Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
137s -
max time network
158s -
platform
windows11-21h2_x64 -
resource
win11-20231215-en -
resource tags
-
submitted
03/02/2024, 00:10
General
-
Target
wPalw_cwukn9gn/About/en-US/AVSValidationGP.xml
-
Size
1KB
-
MD5
fb42a7b5318536ea7eeff2f42abd0c0e
-
SHA1
810edfd0827c3b7c28bdd8eeacf60cf67f7958f3
-
SHA256
153453be5f26fe1a35a50df05754cc2e3a00cdd9126dea085884aff2ba39802d
-
SHA512
fb66022707ab67c88867c5b07b1790ee6f087c223649f23a2afe72723ebdbead47aabd00b353916af3e4dff68bbf96fd4ce29819f5576353c9b6ac8c0119a68e
Score
1/10
Malware Config
Signatures
-
Modifies Internet Explorer settings 1 TTPs 3 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\wPalw_cwukn9gn\About\en-US\AVSValidationGP.xml"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\wPalw_cwukn9gn\About\en-US\AVSValidationGP.xml2⤵
- Modifies Internet Explorer settings
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
756KB
-
Filesize
756KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
756KB
-
Filesize
64KB
-
Filesize
64KB