Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
29/05/2024, 01:19
General
-
Target
3a23505e90df25fe34b92eebb73fa08d4571d3f12b12807711325d16a3ec2db9.xlam
-
Size
14KB
-
MD5
613bc31f40a70c787c70e5fa82ba3da6
-
SHA1
d689a647a7254e5a9d349a61e951c0629b43a473
-
SHA256
3a23505e90df25fe34b92eebb73fa08d4571d3f12b12807711325d16a3ec2db9
-
SHA512
2495e1cc29f8cc5749365574637dc684c48e2fba9013b4b0b226208b793690951e35ceb813723d72343128c853f1705c3964a4a36bc529bbf4ef1e8f50ebab17
-
SSDEEP
384:q4hFXIZwODvsHq7EVKn9keeGZkauRqKos/FUK:5hNIjJHnue/ka1KosuK
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\3a23505e90df25fe34b92eebb73fa08d4571d3f12b12807711325d16a3ec2db9.xlam"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB