Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
22/08/2023, 07:32
General
-
Target
mcu!!.docm
-
Size
785KB
-
MD5
81cfff743ca68149c276a0cf604fa637
-
SHA1
ff61b306c4ae486cef2ca3952076a827bbf3f893
-
SHA256
46407f5e5e23560a43bed427ed3306439c23626eb71de48832a56abc8bede3ab
-
SHA512
280db74e778c7736785f5506df7a11af72c5854f869aba75180e5fdd593ff99b60238badd15094d7993a7b27dcdc1bf3662b6e4ab2e151a4f50a6887b39c6936
-
SSDEEP
12288:0Jt0+45H/5SYg1mmWvt7ZYRpzyMt+Y9HYys7y8VJuXVWg0f8KgOVwYnA0etQfJ+A:20B/5U4t7ZEEIcJuXlA8KDA0etKAhy
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE"C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\mcu!!.docm"1⤵
- Drops file in Windows directory
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\splwow64.exeC:\Windows\splwow64.exe 122882⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
20KB
MD53f27f641940f953b63780d46a56942e6
SHA1d73c8c26aa72b8967d272c562967a30043e6df1a
SHA25686d33f5a101ebe0c03b5902aa8648305d101d92737b92b0f5b9fad6beca2c110
SHA512d4464f4aae49d8f5e467771cd387b8dc912cab0d083ba257ddeefb023153fe6cb88a1c5eb745095991bae55d4cd35268a73f052b3c01ee38959efe88f8370a1c
-
Filesize
1.4MB
-
Filesize
64KB
-
Filesize
44KB
-
Filesize
1.4MB
-
Filesize
44KB
-
Filesize
64KB
-
Filesize
44KB