Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
13/01/2025, 19:10
Behavioral task
behavioral1
Sample
e89b588f9f319dcf76cb445f474fb4ebc00ee41a9b19f01ddfca5e7eba9a72e9.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
e89b588f9f319dcf76cb445f474fb4ebc00ee41a9b19f01ddfca5e7eba9a72e9.exe
Resource
win10v2004-20241007-en
General
-
Target
e89b588f9f319dcf76cb445f474fb4ebc00ee41a9b19f01ddfca5e7eba9a72e9.exe
-
Size
21KB
-
MD5
805f56fd5e6df70773ec4d689f0d2fc5
-
SHA1
e6ad121fc35764fd760ae55e0032494e484ad1e4
-
SHA256
e89b588f9f319dcf76cb445f474fb4ebc00ee41a9b19f01ddfca5e7eba9a72e9
-
SHA512
882e1a75db80b253113fc659db59a58bbfbf5415aab6a68ea02e07842c6da8f961d58baa734d8f7144e40c4516e0839d669c0af5c82aa8883b6cb533c4398250
-
SSDEEP
384:u+cdGOE0ahMDe31VpMsXP3buyOuyOuyHFNISchoHPWjtWW:iGT0avVppXP3bqqBN0PD
Malware Config
Signatures
-
Drops file in Program Files directory 1 IoCs
description ioc Process File created C:\Program Files\AppPatch\NetSyst81.dll e89b588f9f319dcf76cb445f474fb4ebc00ee41a9b19f01ddfca5e7eba9a72e9.exe -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language e89b588f9f319dcf76cb445f474fb4ebc00ee41a9b19f01ddfca5e7eba9a72e9.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\e89b588f9f319dcf76cb445f474fb4ebc00ee41a9b19f01ddfca5e7eba9a72e9.exe"C:\Users\Admin\AppData\Local\Temp\e89b588f9f319dcf76cb445f474fb4ebc00ee41a9b19f01ddfca5e7eba9a72e9.exe"1⤵
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
PID:2044