Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

8

SecuriteIn...59.xls

windows7_x64

6

SecuriteIn...59.xls

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.DOC.Kryptik.Q.20559

  • Size

    296KB

  • Sample

    200713-5lxl1zcchx

  • MD5

    99d2053effd6a4b7aaf0d42ab3a065bf

  • SHA1

    345fb54bfaa4c458d15223d604de854600fcb2d8

  • SHA256

    473291804cc6e62a92dd5a63b6af620085143cb1fcfbc4baf42792aae2a36a73

  • SHA512

    338b62ae3bc03b455bb2e023d9322391bc5da77b93a7897ccc03dad55ecbbf05e19f55acf940122e539dc96e1377269609ed814af12ed3af9f8a9f731ff514e4

Score
10/10
macro

Malware Config

Targets

    • Target

      SecuriteInfo.com.DOC.Kryptik.Q.20559

    • Size

      296KB

    • MD5

      99d2053effd6a4b7aaf0d42ab3a065bf

    • SHA1

      345fb54bfaa4c458d15223d604de854600fcb2d8

    • SHA256

      473291804cc6e62a92dd5a63b6af620085143cb1fcfbc4baf42792aae2a36a73

    • SHA512

      338b62ae3bc03b455bb2e023d9322391bc5da77b93a7897ccc03dad55ecbbf05e19f55acf940122e539dc96e1377269609ed814af12ed3af9f8a9f731ff514e4

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Enumerates connected drives

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks