Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
02/10/2024, 17:06
Static task
static1
Behavioral task
behavioral1
Sample
ANT_Simple_V.1.8.1.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ANT_Simple_V.1.8.1.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
ftd2xx.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
ftd2xx.dll
Resource
win10v2004-20240910-en
General
-
Target
ANT_Simple_V.1.8.1.exe
-
Size
632KB
-
MD5
b9cebe89f65eea3d1b3e1f29bf660999
-
SHA1
c43878867595fe4be8c4ce34b803413a544a4284
-
SHA256
666e33bacf2fe080cf89081ae58f965116af8706d04877c6b5d54f9c6c3c5dd6
-
SHA512
030a84df029630a66f0f6ba5434ac90202a71b549f69352abf6b324e9a8172924b2d0a59a488e587f1895eb69ae3c4f45ba8251c1082e3fcd7a5672e4aacd80f
-
SSDEEP
12288:48vj9/HnDOCoOYdW/RcvVEJYkz154BfpEu1HpXXBPIvlkx8+M:4itnHo5WpKENYfCoJXXBPItka+M
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ANT_Simple_V.1.8.1.exe