Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
110s -
max time network
97s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
17/10/2024, 20:55
Behavioral task
behavioral1
Sample
79dad52da4f31769019669e4d7c3dd691d3912c65387f051e50c555d32a3cc5dN.exe
Resource
win7-20240903-en
General
-
Target
79dad52da4f31769019669e4d7c3dd691d3912c65387f051e50c555d32a3cc5dN.exe
-
Size
83KB
-
MD5
1602f9df23042fa5233f3f9ab2f66be0
-
SHA1
eb3870d94ec679749942328bb96e889f08fde164
-
SHA256
79dad52da4f31769019669e4d7c3dd691d3912c65387f051e50c555d32a3cc5d
-
SHA512
7f9b218761203772e3236b48c6307af304798743ba31f422907029b850763a330a3ddb293a436bd95c98fcd6d0ea702814ab2d044bff439d4412c5fdf77f1645
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+JK:LJ0TAz6Mte4A+aaZx8EnCGVuJ
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1800-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/1800-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/1800-6-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x0005000000004ed7-11.dat upx behavioral1/memory/1800-12-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/1800-22-0x0000000000400000-0x000000000042A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 79dad52da4f31769019669e4d7c3dd691d3912c65387f051e50c555d32a3cc5dN.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD5001a09412ef1be6c6cee20b53b1b1810
SHA1403d922fe09a2e1288d2c33fcc07628683519d5c
SHA256abda10a2b7a63bccd3ec7b908a63501a0d889082bc65df29f656340bd900544c
SHA512466f3fd39a0b70736aec5f8e56ae06223cd54625d5b8fb2810c918d6192140b71e71986f551476d39dd24c774102df2c43e309c44527f4c4253c18e88037f213