Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
107s -
max time network
203s -
platform
windows11-21h2_x64 -
resource
win11-20231215-en -
resource tags
-
submitted
03/02/2024, 00:10
General
-
Target
wPalw_cwukn9gn/About/en-US/Bits.xml
-
Size
31KB
-
MD5
f6e746cd330a73b928c14770d9645bd0
-
SHA1
7eded72eb36035a93af3943b6f5f330082307968
-
SHA256
80d730b14bbb66b29360c108c8a57e09aa33e57dc1c9eaffcad5d66b3ef98c31
-
SHA512
6295e9062941daedcf4bf3e5beba03010afde880f43e95052dbce3fdb485c92c73b0cb57e9374f691c79fa43044cfcbbdb92cde189e1c3aff90024b19b525f1e
-
SSDEEP
768:Uw9+2pWqx80t3lMsQAZ5nV7smu7CQ62TDw4p2L:H+2Lx8Q3lLB+wx
Score
1/10
Malware Config
Signatures
-
Modifies Internet Explorer settings 1 TTPs 3 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\wPalw_cwukn9gn\About\en-US\Bits.xml"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\wPalw_cwukn9gn\About\en-US\Bits.xml2⤵
- Modifies Internet Explorer settings
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
756KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
756KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
756KB