Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
24s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
06/08/2024, 21:47
General
-
Target
9ebea4b618862ff3eae23a12ef71bbf7afdb374893ac2d19937b6c57ef4dae6e.xlsm
-
Size
92KB
-
MD5
15902eb35bf5dd70c42cd4f9f5da376a
-
SHA1
4ab9d653d730070fdabd9da718d31bdf893d7b85
-
SHA256
9ebea4b618862ff3eae23a12ef71bbf7afdb374893ac2d19937b6c57ef4dae6e
-
SHA512
2ba33385f7cae4cad189dab044318e883f239d742c6f9f8c6981d8c71cad786df196abe54bdfc60b147d88bc04af88ed71914188a1dd4aebd91be2b3a34196a0
-
SSDEEP
1536:CguZCa6S5khUIHOzsItUux4znOSjhLM+vGa/M1NIpPkUlB7583fjncFYIIRFM:CgugapkhlHOzsAUuxaPjpM+d/Ms8ULaw
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Office loads VBA resources, possible macro or embedded object present
-
Enumerates system info in registry 2 TTPs 1 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\9ebea4b618862ff3eae23a12ef71bbf7afdb374893ac2d19937b6c57ef4dae6e.xlsm1⤵
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
44KB
-
Filesize
64KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
44KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB