Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
18/09/2023, 12:45
230918-py158shc9v 118/09/2023, 12:39
230918-pv2btshc8w 118/09/2023, 12:31
230918-pqjwzsbf35 118/09/2023, 12:24
230918-pk72mahc3w 418/09/2023, 12:20
230918-ph3dcsbe88 118/09/2023, 12:17
230918-pgaxqabe82 1Analysis
-
max time kernel
128s -
max time network
131s -
platform
windows10-1703_x64 -
resource
win10-20230915-en -
resource tags
arch:x64arch:x86image:win10-20230915-enlocale:en-usos:windows10-1703-x64system -
submitted
18/09/2023, 12:20
Static task
static1
Behavioral task
behavioral1
Sample
FC88BEEB7425AEFA5E8936E06849F484_~$INWORD_
Resource
win10-20230915-en
Behavioral task
behavioral2
Sample
FC88BEEB7425AEFA5E8936E06849F484_~$INWORD_
Resource
macos-20230831-en
Behavioral task
behavioral3
Sample
FC88BEEB7425AEFA5E8936E06849F484_~$INWORD_
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral4
Sample
FC88BEEB7425AEFA5E8936E06849F484_~$INWORD_
Resource
debian9-armhf-20230831-en
Behavioral task
behavioral5
Sample
FC88BEEB7425AEFA5E8936E06849F484_~$INWORD_
Resource
debian9-mipsbe-20230831-en
Behavioral task
behavioral6
Sample
FC88BEEB7425AEFA5E8936E06849F484_~$INWORD_
Resource
debian9-mipsel-20230831-en
General
-
Target
FC88BEEB7425AEFA5E8936E06849F484_~$INWORD_
-
Size
162B
-
MD5
fc88beeb7425aefa5e8936e06849f484
-
SHA1
3df841579c383f0fb02b30ba4958add6d43216a9
-
SHA256
1affee2a7a8d587184faaf2e3a21754b6bbaccbf357c0aa61c8586b19f2b284f
-
SHA512
d01f99363cb0c88caa739cb17626020009f92de82c642f5244c221c0352d20f35c304893dc2b3f0f2cdf59eb89a54411dc47766d5ef1bbdc5a0ab00ad4f3e293
Malware Config
Signatures
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\FC88BEEB7425AEFA5E8936E06849F484_~$INWORD_1⤵PID:4576
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:1924
-
C:\Windows\SysWOW64\DllHost.exeC:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}1⤵PID:2944
-
C:\Windows\System32\rundll32.exe"C:\Windows\System32\rundll32.exe" C:\Windows\System32\shell32.dll,Options_RunDLL 01⤵PID:4608