Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
182s -
max time network
189s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
01/12/2022, 11:12
General
-
Target
5259d7433b6f33c335891bf48ef8ec55e00319f70be7c3dfd89f87e22a3bb14d.xls
-
Size
40KB
-
MD5
631630f782feb226bd82c133bcd12f41
-
SHA1
2fe53e5088a2f2e1bd3f3afecd4b78f5ddab8cf9
-
SHA256
5259d7433b6f33c335891bf48ef8ec55e00319f70be7c3dfd89f87e22a3bb14d
-
SHA512
49caeee4b607377c233fda44b8e8067db9ae7e5f31f548b8d49c36b04294dbc4419361b1802abe78f521ac1e60d8a2c238aecc0e739e3054eae65980488b37eb
-
SSDEEP
768:rBFFFpQ4EM47oo6Y4ejHFEAN7iCCljB9Jf7N9/8q1:rBFFFpQ4EM47oo6Y3OAN+r/8q1
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 13 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\5259d7433b6f33c335891bf48ef8ec55e00319f70be7c3dfd89f87e22a3bb14d.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB