Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
111s -
max time network
96s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
04/10/2024, 05:48
Behavioral task
behavioral1
Sample
370ee2a0d7e9ce98f8ae683ba65bfdf371afbbad5ee2b76ad2c91fd6ac459950N.exe
Resource
win7-20240903-en
General
-
Target
370ee2a0d7e9ce98f8ae683ba65bfdf371afbbad5ee2b76ad2c91fd6ac459950N.exe
-
Size
83KB
-
MD5
0382fe9079f41e236e5ba15ce1fbf600
-
SHA1
354ba39d9c6c4a0d43d1b9edefd713c12d5dcdd7
-
SHA256
370ee2a0d7e9ce98f8ae683ba65bfdf371afbbad5ee2b76ad2c91fd6ac459950
-
SHA512
87d122626a696fc94330e6ff918dbc33a7f515798e2d830eb312efb1e285de6e4f03c11a32d4b260249ea706fe37c4d622d96cb8bc8fc565daa9590c854933be
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+EK:LJ0TAz6Mte4A+aaZx8EnCGVuE
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2720-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2720-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2720-4-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2720-8-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x001500000000f6b0-12.dat upx behavioral1/memory/2720-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2720-22-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 370ee2a0d7e9ce98f8ae683ba65bfdf371afbbad5ee2b76ad2c91fd6ac459950N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD51a831274a915de46b7147d9d04bf0598
SHA17d25ab37bada9880b37b3be47dfa62fc03966cb3
SHA256c4c2e53a822deaa4d37fddd5a1192dad3f72cf122046de1d52f06654b0537e5e
SHA5128cb91fac50a21d12fa05a0c201b3292471f19a463781bc8070a303cfd78e963e5541aa31048e86dbd4a56c9eb39dc3a7e43ce637caecae72751fcb370b2198d5