Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
144s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
29/08/2024, 15:08
General
-
Target
英宇职业介绍管理系统/介绍信模板2.doc
-
Size
25KB
-
MD5
be8122628bf2ff233586b548440a5796
-
SHA1
136629c271d4bd47b8f842a92caf09ec8eda13df
-
SHA256
28a420c775c70071e9836f766769d732b328c16a4a5100c567ce4b6f87fdd4ea
-
SHA512
d3c5fb435d88e210e820cd1ace767c1666bd5f4c2e4d19cfec21f0a798245f795fbd50cd1cd84cd7a281a9963d2cbafa8673ec8c8044279526e8ed075dab1c97
-
SSDEEP
192:QPqlBe/4776ulvLE4bNLMQZva9BBrwsg:QPkBb6uphN4QZyBBr
Malware Config
Signatures
-
Enumerates connected drives 3 TTPs 1 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 13 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\英宇职业介绍管理系统\介绍信模板2.doc" /o ""1⤵
- Enumerates connected drives
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
263KB
MD5ff0e07eff1333cdf9fc2523d323dd654
SHA177a1ae0dd8dbc3fee65dd6266f31e2a564d088a4
SHA2563f925e0cc1542f09de1f99060899eafb0042bb9682507c907173c392115a44b5
SHA512b4615f995fab87661c2dbe46625aa982215d7bde27cafae221dca76087fe76da4b4a381943436fcac1577cb3d260d0050b32b7b93e3eb07912494429f126bb3d
-
Filesize
2KB
MD516a197818c11dbbd670ebd5a40e649bf
SHA1319b2a09d4352639fb7d019da83d571176fe8cc5
SHA256867eda54a7dc71f2106b2dd3a8bec019b520fc955749cc7642c79b0c7e797f3b
SHA512d420c96578907377b16832d3bb492e586697579d4ba128ce6d74014280733c500f837f75a1ee68b33f3c640415d28186887ef8f682ba5eb0250b76ad4656a6f8
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB