Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
134s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
27/11/2022, 05:09
General
-
Target
professional/ϵͳʹֲ.doc
-
Size
1.4MB
-
MD5
fb9768ee0c000c6e8e685a5648aa4b4b
-
SHA1
d68c6b68ee364320a05917d565e5bd416a013cb0
-
SHA256
50962280702c6d62479add6d5b3c0766a815a380ef2f98b9b41effdd44f084d0
-
SHA512
0bd2db2197a5b42a6a221f411556ab7d5ca700ac40f6a47115370a1c20458eafa9072dc5f988adfff8ae03c0db8dd185115c8b42b9efd242cb2fbba689ed8c64
-
SSDEEP
24576:qP6nGB7FXJ4wzZKdG4oIzsQd4hsA/UIbwrf1c77dg77k3paUQI38f:U6nGBLNzZKLdmhV/UIbwrf+77dg77k3L
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 15 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\professional\ϵͳʹֲ.doc" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB