Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
99s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
28/12/2022, 04:39
General
-
Target
Instalador SisFarmacia V4.0/Software para Famacias - Archivos Excel/Productos.xls
-
Size
102KB
-
MD5
492fe38636bc79ab014a3f5256da87f1
-
SHA1
0dde3994e117a85eec8f136f1d12eaaf0a894b8f
-
SHA256
015f85f1282c119ec7c4c10625049ddc2550214cac0b6fa3cef603106722572a
-
SHA512
b4fde10ac8a3d1927b7a8d63d42eac946e820b8eadaf325776ba033e97a5402325769b9c06f7bc37fa20e1490e99c09a40c0f33bed032de1684ef75686634dfa
-
SSDEEP
3072:GoP+SKa85Y11//fs5cClfZw2gmVXqEQbLitAP:vP+SKa85Y11//fs5cClfZw2gmVXqEQSE
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\Instalador SisFarmacia V4.0\Software para Famacias - Archivos Excel\Productos.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB