Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
13/09/2022, 10:24
General
-
Target
f360899fe1d05975b2012d9d90d041ae6340bd94a22547910b03e28a039909c0.xlsx
-
Size
149KB
-
MD5
abbb9e9eccb51559ee57d18fde2c2fdf
-
SHA1
a79be50d127a068d335aac27cc3045492e9a4ee6
-
SHA256
f360899fe1d05975b2012d9d90d041ae6340bd94a22547910b03e28a039909c0
-
SHA512
923a54ff688252eee3a4611008a3bf7f89f7dd0f2efabe955226f5ace734ecb4025341cf6f9bfdf6ab9627f1ba95d4b89e2e6019439a40d151a80ab0dedf8d58
-
SSDEEP
3072:l7nfJPV//B+sSbyillOJ1Xf0IJgwUONsTWGgRMAo+wvFxMc3v+e:rPV3B0urD8ImsmWGgRHUr+e
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\f360899fe1d05975b2012d9d90d041ae6340bd94a22547910b03e28a039909c0.xlsx"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB