Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
146s -
max time network
162s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
05/12/2022, 14:21
General
-
Target
a387380820b6792990b286997cf25c7ba9a48590850c1ee145a1d5797a825fe9.xls
-
Size
22KB
-
MD5
52f7228370f47af4b7962db1ee95fe39
-
SHA1
6df8e1a19d2af3cc7b73d2b4d0efae6d47ba5882
-
SHA256
a387380820b6792990b286997cf25c7ba9a48590850c1ee145a1d5797a825fe9
-
SHA512
18ef3e5a17c145952cb92e207b60ae99d02492db3bc2b4c4cb79f812865a2fc0014eca83c2f961843c1ff353c2c1b04c3c6705174ccb2cfe55bcbaf76c4093b5
-
SSDEEP
384:rHHHHWK4R23gsP9lX8IYPsjc/Xjzuw6OZ1B:rHHHHWK4R23h9R8IYPXuwPb
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 17 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\a387380820b6792990b286997cf25c7ba9a48590850c1ee145a1d5797a825fe9.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB