Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
98s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
09/10/2024, 21:25
Behavioral task
behavioral1
Sample
218be801fa2e1c110185d967000cd26cf5dc26202eccfcb633dda05bd4fd4036N.exe
Resource
win7-20240729-en
General
-
Target
218be801fa2e1c110185d967000cd26cf5dc26202eccfcb633dda05bd4fd4036N.exe
-
Size
236KB
-
MD5
599a6fa37a92fdfcdf3b0296f477cba0
-
SHA1
ec03e60b7747eab6167bf85b6b0997c6301575d8
-
SHA256
218be801fa2e1c110185d967000cd26cf5dc26202eccfcb633dda05bd4fd4036
-
SHA512
3c40a3fc91efbb3e9fbe83f83f855d3d0602c1cf3cc46bbefc1cab7577beb7e5c7691eac2088dbcec23ee11791460eceba927bd721011a1577ed6913112ab8c1
-
SSDEEP
3072:RJ0Bs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/P/FnncroP9:bwDeM7iNEkgiOb31k1ECvJ/F
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2264-0-0x0000000000400000-0x000000000043B000-memory.dmp upx behavioral1/memory/2264-1-0x0000000000400000-0x000000000043B000-memory.dmp upx behavioral1/files/0x000c00000001225e-7.dat upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 218be801fa2e1c110185d967000cd26cf5dc26202eccfcb633dda05bd4fd4036N.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
236KB
MD550c69561bb50abe556ae01bc1412bd55
SHA102c19413b67ba12c106879fdbe892fafc6d23abf
SHA256a0c8d69925f589f77f677e8a7bacfe364c8b940460f31168721053d749d658e3
SHA5125802205d1ece45c9b0787df35cabd7f470f38cce5ff0fcb550d336b802daeba51bf1cc8ec9d89e126848f5ce7700be662cb91659764c474a812d7ee3cd9ccd8b