Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
89s -
max time network
93s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
12/02/2024, 17:59
General
-
Target
hellokitty/NTRUEncrypt/src/ntru_crypto_ntru_encrypt.js
-
Size
50KB
-
MD5
e980116023c11cf26ef905db653542ce
-
SHA1
58bea3e0ae4e11d90b43d44ff2b1fcf862f0b591
-
SHA256
e75489d69e7a86206704fe731a23e39ed8e3fb8a281966a90fde7fd94754916a
-
SHA512
9d4497a015114ca842ef4d54ec252afb912435f1ffcb76150a80106b31700b58dfc81a37d4d24ea6bd53155f6e8917be2ccea49b7405fb4ca7237b28960b611b
-
SSDEEP
1536:P+N67lVqB8pgX400TvNt0vqB8p6bbfjPrDeW3P6pqB8kXel/T8+Ecdo8M:a67ju4NtISPr5fvXel/T8+Ddo8M
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 13 IoCs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\hellokitty\NTRUEncrypt\src\ntru_crypto_ntru_encrypt.js1⤵
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" /n "C:\Users\Admin\Desktop\UseRepair.xlt"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB