Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
144s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
05/10/2023, 12:51
General
-
Target
Quote.docx
-
Size
695KB
-
MD5
33a047ae678c28ae1bdcc1c77b22fb29
-
SHA1
aa82703b68b870ab8f6990990e0bb4c54f422905
-
SHA256
02b8f16f6c30c9f18c88d3305fc2b97c9b4e55110a782d509fbc5f07793bb7e8
-
SHA512
079cb05eab0f161a39df10c46cd1ea99ab7e036dc5b0ddf8434bfd9ef05e9124db8eebbf8ea08e22ec717a345ca5172f49f2c990440341cb209fae0a491732f3
-
SSDEEP
12288:4ZjzMs8UpkflctUCQeBNb6pMQyD20044B/UNaTZkf+hFV6PqM4v0bZut1:4ZjzDpo4NdQ9/UNSZkf+zVfM4vouH
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 7 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\Quote.docx" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
MD506b9fa2588d47f30b8df72eb1f41abef
SHA148d99e1efeaba5030f7e7184a27181ab2b71128a
SHA2566abca8334cf34a16da88511242da6a55708966a9fe88cfd3b373d781c45c585f
SHA512614b2ba6c493bee127dd730a49c1401e7c3df598f645e1e78983a8852cc7d1922070f442a6db557f5c5a7f0fd4becda9aa85f440fc66227b8d07b4cabdf833f4
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB