Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    10809646685.zip

  • Size

    8KB

  • Sample

    230616-vv6t7sff9t

  • MD5

    c54c2304da1721a19316a34f1054d8d7

  • SHA1

    a85611c0056310f62d88e3d624fb67cbd3c715d0

  • SHA256

    23298d6a3679deb4fbfede6dadd61acedf5c0f3d038d965b6600c547a744919f

  • SHA512

    14dc272b3084448d6df981dbe7ed25f66a08cecb2cb037445289f029840394530d99e8f289568bf2c601c21939ff5df1d0392930b7ee35e069b2097c9096a68a

  • SSDEEP

    192:1DKPfXnnXqL8khnTZLAAufbrjzhn0zhSfWYsT2PQ4xPjBqFuDSk:1DKP/Xo8Mn+A63hGSfvEgcFuDSk

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
ps1.dropper

http://ftpserver.winconnection.net/e/js

Targets

    • Target

      070184a649cc259d84990aff15542853838bd12e763ab54f68eb206443a3e2ef

    • Size

      80KB

    • MD5

      0de8e78ea7a4ba0c9fcc62e221b21ff8

    • SHA1

      f82c11f82f652151f09e40ec74688a9cbfe2eb38

    • SHA256

      070184a649cc259d84990aff15542853838bd12e763ab54f68eb206443a3e2ef

    • SHA512

      4ca9f6267d97aa99d4040cfb0f141a8592a272db5b1af1dd2a8cdb7aa75a9e1891ee520651a186778ba8f4eb60e94c03a4634b34ba806d994020ab95dcbf6eff

    • SSDEEP

      1536:44b5X/AkV+4VPJv69u6uRSqFBeWpAuhieR0R0R0R0R0R0R0RwMR4b5X/AkV+4VPA:44b5PAkV+4VBi9u6uRSqFBeWpAuUfR4K

    Score
    10/10
    • Blocklisted process makes network request

MITRE ATT&CK Enterprise v6

Tasks