Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 03:07

General

  • Target

    25c08e69b652db4a4a705be2e7632d65.doc

  • Size

    35KB

  • MD5

    25c08e69b652db4a4a705be2e7632d65

  • SHA1

    e8cb54c08c18478064cc48b5c9a3ad03b7cc51a3

  • SHA256

    4baf2c2588b59a2bb7c88a241ce17f88fddb6fb0517bac232d8843ba2d6f7c65

  • SHA512

    7e4cbe3a2400fb96f3fd3264ad946b62eb8393d9354a1b2ac9279ee87a2054faf9e084b7094cab4b08dd8f6ceec9b1ebd13297bd6681cc863d97155ba321fa2a

  • SSDEEP

    384:wgKilneYqnw5V0YeGD0e0UqZ+EvuC4Tv2bGujA7tq9tD:wgLeYqcGdq0ebEvuC1W7wb

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 2 IoCs

Processes

  • C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
    "C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\25c08e69b652db4a4a705be2e7632d65.doc"
    1⤵
    • Modifies Internet Explorer settings
    PID:1244
    • C:\Windows\splwow64.exe
      C:\Windows\splwow64.exe 12288
      2⤵
        PID:2688

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Roaming\Microsoft\Templates\Normal.dotm

      Filesize

      20KB

      MD5

      83d4ff4b79d186e221f38100c9e02921

      SHA1

      b8be0e6bdaeddf6dfd01e50bcedc7b501ba156df

      SHA256

      29b2015765c4aeb05d64ae878b7eb665c115148f9babfd42b0bec80c9eebf8c5

      SHA512

      7eaa9aeaf65c737c3ac1b5c9bf1d83b85027d598578f6840b265b820e2cc7d36d9644dda9892713331c8501ec8980f95ffee87be3b4603fbe80245acd54f35fd

    • memory/1244-0-0x000000002FC01000-0x000000002FC02000-memory.dmp

      Filesize

      4KB

    • memory/1244-1-0x000000005FFF0000-0x0000000060000000-memory.dmp

      Filesize

      64KB

    • memory/1244-2-0x00000000717DD000-0x00000000717E8000-memory.dmp

      Filesize

      44KB

    • memory/1244-12-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-16-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-20-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-24-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-25-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-23-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-22-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-21-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-19-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-17-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-15-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-14-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-13-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-11-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-9-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-10-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-8-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-7-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-31-0x00000000717DD000-0x00000000717E8000-memory.dmp

      Filesize

      44KB

    • memory/1244-32-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-33-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-35-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-42-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-41-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-40-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-39-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-38-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-37-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-36-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-34-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-43-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-52-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-51-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-50-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-49-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-48-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-47-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-46-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-45-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-61-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-63-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-71-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-72-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-70-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-69-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-68-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-67-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-66-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-65-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-62-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-60-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-59-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-58-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-57-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-56-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-55-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-53-0x0000000000640000-0x0000000000740000-memory.dmp

      Filesize

      1024KB

    • memory/1244-88-0x000000005FFF0000-0x0000000060000000-memory.dmp

      Filesize

      64KB