Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
197s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
25/11/2022, 19:25
General
-
Target
Աϱϸ/370283197710044321.xls
-
Size
13KB
-
MD5
601e349432edc82bcb097e629f8d10d3
-
SHA1
ac534640aaa6e223e1d5342a5f7c3a98c5164ccb
-
SHA256
5f2d34fea91108cacaa98efa1a244d77b40cfb3e13cad6318858cafc7fa6fd59
-
SHA512
b4f7aabe13da29fb9c1069a8d0e4f0466300725ae249247e5bbe18dc5143cc6828736bdbba1caa8067a6deb6bf96de482f2ce06ce3da4bad547908e5565a9b8b
-
SSDEEP
24:rqjLZduGX6EofdlENT0zZRmzDFjO53Tg7ZT/UZf6FEHYcLtYhpB1afVtY8aRrQPO:rYLZgDTRmzZS30ytcEHYc44fVq/U3+
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\Աϱϸ\370283197710044321.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB