Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

4de715cc8e...C.xlam

windows7-x64

10

4de715cc8e...C.xlam

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4de715cc8efe759c913068845833cf69bc46e3ab96ce6ee9a005468638b4415a_JC.xlsx

  • Size

    599KB

  • Sample

    230826-rtd61sah83

  • MD5

    f383adacdac479322a5c37c90edf8162

  • SHA1

    d3bf7075832e55aabe76f5256d58bb45f18f9704

  • SHA256

    4de715cc8efe759c913068845833cf69bc46e3ab96ce6ee9a005468638b4415a

  • SHA512

    0f73a5b978e3f27a43abd1bb2a3bc6a9ae04a11c5ac98ed180c60f31416080a49f0c0d194eb0bc14c0db9585e382cd4e7e471647bbc62a9d9e6ff570bebae481

  • SSDEEP

    12288:EEnW3raLk/10xzHtsYpjRLh4Oj0zkRaFwGy5OQPF5EGfeKLRh:NZXFOYpjh+I0gR/MQP3Jfeo

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
ps1.dropper

https://uploaddeimagens.com.br/images/004/563/621/original/universo_vbs.jpeg?1690931855
exe.dropper

https://uploaddeimagens.com.br/images/004/563/621/original/universo_vbs.jpeg?1690931855

Targets

    • Target

      4de715cc8efe759c913068845833cf69bc46e3ab96ce6ee9a005468638b4415a_JC.xlsx

    • Size

      599KB

    • MD5

      f383adacdac479322a5c37c90edf8162

    • SHA1

      d3bf7075832e55aabe76f5256d58bb45f18f9704

    • SHA256

      4de715cc8efe759c913068845833cf69bc46e3ab96ce6ee9a005468638b4415a

    • SHA512

      0f73a5b978e3f27a43abd1bb2a3bc6a9ae04a11c5ac98ed180c60f31416080a49f0c0d194eb0bc14c0db9585e382cd4e7e471647bbc62a9d9e6ff570bebae481

    • SSDEEP

      12288:EEnW3raLk/10xzHtsYpjRLh4Oj0zkRaFwGy5OQPF5EGfeKLRh:NZXFOYpjh+I0gR/MQP3Jfeo

    Score
    10/10

    • Blocklisted process makes network request

    • Drops startup file

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks