Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
115s -
max time network
120s -
platform
windows7_x64 -
resource
win7 -
submitted
14/07/2020, 06:16
Static task
static1
Behavioral task
behavioral1
Sample
documento_884.xls
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
documento_884.xls
Resource
win10v200430
0 signatures
0 seconds
General
-
Target
documento_884.xls
-
Size
174KB
-
MD5
44a891cb03c5addf255c194991189e9c
-
SHA1
a947f1ba7d7991a588e8d17550c2f10ba705f74f
-
SHA256
1ddd4b9bda37b9ecef180809c26d489aacec2c8b30f64cdfb238d5b6cc552094
-
SHA512
40e2e16615127ad599420fcd38176d322422e2746f8465f206fb06f0628ccb56ef0bc8fecff17d7b92e563cbac56012cdd197170de2d933e269b0317fb70178b
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1612 EXCEL.EXE -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1612 EXCEL.EXE 1612 EXCEL.EXE 1612 EXCEL.EXE 1612 EXCEL.EXE -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1612 EXCEL.EXE
Processes
-
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\documento_884.xls1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: GetForegroundWindowSpam
PID:1612