Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
22/08/2023, 07:36
Static task
static1
Behavioral task
behavioral1
Sample
PO-384728493049.rtf
Resource
win7-20230712-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
PO-384728493049.rtf
Resource
win10v2004-20230703-en
2 signatures
150 seconds
General
-
Target
PO-384728493049.rtf
-
Size
88KB
-
MD5
5292d77a5796360358f012d31f4cd438
-
SHA1
ceb7009b833a4829f9017636445a07ca201a9db4
-
SHA256
404f0f676d94ffdc3cc0b4422a34a5aee31d06c815253ba0e7aeb0fed3905b9c
-
SHA512
d42e1a014c005935b79de13b975a2e840ef100abfc054b08b547398d3ba99834c6f2074d02b3570da4d2b2a01fbe52dda1ce955c66f0aa2bf20eccc62e03b4f6
-
SSDEEP
768:kwAbZSibMX9gRWjQOX1eDp9haTtsZ+Tnkfas:kwAlRxu1edzaT+Q1s
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
pid Process 4020 WINWORD.EXE 4020 WINWORD.EXE -
Suspicious use of SetWindowsHookEx 8 IoCs
pid Process 4020 WINWORD.EXE 4020 WINWORD.EXE 4020 WINWORD.EXE 4020 WINWORD.EXE 4020 WINWORD.EXE 4020 WINWORD.EXE 4020 WINWORD.EXE 4020 WINWORD.EXE