Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
30/09/2024, 04:33
Behavioral task
behavioral1
Sample
f8a8c7a200b6619f631bea43518537a00bfa9f73801a7264e39383eb9658fdd5.exe
Resource
win7-20240903-en
General
-
Target
f8a8c7a200b6619f631bea43518537a00bfa9f73801a7264e39383eb9658fdd5.exe
-
Size
83KB
-
MD5
a71dc8437cdbf4b956fbec7198aeac1c
-
SHA1
97750331ef3f9691dc42f5068af4d1813c7de4d9
-
SHA256
f8a8c7a200b6619f631bea43518537a00bfa9f73801a7264e39383eb9658fdd5
-
SHA512
df7d474b85ab5486f124fe5f66323ea52e2e06c4c69092da687ec39785432f3bfdcdf0ca661c68712b5181789a55b82281036c83049394e0b3d1a3250bb043b7
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+tK:LJ0TAz6Mte4A+aaZx8EnCGVut
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2372-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2372-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2372-5-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x000b000000012250-11.dat upx behavioral1/memory/2372-12-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2372-22-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2372-29-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language f8a8c7a200b6619f631bea43518537a00bfa9f73801a7264e39383eb9658fdd5.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD564e8a96732e8a8c1d9f662d27c57d15b
SHA1dee8cd23b07b92e53eb46cc5fa3e977cab11b23b
SHA2563f02d46ae0d4363892fe1b586bc8c4f42291fb21aad76b758fd9becf40272dd2
SHA512f5a4afcd014a215910b87cb81e2433a8691c55d549d8c4d067010938b54c91c73d31088fad032bbcfcd5c94297f28c1bb79f047a54bf19a9819d0bfd50917aa0