Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
93s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
03/10/2024, 21:03
Behavioral task
behavioral1
Sample
7cbaad3ecb2cb27ac92cd880f7a89b8b5cbaa5c4f6e73ef1b2e221114270fc58N.exe
Resource
win7-20240903-en
General
-
Target
7cbaad3ecb2cb27ac92cd880f7a89b8b5cbaa5c4f6e73ef1b2e221114270fc58N.exe
-
Size
83KB
-
MD5
c970930b0516d5aad3ba047bd5639480
-
SHA1
55afa94ab238be896178bc63df1f1064ac252eb2
-
SHA256
7cbaad3ecb2cb27ac92cd880f7a89b8b5cbaa5c4f6e73ef1b2e221114270fc58
-
SHA512
ce2816c4544d00d12ad0dab358ea09471d09e9e3f6f39034376dee2bddb61a9680f8ed079c045f4c3384d135e2e643392238da9f1e41af5bff1265b7e77489d4
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF++K:LJ0TAz6Mte4A+aaZx8EnCGVu+
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2552-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2552-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2552-7-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x0004000000013d08-11.dat upx behavioral1/memory/2552-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2552-22-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 7cbaad3ecb2cb27ac92cd880f7a89b8b5cbaa5c4f6e73ef1b2e221114270fc58N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD5a8c36c167f4b1925de373157a377674f
SHA1c1b273e5194756d86c9058f39464e3d73bb0d7de
SHA256fdebb3c7814367056b47b1131b9f9673baa9a281881d10b647e6bf669c31b4e4
SHA51230ed9052b9d2285414f6fd53e85f63ce0c3cf4989772db8a7af19a39b380827483a18ddbf4612bd084a62eec28360699f4ca7d9c4edd03e02446548d2671e80d