Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
108s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
01/10/2024, 08:52
Behavioral task
behavioral1
Sample
a7ef1a0a71884bab241215b3a9067884ed3862e052b2151c4823d7c14766dbfaN.exe
Resource
win7-20240903-en
2 signatures
120 seconds
General
-
Target
a7ef1a0a71884bab241215b3a9067884ed3862e052b2151c4823d7c14766dbfaN.exe
-
Size
43KB
-
MD5
31c6a1bc70b3f1d62cf1a99e0ae60280
-
SHA1
a62668518cf13f8702dae6b8a70f52a4d45bb315
-
SHA256
a7ef1a0a71884bab241215b3a9067884ed3862e052b2151c4823d7c14766dbfa
-
SHA512
9e5381e0d3270aa45198c68f9fab75432f8561180bc16f3021dc8d0af38898681ed203bf20074bfc1bd0519678239828f229c068217284c9e63b051e6d5dfcee
-
SSDEEP
768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9ZJ3Rl2gwwk5UF:CTW7JJ7TzJswk5UF
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4300-0-0x0000000000400000-0x000000000040A000-memory.dmp upx behavioral2/memory/4300-1-0x0000000000400000-0x000000000040A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language a7ef1a0a71884bab241215b3a9067884ed3862e052b2151c4823d7c14766dbfaN.exe