Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

08/05/2024, 09:31

240508-lg4m9adg9x 1

08/05/2024, 09:29

240508-lfyevagc83 4

08/05/2024, 09:27

240508-le2qwagc55 1

08/05/2024, 09:26

240508-lep23sgc42 1

08/05/2024, 09:26

240508-leabmagc26 4

08/05/2024, 09:22

240508-lcdk9sde2s 1

08/05/2024, 09:19

240508-lancpaga26 1

Analysis

  • max time kernel
    456s
  • max time network
    458s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240419-en
  • resource tags

    arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    08/05/2024, 09:31

General

  • Target

    Material.pptx

  • Size

    927KB

  • MD5

    2cbb0e2816f9c3ec8881272d6b088df4

  • SHA1

    07aedc1298c5e5540a03cf40c3a284b238606fbf

  • SHA256

    07aa835f47f75648d4c8cc618ce1aef63b52a2ddad6d51779470be906f3a9e7c

  • SHA512

    5b9fa6ac27495c1346bd81a3f32fd51f66641ad713acabb224c04fef891cf2f0bc94b4cd59844f321324ba8b371891d0a455129d6dcc5e2cb7d1bc9cc8e11934

  • SSDEEP

    12288:Ze7Q5Bvvkx7vjOoYuGWk1iGjWx7izqe2UOsKm4oP7Aqu/wkRxuuDl5685Hferoui:MUq//rkZAibXEPaYx5LfeUuVuGqRRcM

Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE" "C:\Users\Admin\AppData\Local\Temp\Material.pptx" /ou ""
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:4424

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4424-0-0x00007FFF0D390000-0x00007FFF0D3A0000-memory.dmp

    Filesize

    64KB

  • memory/4424-2-0x00007FFF0D390000-0x00007FFF0D3A0000-memory.dmp

    Filesize

    64KB

  • memory/4424-3-0x00007FFF0D390000-0x00007FFF0D3A0000-memory.dmp

    Filesize

    64KB

  • memory/4424-4-0x00007FFF0D390000-0x00007FFF0D3A0000-memory.dmp

    Filesize

    64KB

  • memory/4424-5-0x00007FFF4D3A3000-0x00007FFF4D3A4000-memory.dmp

    Filesize

    4KB

  • memory/4424-1-0x00007FFF0D390000-0x00007FFF0D3A0000-memory.dmp

    Filesize

    64KB

  • memory/4424-6-0x00007FFF4D300000-0x00007FFF4D509000-memory.dmp

    Filesize

    2.0MB

  • memory/4424-9-0x00007FFF4D300000-0x00007FFF4D509000-memory.dmp

    Filesize

    2.0MB

  • memory/4424-8-0x00007FFF4D300000-0x00007FFF4D509000-memory.dmp

    Filesize

    2.0MB

  • memory/4424-7-0x00007FFF4D300000-0x00007FFF4D509000-memory.dmp

    Filesize

    2.0MB

  • memory/4424-10-0x00007FFF0B100000-0x00007FFF0B110000-memory.dmp

    Filesize

    64KB

  • memory/4424-11-0x00007FFF4D300000-0x00007FFF4D509000-memory.dmp

    Filesize

    2.0MB

  • memory/4424-12-0x00007FFF4D300000-0x00007FFF4D509000-memory.dmp

    Filesize

    2.0MB

  • memory/4424-13-0x00007FFF4D300000-0x00007FFF4D509000-memory.dmp

    Filesize

    2.0MB

  • memory/4424-14-0x00007FFF0B100000-0x00007FFF0B110000-memory.dmp

    Filesize

    64KB

  • memory/4424-16-0x00007FFF4D300000-0x00007FFF4D509000-memory.dmp

    Filesize

    2.0MB

  • memory/4424-21-0x00007FFF4D300000-0x00007FFF4D509000-memory.dmp

    Filesize

    2.0MB

  • memory/4424-20-0x00007FFF4D300000-0x00007FFF4D509000-memory.dmp

    Filesize

    2.0MB

  • memory/4424-22-0x00007FFF4D300000-0x00007FFF4D509000-memory.dmp

    Filesize

    2.0MB

  • memory/4424-19-0x00007FFF4D300000-0x00007FFF4D509000-memory.dmp

    Filesize

    2.0MB

  • memory/4424-18-0x00007FFF4D300000-0x00007FFF4D509000-memory.dmp

    Filesize

    2.0MB

  • memory/4424-15-0x00007FFF4D300000-0x00007FFF4D509000-memory.dmp

    Filesize

    2.0MB

  • memory/4424-17-0x00007FFF4D300000-0x00007FFF4D509000-memory.dmp

    Filesize

    2.0MB

  • memory/4424-44-0x00007FFF0D390000-0x00007FFF0D3A0000-memory.dmp

    Filesize

    64KB

  • memory/4424-45-0x00007FFF0D390000-0x00007FFF0D3A0000-memory.dmp

    Filesize

    64KB

  • memory/4424-47-0x00007FFF0D390000-0x00007FFF0D3A0000-memory.dmp

    Filesize

    64KB

  • memory/4424-46-0x00007FFF0D390000-0x00007FFF0D3A0000-memory.dmp

    Filesize

    64KB

  • memory/4424-48-0x00007FFF4D300000-0x00007FFF4D509000-memory.dmp

    Filesize

    2.0MB