Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

PO-4501226...01.rtf

windows7-x64

10

PO-4501226...01.rtf

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PO-4501226855_WJO-001.doc

  • Size

    119KB

  • Sample

    230705-qkhbmsce75

  • MD5

    91ac731fae3c6e874267188c9892cabb

  • SHA1

    ddcc9dc0990575d6a78bff10c8d1b2981ab23809

  • SHA256

    f4b2683cb85506c0d99935f42241f32053bade36fc7d5d13d3317a690a54e66a

  • SHA512

    6f51b81ee27a3a220b430d626ef32fcfb4f0c1f0d2dff903de9b99aa05f2b1f155e757fc1de16ea49a76782274b44de8551062d8c31f24d707771cdb1a3fc037

  • SSDEEP

    1536:uqcdGzSxRkMhejQM6CIaUxohWncjrOfi6TFHn2O0gRT/Iw2MsWEd7UwmrigQ9j+2:uqcR/OIaUXP/YiQF+og5N6

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

http://cryptersandtools.minhacasa.tv/e/e

Targets

    • Target

      PO-4501226855_WJO-001.doc

    • Size

      119KB

    • MD5

      91ac731fae3c6e874267188c9892cabb

    • SHA1

      ddcc9dc0990575d6a78bff10c8d1b2981ab23809

    • SHA256

      f4b2683cb85506c0d99935f42241f32053bade36fc7d5d13d3317a690a54e66a

    • SHA512

      6f51b81ee27a3a220b430d626ef32fcfb4f0c1f0d2dff903de9b99aa05f2b1f155e757fc1de16ea49a76782274b44de8551062d8c31f24d707771cdb1a3fc037

    • SSDEEP

      1536:uqcdGzSxRkMhejQM6CIaUxohWncjrOfi6TFHn2O0gRT/Iw2MsWEd7UwmrigQ9j+2:uqcR/OIaUXP/YiQF+og5N6

    Score
    10/10

    • Blocklisted process makes network request

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks