Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Order-Requirment.xls

  • Size

    1.3MB

  • Sample

    230130-ny1c9sbh2s

  • MD5

    e71fb1473574eff602a8f8a1ef401c2b

  • SHA1

    dd5150036679b7a5b441c01c5cf5fca995466f8f

  • SHA256

    d4ca63a0241df852dd25c935565b3f36db27cb7744d4b5da45c1d0a9d0963218

  • SHA512

    f8598619db9e8538f767a4328b1045f69bbc0b2a92988ec177690166231e620c6854764324595ab678a2c7aa6e2e92bc19e9a6d75f5ec91eb9217fce04de8be3

  • SSDEEP

    24576:1LKMZyOZy8LKNZyeZybQ8ToW0cwmnAoNapt:1LK+5zLK3h2jTVwmPNO

Score
8/10

Malware Config

Targets

    • Target

      Order-Requirment.xls

    • Size

      1.3MB

    • MD5

      e71fb1473574eff602a8f8a1ef401c2b

    • SHA1

      dd5150036679b7a5b441c01c5cf5fca995466f8f

    • SHA256

      d4ca63a0241df852dd25c935565b3f36db27cb7744d4b5da45c1d0a9d0963218

    • SHA512

      f8598619db9e8538f767a4328b1045f69bbc0b2a92988ec177690166231e620c6854764324595ab678a2c7aa6e2e92bc19e9a6d75f5ec91eb9217fce04de8be3

    • SSDEEP

      24576:1LKMZyOZy8LKNZyeZybQ8ToW0cwmnAoNapt:1LK+5zLK3h2jTVwmPNO

    Score
    8/10
    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks