Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
01/06/2024, 17:26
240601-v1b7saad53 1001/06/2024, 17:08
240601-vn2lxahd3t 1001/06/2024, 16:56
240601-vfzscahg88 1001/06/2024, 16:43
240601-t8ga2agh31 1001/06/2024, 15:54
240601-tcf1dsga81 10Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
01/06/2024, 16:56
General
-
Target
Trojan;MSIL.FormBook.AFO!MTB.exe
-
Size
329KB
-
MD5
0b0d247aa1f24c2f5867b3bf29f69450
-
SHA1
48de9f34226fd7f637e2379365be035af5c0df1a
-
SHA256
a6e7292e734c3a15cfa654bba8dea72a2f55f1c24cf6bbdc2fd7e63887e9315a
-
SHA512
56ee21ee4ab9ece7542c7f3068889b0b98aa7d73274b71682ab39be5cce42efda99830b12910908f06ccb99a83024ac3096108d132fd44cddf4e83191c145706
-
SSDEEP
3072:Gn2Af+SLiJO+Y7mR9USl6yOiGB3PSQQivLXdn+mvo+vuChrZtwkYZBwOepe4PUeK:jE+yclwQKjdn+WPtYVJIoBfRT+tkH
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Trojan;MSIL.FormBook.AFO!MTB.exe"C:\Users\Admin\AppData\Local\Temp\Trojan;MSIL.FormBook.AFO!MTB.exe"1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx