Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ec04fa74a81f4bb02a506faf9db683a9c427fbbc8ae39896604cfa5a50ca3287

  • Size

    36KB

  • Sample

    230129-x2mq1saf82

  • MD5

    80c6c0c9a8e1addcab7bf40c341be4a5

  • SHA1

    881745186d6c383eddc34716ac180e754dfad718

  • SHA256

    ec04fa74a81f4bb02a506faf9db683a9c427fbbc8ae39896604cfa5a50ca3287

  • SHA512

    f2ba73969c5da777c896882eb111aa7a42bc289a2578c7e8bfb9180e18d8a2fd48fbfd757829d11bda7faea35f08546735d2a391539efad942622828cc5e574a

  • SSDEEP

    768:dPqNk3hbdlylKsgqopeJBWhZFGkE+cL2NdAJ4TGn5IO1WDAW:Vok3hbdlylKsgqopeJBWhZFGkE+cL2Nb

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

https://skill.fashion/wp-data.php

Targets

    • Target

      ec04fa74a81f4bb02a506faf9db683a9c427fbbc8ae39896604cfa5a50ca3287

    • Size

      36KB

    • MD5

      80c6c0c9a8e1addcab7bf40c341be4a5

    • SHA1

      881745186d6c383eddc34716ac180e754dfad718

    • SHA256

      ec04fa74a81f4bb02a506faf9db683a9c427fbbc8ae39896604cfa5a50ca3287

    • SHA512

      f2ba73969c5da777c896882eb111aa7a42bc289a2578c7e8bfb9180e18d8a2fd48fbfd757829d11bda7faea35f08546735d2a391539efad942622828cc5e574a

    • SSDEEP

      768:dPqNk3hbdlylKsgqopeJBWhZFGkE+cL2NdAJ4TGn5IO1WDAW:Vok3hbdlylKsgqopeJBWhZFGkE+cL2Nb

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

MITRE ATT&CK Enterprise v6

Tasks