Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

02/08/2023, 20:07

230802-yv9gwaah9s 8

02/08/2023, 20:04

230802-ytgepsah8v 8

Analysis

  • max time kernel
    143s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/08/2023, 20:07

General

  • Target

    idbk6758400000000000#########534400000000000#59t00000.rtf

  • Size

    32KB

  • MD5

    7eb05bcc9d2d6f3edaa773d3d602b1a1

  • SHA1

    7a18c0ae8230636baa80cf57a142c15268cd60bf

  • SHA256

    cbd47a384b39f793539e45c67dccebd52da0a0db7463ac6280d30889f1c1a823

  • SHA512

    00f1c76d5c33f5423a83494cb13bc67c91f408711a7d0a30710d576e2f2429943682de198f720b8da3d54d1a5407ed270f12f79893da36e985d79edc49c0c038

  • SSDEEP

    768:MriCXz3A4/j6USc2ci0qSZ2UdbRBZjgVnLQfjVNGxo42vY6:M7jlbwcBjPdVjgBx9il

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\idbk6758400000000000#########534400000000000#59t00000.rtf" /o ""
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:4492

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4492-134-0x00007FFCA8230000-0x00007FFCA8425000-memory.dmp

    Filesize

    2.0MB

  • memory/4492-133-0x00007FFC682B0000-0x00007FFC682C0000-memory.dmp

    Filesize

    64KB

  • memory/4492-137-0x00007FFC682B0000-0x00007FFC682C0000-memory.dmp

    Filesize

    64KB

  • memory/4492-138-0x00007FFCA8230000-0x00007FFCA8425000-memory.dmp

    Filesize

    2.0MB

  • memory/4492-140-0x00007FFC682B0000-0x00007FFC682C0000-memory.dmp

    Filesize

    64KB

  • memory/4492-139-0x00007FFC682B0000-0x00007FFC682C0000-memory.dmp

    Filesize

    64KB

  • memory/4492-141-0x00007FFCA8230000-0x00007FFCA8425000-memory.dmp

    Filesize

    2.0MB

  • memory/4492-136-0x00007FFCA8230000-0x00007FFCA8425000-memory.dmp

    Filesize

    2.0MB

  • memory/4492-135-0x00007FFC682B0000-0x00007FFC682C0000-memory.dmp

    Filesize

    64KB

  • memory/4492-142-0x00007FFCA8230000-0x00007FFCA8425000-memory.dmp

    Filesize

    2.0MB

  • memory/4492-143-0x00007FFCA8230000-0x00007FFCA8425000-memory.dmp

    Filesize

    2.0MB

  • memory/4492-144-0x00007FFCA8230000-0x00007FFCA8425000-memory.dmp

    Filesize

    2.0MB

  • memory/4492-146-0x00007FFCA8230000-0x00007FFCA8425000-memory.dmp

    Filesize

    2.0MB

  • memory/4492-147-0x00007FFCA8230000-0x00007FFCA8425000-memory.dmp

    Filesize

    2.0MB

  • memory/4492-149-0x00007FFCA8230000-0x00007FFCA8425000-memory.dmp

    Filesize

    2.0MB

  • memory/4492-148-0x00007FFCA8230000-0x00007FFCA8425000-memory.dmp

    Filesize

    2.0MB

  • memory/4492-145-0x00007FFC65EC0000-0x00007FFC65ED0000-memory.dmp

    Filesize

    64KB

  • memory/4492-150-0x00007FFC65EC0000-0x00007FFC65ED0000-memory.dmp

    Filesize

    64KB

  • memory/4492-153-0x00007FFCA8230000-0x00007FFCA8425000-memory.dmp

    Filesize

    2.0MB

  • memory/4492-154-0x00007FFCA8230000-0x00007FFCA8425000-memory.dmp

    Filesize

    2.0MB

  • memory/4492-155-0x00007FFCA8230000-0x00007FFCA8425000-memory.dmp

    Filesize

    2.0MB

  • memory/4492-176-0x00007FFC682B0000-0x00007FFC682C0000-memory.dmp

    Filesize

    64KB

  • memory/4492-177-0x00007FFC682B0000-0x00007FFC682C0000-memory.dmp

    Filesize

    64KB

  • memory/4492-179-0x00007FFC682B0000-0x00007FFC682C0000-memory.dmp

    Filesize

    64KB

  • memory/4492-178-0x00007FFC682B0000-0x00007FFC682C0000-memory.dmp

    Filesize

    64KB

  • memory/4492-180-0x00007FFCA8230000-0x00007FFCA8425000-memory.dmp

    Filesize

    2.0MB