Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
99s -
max time network
137s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
04/10/2022, 17:45
General
-
Target
d988b15cef71819086cd99d592fcfd3779ace7c8fdea0402e658e3f1a2b1dd0d.xll
-
Size
641KB
-
MD5
ff8a9aa0856bfabfd1a75054a957d90f
-
SHA1
b88a246c41af2c3073081bf740857df1e88f3a95
-
SHA256
d988b15cef71819086cd99d592fcfd3779ace7c8fdea0402e658e3f1a2b1dd0d
-
SHA512
f08bfada586860682b49681c0a4c428059355a1088ab5b6ac6bb78a93c0f14a62bd9e8c97c1135ef99ac82673ca22c81667287342279d3c90691326282459d2f
-
SSDEEP
12288:1fBUkVbwLSI5/Q8OF8bzbBSre4OiguWD242S6n4yam:XUrO2X1rMWeS64x
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 13 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\d988b15cef71819086cd99d592fcfd3779ace7c8fdea0402e658e3f1a2b1dd0d.xll"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB