Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

19/09/2023, 05:26

230919-f48ylafa5y 1

19/09/2023, 05:23

230919-f24k4afa5t 1

19/09/2023, 05:03

230919-fpsm3aeh8t 1

19/09/2023, 04:59

230919-fmqqpaeh6x 1

19/09/2023, 04:47

230919-fenlcsgh93 6

Analysis

  • max time kernel
    148s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2023, 04:59

General

  • Target

    Cyber-Security-Risk-Assessment-Checklist.xlsm

  • Size

    2.4MB

  • MD5

    84e43ceb986a39ff1380981d49c44bf8

  • SHA1

    1dd3905867402c113d4451bb7dbc43f6f527ac01

  • SHA256

    86469bcb1253f04fb7d982c0ece648ce2669d69c5fa4a902cfd8d7e431473dfc

  • SHA512

    cc698516543350145f560ea06f137d9498bd4e2662a24e5c359831c8d55e09fd3c6f1e62e225a07cf3ef5a619de190790a0bd20092b3df9a99717f44aaad446b

  • SSDEEP

    49152:34eo+vAhocukoyv9W7twhyubLXQ/zVdzsvPeAlCQQO0BA80aed:3rHvkbvI7zkmvzsvPeoC1Bid

Score
1/10

Malware Config

Signatures

  • Office loads VBA resources, possible macro or embedded object present
  • Enumerates system info in registry 2 TTPs 4 IoCs
  • Modifies Internet Explorer settings 1 TTPs 31 IoCs
  • Modifies registry class 64 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs

Processes

  • C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE
    "C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\Cyber-Security-Risk-Assessment-Checklist.xlsm
    1⤵
    • Enumerates system info in registry
    • Modifies Internet Explorer settings
    • Modifies registry class
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:2024
  • C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE
    "C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
    1⤵
    • Enumerates system info in registry
    • Suspicious use of SetWindowsHookEx
    PID:2492
  • C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE
    "C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
    1⤵
    • Enumerates system info in registry
    • NTFS ADS
    • Suspicious use of SetWindowsHookEx
    PID:2768
  • C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE
    "C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
    1⤵
    • Enumerates system info in registry
    • Suspicious use of SetWindowsHookEx
    PID:1732

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\~$Cyber-Security-Risk-Assessment-Checklist.xlsm

    Filesize

    165B

    MD5

    ff09371174f7c701e75f357a187c06e8

    SHA1

    57f9a638fd652922d7eb23236c80055a91724503

    SHA256

    e4ba04959837c27019a2349015543802439e152ddc4baf4e8c7b9d2b483362a8

    SHA512

    e4d01e5908e9f80b7732473ec6807bb7faa5425e3154d5642350f44d7220af3cffd277e0b67bcf03f1433ac26a26edb3ddd3707715b61d054b979fbb4b453882

  • memory/2024-1-0x00000000729AD000-0x00000000729B8000-memory.dmp

    Filesize

    44KB

  • memory/2024-0-0x000000005FFF0000-0x0000000060000000-memory.dmp

    Filesize

    64KB

  • memory/2024-12-0x00000000079D0000-0x0000000007AD0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-25-0x0000000007BF0000-0x0000000007DF0000-memory.dmp

    Filesize

    2.0MB

  • memory/2024-28-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-30-0x0000000007BF0000-0x0000000007DF0000-memory.dmp

    Filesize

    2.0MB

  • memory/2024-34-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-33-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-35-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-36-0x00000000079D0000-0x0000000007AD0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-49-0x00000000079D0000-0x0000000007AD0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-56-0x00000000729AD000-0x00000000729B8000-memory.dmp

    Filesize

    44KB

  • memory/2024-59-0x00000000079D0000-0x0000000007AD0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-70-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-71-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-69-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-68-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-67-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-72-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-74-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-76-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-75-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-73-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-77-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-78-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-79-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-81-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-80-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-82-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-83-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-84-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-85-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-86-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-87-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-88-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-89-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-90-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-91-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-92-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-94-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-95-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-96-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-93-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-97-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-98-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-99-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-101-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-100-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-102-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-104-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-103-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-105-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-106-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-107-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-108-0x00000000079D0000-0x0000000007AD0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-109-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-110-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-111-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-112-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-113-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-114-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-115-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-116-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-117-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-119-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-118-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-121-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-120-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-122-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-125-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-124-0x0000000007BF0000-0x0000000007DF0000-memory.dmp

    Filesize

    2.0MB

  • memory/2024-123-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-127-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-126-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-128-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-129-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-144-0x00000000079D0000-0x0000000007AD0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-156-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-158-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-229-0x00000000079D0000-0x0000000007AD0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-231-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-302-0x00000000079D0000-0x0000000007AD0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-304-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-375-0x00000000079D0000-0x0000000007AD0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-377-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-448-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-520-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-592-0x00000000079D0000-0x0000000007AD0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-594-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-667-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-738-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-810-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-882-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-954-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-956-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-1027-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-1099-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-1101-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-1172-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-1244-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-1246-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-1317-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-1389-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-1461-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-1533-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-1605-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-1677-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-1749-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-1751-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-1822-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-1894-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-1966-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-1967-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-2039-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-2118-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-2183-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-2255-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-2328-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-2398-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-2401-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-2472-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-2544-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-2616-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-2688-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-2760-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2024-2832-0x00000000004F0000-0x00000000005F0000-memory.dmp

    Filesize

    1024KB

  • memory/2492-154-0x00000000729AD000-0x00000000729B8000-memory.dmp

    Filesize

    44KB

  • memory/2492-665-0x00000000729AD000-0x00000000729B8000-memory.dmp

    Filesize

    44KB