Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
22/12/2023, 14:36
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c7c9e35af12139ba0cb403b31952fd60.exe
Resource
win7-20231215-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
c7c9e35af12139ba0cb403b31952fd60.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
c7c9e35af12139ba0cb403b31952fd60.exe
-
Size
192KB
-
MD5
c7c9e35af12139ba0cb403b31952fd60
-
SHA1
9f2fde743536aa36f60c939ec80e415477b2cf6c
-
SHA256
7e29ea0378eaa7b14bda15ceefc7768a9db9ebecfc61d56fc12392a973868930
-
SHA512
3b80da0a88cdb3bd884af74bb456980d27371920c2ffe9c4941e541d13f8e338688f3946d1926a8f097e3959b2dfccd94db5df702af63bc5000bf7268e4283e4
-
SSDEEP
6144:qUGLLTIsN1MdHkqpXWGkMTClJzQ/LSrFDCHG:9GLL0sNqPkMTCvzSL
Score
4/10
Malware Config
Signatures
-
Drops file in Program Files directory 53 IoCs
description ioc Process File opened for modification C:\Program Files\Microsoft Office\Office14\MSOHTMED.EXE c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Mozilla Firefox\minidump-analyzer.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\misc.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\WORDICON.EXE c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Microsoft Games\Chess\Chess.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Internet Explorer\ExtExport.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Internet Explorer\iexplore.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\INFOPATH.EXE c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\PPTICO.EXE c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Mozilla Firefox\firefox.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Mozilla Firefox\plugin-container.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSOUC.EXE c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Internet Explorer\ieinstal.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\VideoLAN\VLC\uninstall.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ACCICONS.EXE c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\XLICONS.EXE c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Internet Explorer\iexplore.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSOHTMED.EXE c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSTORE.EXE c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Mozilla Firefox\pingsender.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Microsoft Games\FreeCell\FreeCell.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Microsoft Games\Minesweeper\MineSweeper.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Microsoft Games\Purble Place\PurblePlace.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Internet Explorer\ieinstal.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSTORDB.EXE c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Microsoft Games\Hearts\Hearts.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSACCESS.EXE c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\SETLANG.EXE c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Microsoft Games\Mahjong\Mahjong.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaire.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Google\Update\DisabledGoogleUpdate.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Mozilla Firefox\crashreporter.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Mozilla Firefox\uninstall\helper.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Internet Explorer\ielowutil.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ONENOTE.EXE c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Internet Explorer\iediagcmd.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Internet Explorer\ielowutil.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Microsoft Games\Solitaire\Solitaire.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\CNFNOT32.EXE c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\GRAPH.EXE c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSQRY32.EXE c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files\Mozilla Firefox\updater.exe c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\MSPUB.EXE c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\OIS.EXE c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\POWERPNT.EXE c7c9e35af12139ba0cb403b31952fd60.exe File opened for modification C:\Program Files (x86)\Microsoft Office\Office14\SELFCERT.EXE c7c9e35af12139ba0cb403b31952fd60.exe