Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    138s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231025-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231025-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/11/2023, 09:02

General

  • Target

    PokerNewFeatures.xml

  • Size

    310B

  • MD5

    fa76d176160cfdcee17418f7acc6800c

  • SHA1

    a8916783d7b8c243e882a4e1b243805183c5b551

  • SHA256

    001a7cb85dcae0c23d23c4214f403bbf91ecb9e4ce92f847033f4669046d3b61

  • SHA512

    59d056026bd572341e75ae7e7bd01078c4d62dc37dbf9e24be881ceb28bfc8faef57fdb7d80fea312dcf9b7ad78d62c220b26557cba48583e6eb0caf479ddf24

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
    "C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\PokerNewFeatures.xml"
    1⤵
      PID:4252

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4252-0-0x00007FF8BFF50000-0x00007FF8BFF60000-memory.dmp

      Filesize

      64KB

    • memory/4252-1-0x00007FF8FFED0000-0x00007FF9000C5000-memory.dmp

      Filesize

      2.0MB

    • memory/4252-2-0x00007FF8FDA40000-0x00007FF8FDD09000-memory.dmp

      Filesize

      2.8MB

    • memory/4252-3-0x00007FF8BFF50000-0x00007FF8BFF60000-memory.dmp

      Filesize

      64KB

    • memory/4252-4-0x00007FF8FFED0000-0x00007FF9000C5000-memory.dmp

      Filesize

      2.0MB