Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
14s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
07/01/2025, 22:58
Static task
static1
Behavioral task
behavioral1
Sample
b4a2f3c3d5d4dd3ed6f06be4a6061e9b4e67e4a3c5fc8fae2ec4f93819b6a65e.exe
Resource
win7-20241010-en
General
-
Target
b4a2f3c3d5d4dd3ed6f06be4a6061e9b4e67e4a3c5fc8fae2ec4f93819b6a65e.exe
-
Size
285KB
-
MD5
34dea003bd27772ff052e54a35bb1756
-
SHA1
2fc579540210d36b90c209af5ea98b7b3d4d6d55
-
SHA256
b4a2f3c3d5d4dd3ed6f06be4a6061e9b4e67e4a3c5fc8fae2ec4f93819b6a65e
-
SHA512
8161f2c78f156c77d39f19c2398cec1986afa6e500ee94648ad6071eda761eeeec8d78c2e0cfaf53b1ec603e954ffc65a07325af34a04c58e37fa316f764eb5b
-
SSDEEP
6144:tOWCm+/c7R8Hm2rupNeanGnHNY9kkwjSz6YdXtwO2+ynTXSjrYQImYsRaTVrG36e:rMU7R8BSgmGntY9ojy6YdmOjmbSnRIm3
Malware Config
Signatures
-
Expiro family
-
Expiro payload 1 IoCs
resource yara_rule behavioral1/memory/2044-2-0x0000000001000000-0x0000000001096000-memory.dmp family_expiro1 -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b4a2f3c3d5d4dd3ed6f06be4a6061e9b4e67e4a3c5fc8fae2ec4f93819b6a65e.exe