Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
101s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
13/10/2024, 22:17
General
-
Target
9d17f9198480c1a385e48163ecc61bf76043f506ca6aada42b267b7c018dccc7N.exe
-
Size
501KB
-
MD5
31fdded1d23bb215131209cdce0efd80
-
SHA1
c2e63faf5d73ee8c50bd3d66dcabb849cef3b713
-
SHA256
9d17f9198480c1a385e48163ecc61bf76043f506ca6aada42b267b7c018dccc7
-
SHA512
5b18756bcccf7bcfc4a99c18dc176a9d654bc66d4a6f199e53f3b3b50207c3c53ee0c57fab853e72d32a0f0610a5eee0b49e6130f17277fc2ff5f0d81e5ae32c
-
SSDEEP
12288:qUWA3Aheuswy/zKha8BEjQJ3ZJk/6iZgEOJj36fk7BsRpJ0XDJVxhPO4t/mFF7:qUWqist/mha8BsO3ZJ46iOJb6s7BsqdS
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9d17f9198480c1a385e48163ecc61bf76043f506ca6aada42b267b7c018dccc7N.exe"C:\Users\Admin\AppData\Local\Temp\9d17f9198480c1a385e48163ecc61bf76043f506ca6aada42b267b7c018dccc7N.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam