Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

FC88BEEB74...NWORD_

windows7-x64

1

Resubmissions

18/09/2023, 12:45

230918-py158shc9v 1

18/09/2023, 12:39

230918-pv2btshc8w 1

18/09/2023, 12:31

230918-pqjwzsbf35 1

18/09/2023, 12:24

230918-pk72mahc3w 4

18/09/2023, 12:20

230918-ph3dcsbe88 1

18/09/2023, 12:17

230918-pgaxqabe82 1

Analysis

  • max time kernel
    111s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    18/09/2023, 12:31

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    FC88BEEB7425AEFA5E8936E06849F484_~$INWORD_

  • Size

    162B

  • MD5

    fc88beeb7425aefa5e8936e06849f484

  • SHA1

    3df841579c383f0fb02b30ba4958add6d43216a9

  • SHA256

    1affee2a7a8d587184faaf2e3a21754b6bbaccbf357c0aa61c8586b19f2b284f

  • SHA512

    d01f99363cb0c88caa739cb17626020009f92de82c642f5244c221c0352d20f35c304893dc2b3f0f2cdf59eb89a54411dc47766d5ef1bbdc5a0ab00ad4f3e293

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\FC88BEEB7425AEFA5E8936E06849F484_~$INWORD_
    1⤵
      PID:3020
    • C:\Windows\System32\rundll32.exe
      "C:\Windows\System32\rundll32.exe" shell32.dll,Options_RunDLL 0
      1⤵
        PID:2748
      • C:\Windows\explorer.exe
        "C:\Windows\explorer.exe"
        1⤵
          PID:2528
        • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
          "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\FC88BEEB7425AEFA5E8936E06849F484_~$INWORD_.pdf"
          1⤵
          • Suspicious use of SetWindowsHookEx
          PID:320

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
          Filesize

          3KB

          MD5

          2b111811faf732ebd7f959f6898681eb

          SHA1

          fcae8a3293ca0dba7413642d363bb68131b8480d

          SHA256

          280d2c93c7b62a49a0729037b3bcf5a0f03577ef86aef7a3c0add9ea5204b23d

          SHA512

          9385e7bbf4bd9f2179baf9f6b0c3b99d86c342e3e338465b92f710a64fc357be8f0ce8f01a86fbab37a2b6c3cfc6b44039901c04d4e1d2c21a0e398ff6ca386a

          Download Submit