Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
101s -
max time network
32s -
platform
windows7_x64 -
resource
win7 -
submitted
14/07/2020, 06:42
Static task
static1
Behavioral task
behavioral1
Sample
3a1ec9db2652631dc65e24a95765c87cdcdabf1ec82be13760095183027ae51e.xls
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
3a1ec9db2652631dc65e24a95765c87cdcdabf1ec82be13760095183027ae51e.xls
Resource
win10v200430
0 signatures
0 seconds
General
-
Target
3a1ec9db2652631dc65e24a95765c87cdcdabf1ec82be13760095183027ae51e.xls
-
Size
190KB
-
MD5
e6944f1d6b5092ba44b56bc2d361a0d8
-
SHA1
ca54d2a2a6a4eeb6e25706b18d1342ca24e91afc
-
SHA256
3a1ec9db2652631dc65e24a95765c87cdcdabf1ec82be13760095183027ae51e
-
SHA512
51fa3a982815c411409ed1f6d60a03355ea834b678954b525af23084fd882ca63a1d4075f5d845fa6abf28fcee74c85b9167c592f7d4a122b23795ea9428e6e6
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1068 EXCEL.EXE -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1068 EXCEL.EXE 1068 EXCEL.EXE 1068 EXCEL.EXE 1068 EXCEL.EXE -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1068 EXCEL.EXE
Processes
-
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\3a1ec9db2652631dc65e24a95765c87cdcdabf1ec82be13760095183027ae51e.xls1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: GetForegroundWindowSpam
PID:1068