Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    115s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/03/2024, 01:20

General

  • Target

    34d4f41be41415d251e917eec848e3a0e93a741ef5ac3d17e2781597c6d947a9.rtf

  • Size

    69KB

  • MD5

    e567a41dabaf821c0bc51aff2925c190

  • SHA1

    761fe57c2da0aa95562369e67370748239e390db

  • SHA256

    34d4f41be41415d251e917eec848e3a0e93a741ef5ac3d17e2781597c6d947a9

  • SHA512

    a6e43a2f22ccb5c70f5974193d0d0091f6b89a322002c37ce386ef8f2231ac0f58edd2bcb6cdde15f10387e26abcb09da2481b384ec9a408e700d2a8e611526e

  • SSDEEP

    1536:6TtLyGyu01akkh9wTt+XqVlknkkqdiuuYzsaOYC97jSVL6V:6tHwB+XqVlknkkqdiuuYzsaOr7jaLQ

Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\34d4f41be41415d251e917eec848e3a0e93a741ef5ac3d17e2781597c6d947a9.rtf" /o ""
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:556

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/556-0-0x00007FFC95AD0000-0x00007FFC95AE0000-memory.dmp

    Filesize

    64KB

  • memory/556-1-0x00007FFC95AD0000-0x00007FFC95AE0000-memory.dmp

    Filesize

    64KB

  • memory/556-3-0x00007FFCD5A50000-0x00007FFCD5C45000-memory.dmp

    Filesize

    2.0MB

  • memory/556-2-0x00007FFC95AD0000-0x00007FFC95AE0000-memory.dmp

    Filesize

    64KB

  • memory/556-5-0x00007FFCD5A50000-0x00007FFCD5C45000-memory.dmp

    Filesize

    2.0MB

  • memory/556-6-0x00007FFCD5A50000-0x00007FFCD5C45000-memory.dmp

    Filesize

    2.0MB

  • memory/556-7-0x00007FFC95AD0000-0x00007FFC95AE0000-memory.dmp

    Filesize

    64KB

  • memory/556-4-0x00007FFC95AD0000-0x00007FFC95AE0000-memory.dmp

    Filesize

    64KB

  • memory/556-8-0x00007FFCD5A50000-0x00007FFCD5C45000-memory.dmp

    Filesize

    2.0MB

  • memory/556-9-0x00007FFCD5A50000-0x00007FFCD5C45000-memory.dmp

    Filesize

    2.0MB

  • memory/556-11-0x00007FFC934B0000-0x00007FFC934C0000-memory.dmp

    Filesize

    64KB

  • memory/556-12-0x00007FFCD5A50000-0x00007FFCD5C45000-memory.dmp

    Filesize

    2.0MB

  • memory/556-13-0x00007FFCD5A50000-0x00007FFCD5C45000-memory.dmp

    Filesize

    2.0MB

  • memory/556-14-0x00007FFCD5A50000-0x00007FFCD5C45000-memory.dmp

    Filesize

    2.0MB

  • memory/556-10-0x00007FFCD5A50000-0x00007FFCD5C45000-memory.dmp

    Filesize

    2.0MB

  • memory/556-15-0x00007FFCD5A50000-0x00007FFCD5C45000-memory.dmp

    Filesize

    2.0MB

  • memory/556-16-0x00007FFCD5A50000-0x00007FFCD5C45000-memory.dmp

    Filesize

    2.0MB

  • memory/556-18-0x00007FFCD5A50000-0x00007FFCD5C45000-memory.dmp

    Filesize

    2.0MB

  • memory/556-17-0x00007FFCD5A50000-0x00007FFCD5C45000-memory.dmp

    Filesize

    2.0MB

  • memory/556-19-0x00007FFCD5A50000-0x00007FFCD5C45000-memory.dmp

    Filesize

    2.0MB

  • memory/556-20-0x00007FFC934B0000-0x00007FFC934C0000-memory.dmp

    Filesize

    64KB

  • memory/556-21-0x00007FFCD5A50000-0x00007FFCD5C45000-memory.dmp

    Filesize

    2.0MB

  • memory/556-22-0x00007FFCD5A50000-0x00007FFCD5C45000-memory.dmp

    Filesize

    2.0MB

  • memory/556-36-0x00007FFCD5A50000-0x00007FFCD5C45000-memory.dmp

    Filesize

    2.0MB

  • memory/556-37-0x00007FFCD5A50000-0x00007FFCD5C45000-memory.dmp

    Filesize

    2.0MB

  • memory/556-38-0x00007FFCD5A50000-0x00007FFCD5C45000-memory.dmp

    Filesize

    2.0MB

  • memory/556-39-0x00007FFCD5A50000-0x00007FFCD5C45000-memory.dmp

    Filesize

    2.0MB

  • memory/556-62-0x00007FFC95AD0000-0x00007FFC95AE0000-memory.dmp

    Filesize

    64KB

  • memory/556-63-0x00007FFC95AD0000-0x00007FFC95AE0000-memory.dmp

    Filesize

    64KB

  • memory/556-65-0x00007FFCD5A50000-0x00007FFCD5C45000-memory.dmp

    Filesize

    2.0MB

  • memory/556-64-0x00007FFC95AD0000-0x00007FFC95AE0000-memory.dmp

    Filesize

    64KB

  • memory/556-67-0x00007FFCD5A50000-0x00007FFCD5C45000-memory.dmp

    Filesize

    2.0MB

  • memory/556-66-0x00007FFC95AD0000-0x00007FFC95AE0000-memory.dmp

    Filesize

    64KB

  • memory/556-68-0x00007FFCD5A50000-0x00007FFCD5C45000-memory.dmp

    Filesize

    2.0MB

  • memory/556-69-0x00007FFCD5A50000-0x00007FFCD5C45000-memory.dmp

    Filesize

    2.0MB