Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    169s
  • max time network
    174s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/10/2023, 21:39

General

  • Target

    Sin título.rtf

  • Size

    593B

  • MD5

    d78471dd62328c25f6be29618b2fe247

  • SHA1

    a49896d5e86d83c656dbd4d36a2c4e410d170ef7

  • SHA256

    b0cbab17353c1a99bd21ebe079fd7ed15c75fbc2b84c918c3a988e5776c2dcd7

  • SHA512

    eb24ea9636ecb9d87fc7bb4264b7f7de58f78092b82783b6988a609639af07056388fb8b193585224de38223f11918d246110e46b0656868d23a756fb008b619

Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious use of SetWindowsHookEx 7 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\Sin título.rtf" /o ""
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:1096

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1096-1-0x00007FFF215B0000-0x00007FFF217A5000-memory.dmp

    Filesize

    2.0MB

  • memory/1096-0-0x00007FFEE1630000-0x00007FFEE1640000-memory.dmp

    Filesize

    64KB

  • memory/1096-2-0x00007FFEE1630000-0x00007FFEE1640000-memory.dmp

    Filesize

    64KB

  • memory/1096-4-0x00007FFEE1630000-0x00007FFEE1640000-memory.dmp

    Filesize

    64KB

  • memory/1096-3-0x00007FFF215B0000-0x00007FFF217A5000-memory.dmp

    Filesize

    2.0MB

  • memory/1096-5-0x00007FFF215B0000-0x00007FFF217A5000-memory.dmp

    Filesize

    2.0MB

  • memory/1096-6-0x00007FFEE1630000-0x00007FFEE1640000-memory.dmp

    Filesize

    64KB

  • memory/1096-8-0x00007FFF215B0000-0x00007FFF217A5000-memory.dmp

    Filesize

    2.0MB

  • memory/1096-7-0x00007FFEE1630000-0x00007FFEE1640000-memory.dmp

    Filesize

    64KB

  • memory/1096-9-0x00007FFF215B0000-0x00007FFF217A5000-memory.dmp

    Filesize

    2.0MB

  • memory/1096-10-0x00007FFF215B0000-0x00007FFF217A5000-memory.dmp

    Filesize

    2.0MB

  • memory/1096-11-0x00007FFF215B0000-0x00007FFF217A5000-memory.dmp

    Filesize

    2.0MB

  • memory/1096-12-0x00007FFF215B0000-0x00007FFF217A5000-memory.dmp

    Filesize

    2.0MB

  • memory/1096-13-0x00007FFF215B0000-0x00007FFF217A5000-memory.dmp

    Filesize

    2.0MB

  • memory/1096-14-0x00007FFF215B0000-0x00007FFF217A5000-memory.dmp

    Filesize

    2.0MB

  • memory/1096-15-0x00007FFF215B0000-0x00007FFF217A5000-memory.dmp

    Filesize

    2.0MB

  • memory/1096-16-0x00007FFEDF5D0000-0x00007FFEDF5E0000-memory.dmp

    Filesize

    64KB

  • memory/1096-17-0x00007FFF215B0000-0x00007FFF217A5000-memory.dmp

    Filesize

    2.0MB

  • memory/1096-18-0x00007FFEDF5D0000-0x00007FFEDF5E0000-memory.dmp

    Filesize

    64KB

  • memory/1096-22-0x00007FFF215B0000-0x00007FFF217A5000-memory.dmp

    Filesize

    2.0MB

  • memory/1096-23-0x00007FFF215B0000-0x00007FFF217A5000-memory.dmp

    Filesize

    2.0MB

  • memory/1096-24-0x00007FFF215B0000-0x00007FFF217A5000-memory.dmp

    Filesize

    2.0MB

  • memory/1096-48-0x00007FFEE1630000-0x00007FFEE1640000-memory.dmp

    Filesize

    64KB

  • memory/1096-49-0x00007FFEE1630000-0x00007FFEE1640000-memory.dmp

    Filesize

    64KB

  • memory/1096-50-0x00007FFEE1630000-0x00007FFEE1640000-memory.dmp

    Filesize

    64KB

  • memory/1096-51-0x00007FFF215B0000-0x00007FFF217A5000-memory.dmp

    Filesize

    2.0MB

  • memory/1096-52-0x00007FFEE1630000-0x00007FFEE1640000-memory.dmp

    Filesize

    64KB

  • memory/1096-53-0x00007FFF215B0000-0x00007FFF217A5000-memory.dmp

    Filesize

    2.0MB