Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
135s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
16/12/2022, 21:53
General
-
Target
Device/HarddiskVolume3/Users/carolina.navarrete/AppData/Local/Packages/microsoft.windowscommunicatio.xlsx
-
Size
642KB
-
MD5
b70739993a30dc6e643f2291fb43e54b
-
SHA1
0af067d31a8806a60cde2fac3be712702161d03b
-
SHA256
961a0bd8d2a2553a7976fc90f4fbe5cecb13ffdc337775aa7c1bf27151a8b7e7
-
SHA512
e4bcf0fa722c92d0a1cccddf9314e6a532853d31c26eeae6bd6ae35497ad34d1490f991bd7b014d13dbf718dc438f57f6a110a663442ad715236949ad3a9fdc9
-
SSDEEP
12288:ZBrBcT9xT6NvFgS7L2CgnGhq/LklC1sZrHp7IYvK05REYKqwIm8:Z7EGN7OqWsCylJUUDElqfm8
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 13 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\Device\HarddiskVolume3\Users\carolina.navarrete\AppData\Local\Packages\microsoft.windowscommunicatio.xlsx"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB