Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
22/08/2023, 15:18
Static task
static1
Behavioral task
behavioral1
Sample
67f7755b38baf0d02e2c7cbb5c552248226a156a900fe3e894b68cfa4de189b6_JC.xlsx
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
67f7755b38baf0d02e2c7cbb5c552248226a156a900fe3e894b68cfa4de189b6_JC.xlsx
Resource
win10v2004-20230703-en
General
-
Target
67f7755b38baf0d02e2c7cbb5c552248226a156a900fe3e894b68cfa4de189b6_JC.xlsx
-
Size
34KB
-
MD5
ad8a6df4344e078c7ca6ad1dc85d14f0
-
SHA1
0b367f9eb0c282c9f7871c493093bb529c408877
-
SHA256
67f7755b38baf0d02e2c7cbb5c552248226a156a900fe3e894b68cfa4de189b6
-
SHA512
67e943e3ffcc6a28a42c090202c70074c1f288ff57a89abd5af7322cc6c07add26025ac816e63d31dbe21683f4cc04a3dfdc6b1bd2ba02da5fc58dde7a048f10
-
SSDEEP
768:ZEIg8pQwFoJhaaaaaaa9q4QvOWuKrjRz0if9ZBQ:F9FoTaaaaaaa9qrD6e9ZBQ
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 4868 EXCEL.EXE -
Suspicious use of SetWindowsHookEx 12 IoCs
pid Process 4868 EXCEL.EXE 4868 EXCEL.EXE 4868 EXCEL.EXE 4868 EXCEL.EXE 4868 EXCEL.EXE 4868 EXCEL.EXE 4868 EXCEL.EXE 4868 EXCEL.EXE 4868 EXCEL.EXE 4868 EXCEL.EXE 4868 EXCEL.EXE 4868 EXCEL.EXE
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\67f7755b38baf0d02e2c7cbb5c552248226a156a900fe3e894b68cfa4de189b6_JC.xlsx"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:4868