Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
197s -
max time network
203s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
25/11/2022, 19:03
General
-
Target
b13edfc8c6d6f7a12a374a8da107d83e62add72a9fc345314210c1e03a177d0d.xls
-
Size
81KB
-
MD5
ed851d8c39f94a28111f3a359c5d4ebd
-
SHA1
1604de905f76c719d40fea8545d55cb63a28c6ad
-
SHA256
b13edfc8c6d6f7a12a374a8da107d83e62add72a9fc345314210c1e03a177d0d
-
SHA512
2d610c94f5569b85f7118ea9ae725902b009aa700eb900918a8b03c17f4d50505be5843d4cca6b242bcf8eb8de88ac70e7c0be66707da305d73b40a444f15f13
-
SSDEEP
1536:07777PdlzLDkOmjnbS04Aht13MDJ1Hfi/Pidb2LKYSHZZW+:204AhH3MDJBKPidb2LKYSu+
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\b13edfc8c6d6f7a12a374a8da107d83e62add72a9fc345314210c1e03a177d0d.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB