Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
103s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
29/11/2022, 16:26
General
-
Target
f827ece173eae33096a77e5689539360d36518135da21b245e5e3ad3d4dbc0c8.xls
-
Size
31KB
-
MD5
5303a7cc51ab82b40143cfbda3a500cf
-
SHA1
612050d82cb8e5193c564e21e2b801952463d493
-
SHA256
f827ece173eae33096a77e5689539360d36518135da21b245e5e3ad3d4dbc0c8
-
SHA512
f9af1aa69208f622aa5bb0838b0f4d1cd186cf71bfa450909927928aee2083d0e70cf0c84cbc6756efdf79975b137400adc31edef7dc4dc2162c708ab2e7ee27
-
SSDEEP
768:/PPPPrL733uCwR2Eyk+4Z1aMvTeZ/XcyuHFEdvhB:/PPPPrL733uC6yk+FMvGspSB
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 18 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\f827ece173eae33096a77e5689539360d36518135da21b245e5e3ad3d4dbc0c8.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB