Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
158s -
max time network
189s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
23/11/2022, 21:42
General
-
Target
6e71698d4fcd75756fbb43c3a3d0605194585040546e6e598ab5a057ed1b31e4.doc
-
Size
623KB
-
MD5
39649c560a9b5ed3df29675f3f17a7b9
-
SHA1
96f3eac3ae2fdad535ab22fff18b974a989d92d3
-
SHA256
6e71698d4fcd75756fbb43c3a3d0605194585040546e6e598ab5a057ed1b31e4
-
SHA512
267722035fe8b1ec5604ab78dbec9e865dab90d9421f36250c3ca6fb6c35413d33a4eb7a72124c409c8203e03865bc3debe7703662406720e8e7055188613f97
-
SSDEEP
12288:9Tgm+3jDGw7MHK3zl/2ul1zbSA11ihDC8/XJMGQo13gGSZG1e:um+3UHIgobSw14DC8vGu13gE
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 16 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\6e71698d4fcd75756fbb43c3a3d0605194585040546e6e598ab5a057ed1b31e4.doc" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB