Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    147s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/05/2024, 03:43

General

  • Target

    Filters/License.rtf

  • Size

    62KB

  • MD5

    8b1e3300d8671530e75c4ea201945457

  • SHA1

    a7933ae925175f0cf6876506f56583cbbc18e966

  • SHA256

    ab5e632345d9ced4f8bcb210bf6e0922a18479e0620943acd613d7b5c68f473d

  • SHA512

    a58a7a2c473cf5e9d81664c30904c18a593c57a873ee9dfa20610594885be54fb92dec628dd3dc3d73c7d7f266b20c771447d9b1cd7d3fba7b66526ae6157184

  • SSDEEP

    768:zgv96cAAxEzYDlHnnDx2QAAw44RmkXOQQrWU0CW246jm/grBT8UojwKA7npBL4Cc:apRyHEQmtmMy4uIxju0TfTRY

Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\Filters\License.rtf" /o ""
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:4628

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\TCD9CA4.tmp\sist02.xsl

    Filesize

    245KB

    MD5

    f883b260a8d67082ea895c14bf56dd56

    SHA1

    7954565c1f243d46ad3b1e2f1baf3281451fc14b

    SHA256

    ef4835db41a485b56c2ef0ff7094bc2350460573a686182bc45fd6613480e353

    SHA512

    d95924a499f32d9b4d9a7d298502181f9e9048c21dbe0496fa3c3279b263d6f7d594b859111a99b1a53bd248ee69b867d7b1768c42e1e40934e0b990f0ce051e

  • memory/4628-17-0x00007FF8016B0000-0x00007FF8018A5000-memory.dmp

    Filesize

    2.0MB

  • memory/4628-19-0x00007FF8016B0000-0x00007FF8018A5000-memory.dmp

    Filesize

    2.0MB

  • memory/4628-2-0x00007FF7C1730000-0x00007FF7C1740000-memory.dmp

    Filesize

    64KB

  • memory/4628-0-0x00007FF7C1730000-0x00007FF7C1740000-memory.dmp

    Filesize

    64KB

  • memory/4628-6-0x00007FF8016B0000-0x00007FF8018A5000-memory.dmp

    Filesize

    2.0MB

  • memory/4628-9-0x00007FF8016B0000-0x00007FF8018A5000-memory.dmp

    Filesize

    2.0MB

  • memory/4628-11-0x00007FF7C1730000-0x00007FF7C1740000-memory.dmp

    Filesize

    64KB

  • memory/4628-10-0x00007FFFBFE10000-0x00007FFFBFE20000-memory.dmp

    Filesize

    64KB

  • memory/4628-18-0x00007FF8016B0000-0x00007FF8018A5000-memory.dmp

    Filesize

    2.0MB

  • memory/4628-7-0x00007FFFBFE10000-0x00007FFFBFE20000-memory.dmp

    Filesize

    64KB

  • memory/4628-13-0x00007FF8016B0000-0x00007FF8018A5000-memory.dmp

    Filesize

    2.0MB

  • memory/4628-15-0x00007FFFBEDC0000-0x00007FFFBEDD0000-memory.dmp

    Filesize

    64KB

  • memory/4628-16-0x00007FF8016B0000-0x00007FF8018A5000-memory.dmp

    Filesize

    2.0MB

  • memory/4628-14-0x00007FF8016B0000-0x00007FF8018A5000-memory.dmp

    Filesize

    2.0MB

  • memory/4628-4-0x00007FF7C1730000-0x00007FF7C1740000-memory.dmp

    Filesize

    64KB

  • memory/4628-12-0x00007FF8016B0000-0x00007FF8018A5000-memory.dmp

    Filesize

    2.0MB

  • memory/4628-8-0x00007FF7C1730000-0x00007FF7C1740000-memory.dmp

    Filesize

    64KB

  • memory/4628-1-0x00007FFFBFE10000-0x00007FFFBFE20000-memory.dmp

    Filesize

    64KB

  • memory/4628-20-0x00007FF8016B0000-0x00007FF8018A5000-memory.dmp

    Filesize

    2.0MB

  • memory/4628-23-0x00007FFFBEDC0000-0x00007FFFBEDD0000-memory.dmp

    Filesize

    64KB

  • memory/4628-22-0x00007FF7C0270000-0x00007FF7C0280000-memory.dmp

    Filesize

    64KB

  • memory/4628-21-0x00007FF8016B0000-0x00007FF8018A5000-memory.dmp

    Filesize

    2.0MB

  • memory/4628-5-0x00007FF80174D000-0x00007FF80174E000-memory.dmp

    Filesize

    4KB

  • memory/4628-521-0x00007FF8016B0000-0x00007FF8018A5000-memory.dmp

    Filesize

    2.0MB

  • memory/4628-548-0x00007FF7C1730000-0x00007FF7C1740000-memory.dmp

    Filesize

    64KB

  • memory/4628-550-0x00007FF7C1730000-0x00007FF7C1740000-memory.dmp

    Filesize

    64KB

  • memory/4628-551-0x00007FFFBFE10000-0x00007FFFBFE20000-memory.dmp

    Filesize

    64KB

  • memory/4628-549-0x00007FFFBFE10000-0x00007FFFBFE20000-memory.dmp

    Filesize

    64KB

  • memory/4628-547-0x00007FFFBFE10000-0x00007FFFBFE20000-memory.dmp

    Filesize

    64KB

  • memory/4628-546-0x00007FF7C1730000-0x00007FF7C1740000-memory.dmp

    Filesize

    64KB

  • memory/4628-545-0x00007FFFBFE10000-0x00007FFFBFE20000-memory.dmp

    Filesize

    64KB

  • memory/4628-552-0x00007FF8016B0000-0x00007FF8018A5000-memory.dmp

    Filesize

    2.0MB