350ad7c1120e4c6e1c233fb08f2d4c394ae6bd5e26640dcce046f17e0bc05724e7e1b0b7dc16a2b78d74ff82d
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+HK:LJ0TAz6Mte4A+aaZx8EnCGVuH
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2364-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2364-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2364-5-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x00090000000120f9-11.dat upx behavioral1/memory/2364-12-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2364-22-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 08316cb0861a29b9f0a16d961d306ff3c0b3abc1227d60aaa365be86c722a409N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD5f50a4feea8611762fd7b08f7bcd77221
SHA1fe19adb5a967381d147fc90c56339943e0626247
SHA256ec59aeeeb8b55a5473eb3ed15aaad55f2381376f5398e3ebdb8320ae3d3ec10d
SHA51219b9052b2c6c101a8bcf0a0768fed19857d80109cf03cefe496dd98d8b92d27e28ee5adb54a284c5f7a6246c8faa6901ec98b60d85a308136c1eba0dcb6b840f