Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1796s -
max time network
1500s -
platform
windows11-21h2_x64 -
resource
win11-20231215-en -
resource tags
-
submitted
10/01/2024, 06:09
General
-
Target
=?UTF-8?B?0J7RgNC00YvQvdC60LAgMl9PSVBfdi4xMC43INC00LXQutCw0LHRgNGMIDIwMjMueGxz?=.xls
-
Size
4.4MB
-
MD5
ad8b6dc19ffc111fc34971c8ee0ca180
-
SHA1
3a5a41ccb0aaff5cc73fc7508cf79483c8589e64
-
SHA256
4987c46fe48cea545986cb8f35b8aebad80d4cb3e797facd8fb10dd59ed43b47
-
SHA512
58e72034a3648c22a37bb6a38ae1af2cd2c8b305856154dd1c9677ac9939e1a8849b1c43f02f1be5d5f5b9a996255887760b5fa9acf6c8a3b8caaa16e756d8e7
-
SSDEEP
24576:krXitTlyGIObbCrpB2VjXOkE9r/eGFiVvduGPbd/0zmdo5gUOmcua3bWQtasB4KV:RsuduO1mcuZ4z
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 64 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\=_UTF-8_B_0J7RgNC00YvQvdC60LAgMl9PSVBfdi4xMC43INC00LXQutCw0LHRgNGMIDIwMjMueGxz_=.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
756KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB