653e1d9d2480e09b710faad26f81a30d1e7bc21dae7ba9faccced7c515f1ead7 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

RFQ- TENDE...4.xlsx

windows7-x64

8

RFQ- TENDE...4.xlsx

windows10-2004-x64

1

Sharing

General

Target

RFQ- TENDER 190616114.xlsx
Size

1.8MB
Sample

220925-mghw8afeep
MD5

bc811901a34af9b0310fdce3a15f4297
SHA1

dfae700ccd350396577fe1732ccbf451901e1f04
SHA256

653e1d9d2480e09b710faad26f81a30d1e7bc21dae7ba9faccced7c515f1ead7
SHA512

d405a33e989f9c58628d046d972ba98f0da342f7ef650fad17c035e54b9271eb5cd05a1b9947d26647a14258d0bf7c59036db171f3ab0ba5bebb3b7fdc4ac733
SSDEEP

49152:i/XEG+EAa1n4e3IQdmXQ7jmjPLPUuFoBEMUr:iPEeF3IemA7jmjPTURUr

Score

8^/10

Static task

static1

Behavioral task

behavioral1

Sample

RFQ- TENDER 190616114.xlsx

Resource

win7-20220812-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

RFQ- TENDER 190616114.xlsx

Resource

win10v2004-20220812-en

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  RFQ- TENDER 190616114.xlsx
- Size
  
  1.8MB
- MD5
  
  bc811901a34af9b0310fdce3a15f4297
- SHA1
  
  dfae700ccd350396577fe1732ccbf451901e1f04
- SHA256
  
  653e1d9d2480e09b710faad26f81a30d1e7bc21dae7ba9faccced7c515f1ead7
- SHA512
  
  d405a33e989f9c58628d046d972ba98f0da342f7ef650fad17c035e54b9271eb5cd05a1b9947d26647a14258d0bf7c59036db171f3ab0ba5bebb3b7fdc4ac733
- SSDEEP
  
  49152:i/XEG+EAa1n4e3IQdmXQ7jmjPLPUuFoBEMUr:iPEeF3IemA7jmjPTURUr
Score

8^/10
- Blocklisted process makes network request
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Exploitation for Client Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy