Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    45s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    29/06/2024, 22:03

General

  • Target

    396327235cdf46587f502e999428fe08b9f4584eabf83f0f63e512c675191be7.xlsm

  • Size

    91KB

  • MD5

    e4fa2fa88011cf436fb6901b2f92597d

  • SHA1

    51a170cb2ed025fb663cf8b86567a0be74f584b8

  • SHA256

    396327235cdf46587f502e999428fe08b9f4584eabf83f0f63e512c675191be7

  • SHA512

    6b762511bd7a6057339bd32e20ee9d2f4e86b6983ad2f8c2c19a971e5b8e80b560afbe2d2a1644eebf18e753d869fbe95aeeac19c0332069034220fb95521578

  • SSDEEP

    1536:CguZCa6S5khUI1UmZAYdWG4znOSjhLM+vGa/M1NIpPkUlB7583fjncFYIIzFF4:Cgugapkhl1vAYvaPjpM+d/Ms8ULavLcd

Score
1/10

Malware Config

Signatures

  • Office loads VBA resources, possible macro or embedded object present
  • Enumerates system info in registry 2 TTPs 1 IoCs
  • Modifies Internet Explorer settings 1 TTPs 9 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE
    "C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\396327235cdf46587f502e999428fe08b9f4584eabf83f0f63e512c675191be7.xlsm
    1⤵
    • Enumerates system info in registry
    • Modifies Internet Explorer settings
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:2256

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2256-0-0x000000005FFF0000-0x0000000060000000-memory.dmp

    Filesize

    64KB

  • memory/2256-1-0x00000000725FD000-0x0000000072608000-memory.dmp

    Filesize

    44KB

  • memory/2256-3-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-17-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-16-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-15-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-14-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-13-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-12-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-11-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-10-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-9-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-8-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-7-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-6-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-5-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-4-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-2-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-65-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-64-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-63-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-62-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-61-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-60-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-59-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-58-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-57-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-56-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-55-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-54-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-53-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-52-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-51-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-50-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-49-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-48-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-47-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-46-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-45-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-44-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-43-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-42-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-41-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-40-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-39-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-38-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-37-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-36-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-35-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-34-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-33-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-32-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-31-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-30-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-29-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-28-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-27-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-26-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-25-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-24-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-23-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-22-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-21-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-20-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-18-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-19-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-66-0x00000000725FD000-0x0000000072608000-memory.dmp

    Filesize

    44KB

  • memory/2256-67-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-68-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-69-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB

  • memory/2256-70-0x00000000003C0000-0x00000000004C0000-memory.dmp

    Filesize

    1024KB