Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
24/12/2024, 14:41
Static task
static1
Behavioral task
behavioral1
Sample
ef0ff26223571e56d13c4f843a7933412377463788a037d5836c78ef10ecf02f.exe
Resource
win7-20241010-en
General
-
Target
ef0ff26223571e56d13c4f843a7933412377463788a037d5836c78ef10ecf02f.exe
-
Size
262KB
-
MD5
e2644809f0a3d0bb04cc785f9b86acae
-
SHA1
862c001f37c56082497632647c2b629b44ece416
-
SHA256
ef0ff26223571e56d13c4f843a7933412377463788a037d5836c78ef10ecf02f
-
SHA512
a6f9d63cba54e9c0d13ba3f8e477dfb4609fc6d166ade6d59147e30d547c296db2456cbb7dc6c543798cc266c06c510b16abb25341ea9e98e5a31cda2e2a0585
-
SSDEEP
6144:WIZTK/5qUBjUJvMqK4/B4nkZFFJ11sAthE4XfZLqHzgr:WIxKhDpUo4/BK0FDsMhdXhLXr
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Signatures
-
Sality family
-
resource yara_rule behavioral1/memory/2188-1-0x0000000001D70000-0x0000000002E2A000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ef0ff26223571e56d13c4f843a7933412377463788a037d5836c78ef10ecf02f.exe