Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
15/07/2024, 09:54
General
-
Target
$PLUGINSDIR/filebulldog-visible.rtf
-
Size
59KB
-
MD5
a0c45a49e246a63bec45b9dbb6ef308d
-
SHA1
fd98c18b33147994a855730757a53fb5e9c7c491
-
SHA256
1e9342d49042bc43a4d0d613c78b46f80768e7366bc742bebad526e09a25dd87
-
SHA512
d5e85c94f7a88198583884519b4c93ae86240af7c31a220499275ae67a09476e84bfd4abd847db703c2d3bb561f4de5e9358af68a26247bdd0405a6e99934503
-
SSDEEP
384:4aUnnjrN79ozVzgNgYUlv6cUg+zWPVdwir4D3gI6Ow1O5aEtSpCMr1yjWFXHqgiM:4QYUlv6cUuVdwisTgtB1O5TSP1bhAkhv
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\filebulldog-visible.rtf" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
262KB
MD551d32ee5bc7ab811041f799652d26e04
SHA1412193006aa3ef19e0a57e16acf86b830993024a
SHA2566230814bf5b2d554397580613e20681752240ab87fd354ececf188c1eabe0e97
SHA5125fc5d889b0c8e5ef464b76f0c4c9e61bda59b2d1205ac9417cc74d6e9f989fb73d78b4eb3044a1a1e1f2c00ce1ca1bd6d4d07eeadc4108c7b124867711c31810
-
Filesize
2KB
MD5c67d5bacf36752dec23f9953fc820cad
SHA132587dbda2c8c5d092836fb1706137234b8ba924
SHA2564fad30d38459359299062204e0d10ffe71e639db06fa783fa2deb4dcafb94ce2
SHA5125f8fe38844c5571df3528b36ae4f91b8c8fbc9bed454c701f8f8f4de3daf557c8528bc6494a6201ff1abc7f72128f1904eb84d680e016c0a48236894cbed2aab
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB