Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    159s
  • max time network
    139s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-uk
  • resource tags

    arch:x64arch:x86image:win10-20240404-uklocale:uk-uaos:windows10-1703-x64systemwindows
  • submitted
    30/09/2024, 13:00

General

  • Target

    проек ПІДОЗРИ Казарян.doc

  • Size

    122KB

  • MD5

    7237644ae941a94f2bd46489c89eb97c

  • SHA1

    5386594ce69f48989ca66910000004eec4557fe5

  • SHA256

    4adac8a428bfdff15cf4ac6abd44fdc911f28e5e65ed141869082d2a68e64907

  • SHA512

    5fcb9b7473b6faf23b6a4b78eb84cf9080b7fb583978aab20980f8780e760cae0015f19e90470a4c06c9815b81bd829bfa386d66d964b3711cad941c0a78b63d

  • SSDEEP

    1536:Fjh9qeVBSG3L+cydzvx5ssgWD/pVDdrMiPQwMorQZ5Z1h8Q9BRNDH3:Fjh9xRb+cydzv/sJWD/fdgiowK9B

Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious use of SetWindowsHookEx 14 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\проек ПІДОЗРИ Казарян.doc" /o ""
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:3364

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\TCD9FAF.tmp\sist02.xsl

    Filesize

    245KB

    MD5

    f883b260a8d67082ea895c14bf56dd56

    SHA1

    7954565c1f243d46ad3b1e2f1baf3281451fc14b

    SHA256

    ef4835db41a485b56c2ef0ff7094bc2350460573a686182bc45fd6613480e353

    SHA512

    d95924a499f32d9b4d9a7d298502181f9e9048c21dbe0496fa3c3279b263d6f7d594b859111a99b1a53bd248ee69b867d7b1768c42e1e40934e0b990f0ce051e

  • memory/3364-19-0x00007FFF4E0D0000-0x00007FFF4E2AB000-memory.dmp

    Filesize

    1.9MB

  • memory/3364-29-0x00007FFF4E0D0000-0x00007FFF4E2AB000-memory.dmp

    Filesize

    1.9MB

  • memory/3364-6-0x00007FFF0E160000-0x00007FFF0E170000-memory.dmp

    Filesize

    64KB

  • memory/3364-5-0x00007FFF4E0D0000-0x00007FFF4E2AB000-memory.dmp

    Filesize

    1.9MB

  • memory/3364-2-0x00007FFF0E160000-0x00007FFF0E170000-memory.dmp

    Filesize

    64KB

  • memory/3364-0-0x00007FFF0E160000-0x00007FFF0E170000-memory.dmp

    Filesize

    64KB

  • memory/3364-12-0x00007FFF4E0D0000-0x00007FFF4E2AB000-memory.dmp

    Filesize

    1.9MB

  • memory/3364-11-0x00007FFF4E0D0000-0x00007FFF4E2AB000-memory.dmp

    Filesize

    1.9MB

  • memory/3364-18-0x00007FFF0AF30000-0x00007FFF0AF40000-memory.dmp

    Filesize

    64KB

  • memory/3364-10-0x00007FFF4E0D0000-0x00007FFF4E2AB000-memory.dmp

    Filesize

    1.9MB

  • memory/3364-9-0x00007FFF4E0D0000-0x00007FFF4E2AB000-memory.dmp

    Filesize

    1.9MB

  • memory/3364-14-0x00007FFF0AF30000-0x00007FFF0AF40000-memory.dmp

    Filesize

    64KB

  • memory/3364-15-0x00007FFF4E0D0000-0x00007FFF4E2AB000-memory.dmp

    Filesize

    1.9MB

  • memory/3364-16-0x00007FFF4E0D0000-0x00007FFF4E2AB000-memory.dmp

    Filesize

    1.9MB

  • memory/3364-3-0x00007FFF0E160000-0x00007FFF0E170000-memory.dmp

    Filesize

    64KB

  • memory/3364-17-0x00007FFF4E0D0000-0x00007FFF4E2AB000-memory.dmp

    Filesize

    1.9MB

  • memory/3364-13-0x00007FFF4E0D0000-0x00007FFF4E2AB000-memory.dmp

    Filesize

    1.9MB

  • memory/3364-1-0x00007FFF4E175000-0x00007FFF4E176000-memory.dmp

    Filesize

    4KB

  • memory/3364-28-0x00007FFF4E0D0000-0x00007FFF4E2AB000-memory.dmp

    Filesize

    1.9MB

  • memory/3364-32-0x00007FFF4E0D0000-0x00007FFF4E2AB000-memory.dmp

    Filesize

    1.9MB

  • memory/3364-31-0x00007FFF4E0D0000-0x00007FFF4E2AB000-memory.dmp

    Filesize

    1.9MB

  • memory/3364-30-0x00007FFF4E0D0000-0x00007FFF4E2AB000-memory.dmp

    Filesize

    1.9MB

  • memory/3364-35-0x00007FFF4E0D0000-0x00007FFF4E2AB000-memory.dmp

    Filesize

    1.9MB

  • memory/3364-37-0x00007FFF4E0D0000-0x00007FFF4E2AB000-memory.dmp

    Filesize

    1.9MB

  • memory/3364-36-0x00007FFF4E0D0000-0x00007FFF4E2AB000-memory.dmp

    Filesize

    1.9MB

  • memory/3364-34-0x00007FFF4E0D0000-0x00007FFF4E2AB000-memory.dmp

    Filesize

    1.9MB

  • memory/3364-33-0x00007FFF4E0D0000-0x00007FFF4E2AB000-memory.dmp

    Filesize

    1.9MB

  • memory/3364-216-0x00007FFF4E0D0000-0x00007FFF4E2AB000-memory.dmp

    Filesize

    1.9MB

  • memory/3364-217-0x00007FFF4E175000-0x00007FFF4E176000-memory.dmp

    Filesize

    4KB

  • memory/3364-218-0x00007FFF4E0D0000-0x00007FFF4E2AB000-memory.dmp

    Filesize

    1.9MB

  • memory/3364-221-0x00007FFF4E0D0000-0x00007FFF4E2AB000-memory.dmp

    Filesize

    1.9MB

  • memory/3364-4-0x00007FFF4E0D0000-0x00007FFF4E2AB000-memory.dmp

    Filesize

    1.9MB