Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
25/09/2024, 18:30
Behavioral task
behavioral1
Sample
5a103776d7af498952edb046ec81c424fdc8b3389b3ffef1e89a964c32cf170eN.exe
Resource
win7-20240708-en
General
-
Target
5a103776d7af498952edb046ec81c424fdc8b3389b3ffef1e89a964c32cf170eN.exe
-
Size
83KB
-
MD5
444ca0266b184a6cd3ec93dcf1a29000
-
SHA1
a892c79204c250d1e2a49b554738e60c334ac807
-
SHA256
5a103776d7af498952edb046ec81c424fdc8b3389b3ffef1e89a964c32cf170e
-
SHA512
7ef6853ae669409b51f3073808587cf33f07801ab772a81c23cd92779dde9ca776068de716b0b1441e685ff84ad433294b81bcc5a92f1802400309f8676dbee7
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+bK:LJ0TAz6Mte4A+aaZx8EnCGVub
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2292-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2292-2-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2292-6-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x0004000000004ed7-12.dat upx behavioral1/memory/2292-13-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2292-23-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 5a103776d7af498952edb046ec81c424fdc8b3389b3ffef1e89a964c32cf170eN.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD52c5c1efe18dcb2797d36ac1e23cb6b73
SHA1e496726486044049acf63f1494ae96b6a87674a1
SHA2566b0b78a8c540b3b901e947bb95aef4ba3ad6da1f0db5847a679d8a1bb8ca9cb7
SHA5123b96f44cd763da9ecd0d6f39be2cd28da380adef8c2dc9593363f0ed8baf97005f0c5ff26a245dd83a540b00db98b210c5112d1fb411262da7524bf8ce3abc08