Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
4de715cc8efe759c913068845833cf69bc46e3ab96ce6ee9a005468638b4415a_JC.xlsx
-
Size
599KB
-
Sample
230826-rtd61sah83
-
MD5
f383adacdac479322a5c37c90edf8162
-
SHA1
d3bf7075832e55aabe76f5256d58bb45f18f9704
-
SHA256
4de715cc8efe759c913068845833cf69bc46e3ab96ce6ee9a005468638b4415a
-
SHA512
0f73a5b978e3f27a43abd1bb2a3bc6a9ae04a11c5ac98ed180c60f31416080a49f0c0d194eb0bc14c0db9585e382cd4e7e471647bbc62a9d9e6ff570bebae481
-
SSDEEP
12288:EEnW3raLk/10xzHtsYpjRLh4Oj0zkRaFwGy5OQPF5EGfeKLRh:NZXFOYpjh+I0gR/MQP3Jfeo
Static task
static1
Behavioral task
behavioral1
Sample
4de715cc8efe759c913068845833cf69bc46e3ab96ce6ee9a005468638b4415a_JC.xlam
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
4de715cc8efe759c913068845833cf69bc46e3ab96ce6ee9a005468638b4415a_JC.xlam
Resource
win10v2004-20230824-en
Malware Config
Extracted
https://uploaddeimagens.com.br/images/004/563/621/original/universo_vbs.jpeg?1690931855
https://uploaddeimagens.com.br/images/004/563/621/original/universo_vbs.jpeg?1690931855
Targets
-
-
Target
4de715cc8efe759c913068845833cf69bc46e3ab96ce6ee9a005468638b4415a_JC.xlsx
-
Size
599KB
-
MD5
f383adacdac479322a5c37c90edf8162
-
SHA1
d3bf7075832e55aabe76f5256d58bb45f18f9704
-
SHA256
4de715cc8efe759c913068845833cf69bc46e3ab96ce6ee9a005468638b4415a
-
SHA512
0f73a5b978e3f27a43abd1bb2a3bc6a9ae04a11c5ac98ed180c60f31416080a49f0c0d194eb0bc14c0db9585e382cd4e7e471647bbc62a9d9e6ff570bebae481
-
SSDEEP
12288:EEnW3raLk/10xzHtsYpjRLh4Oj0zkRaFwGy5OQPF5EGfeKLRh:NZXFOYpjh+I0gR/MQP3Jfeo
Score10/10-
Blocklisted process makes network request
-
Drops startup file
-
Drops file in System32 directory
-