Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
91s -
max time network
92s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
02/10/2024, 09:17
Behavioral task
behavioral1
Sample
ed2dd62e02412f7f9425e658bbe8bedc06c0239b727cbf691b7b01b15635334eN.exe
Resource
win7-20240903-en
General
-
Target
ed2dd62e02412f7f9425e658bbe8bedc06c0239b727cbf691b7b01b15635334eN.exe
-
Size
236KB
-
MD5
9b80984d1a233a8b7d40649787f699d0
-
SHA1
377f7c8d70178dc4cc7923723c1e121d07c20cd0
-
SHA256
ed2dd62e02412f7f9425e658bbe8bedc06c0239b727cbf691b7b01b15635334e
-
SHA512
46bc275cb34da1dc5e5f281278ab24f65630eed073bf19ed941dd23ba502e1c96c1e10a1d3bf151970aae413756f8dbe3873786cb03fccdcf03d5ce0203c6313
-
SSDEEP
3072:NJ0Bs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/A/FnncroP9:3wDeM7iNEkgiOb31k1EC+J/F
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2408-0-0x0000000000400000-0x000000000043B000-memory.dmp upx behavioral1/memory/2408-1-0x0000000000400000-0x000000000043B000-memory.dmp upx behavioral1/files/0x0005000000004ed7-7.dat upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ed2dd62e02412f7f9425e658bbe8bedc06c0239b727cbf691b7b01b15635334eN.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
236KB
MD56e8061c112d701ba45fa15e338db3131
SHA1802ab613f502e29308fe618e445f96b383823d47
SHA256040ed511e309f69852c6ca266c3517fadc522e8e41933f68cecc8f78e07f6bac
SHA5121e99735d688e475880ddbe407e402904c4f4ac560f1dd6cf4bc38a8162af51f0585c5c71e6cb7760a4b951b6c62c1b3e22e74241d6f88a4ecf5fe1c2c73cc171