Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
998s -
max time network
947s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
21/10/2023, 12:59
General
-
Target
ETSICatalog.csv
-
Size
310KB
-
MD5
215be5cfe3a1cc69af27642ee17a3300
-
SHA1
105de486345ddd5ee3eb4cc178a074719b6bbafe
-
SHA256
617c68270859b579855a12f00537bbcca0a027ef2070fd30776e63a3bf7613cd
-
SHA512
4c1c11e87d9999336009b7bb4e7b41b2c07b684cfa7a9f4590085af7a1e495a3a83777a3ecd16fa2cbfa996355dfe7aca122143dd2813b72f6f1a88ba99f618f
-
SSDEEP
3072:lp8/1YIDjpvFR0nEnInWnXwp9bM9jLd5/rR07s3fM4PrqqLuNnCmWuHDvdDzE8q6:qDSKLKDQDp3/opQepaZluXo6X5
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 14 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\ETSICatalog.csv"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB