Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
186s -
max time network
193s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
25/11/2022, 19:10
General
-
Target
34d8035cd58a5ca5a25560f3e7b91c8a122931eeb4ee42a4bd877605f507fc66.xls
-
Size
13KB
-
MD5
24585ca31cf66cf2ef5918e8ca3dec25
-
SHA1
19c6409eb1fefa62aff11468f02d8a306a0f9cfc
-
SHA256
34d8035cd58a5ca5a25560f3e7b91c8a122931eeb4ee42a4bd877605f507fc66
-
SHA512
4b7893b7c8b1b37946fa326a7ab030b5614db4b41b02679fe59a9727803bbf5f1bb14572f2074b7a4a006e16a4df47443ee24f1f20de3f64015f28b39e3aadbd
-
SSDEEP
48:rYLZgDTRUzfS3eqtExcg4fVqI+ajMBbLU3+:UqDdU2P2xcDfjMBsO
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\34d8035cd58a5ca5a25560f3e7b91c8a122931eeb4ee42a4bd877605f507fc66.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB