Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    malicious_file_analysis1.zip

  • Size

    369KB

  • Sample

    230830-lpap5sea8y

  • MD5

    63798d17ab9b4973ce132603e71c8dc9

  • SHA1

    0e4fe03f4c899246bd6cf3eba3f293a8cf0f8e71

  • SHA256

    41338484b40346fce109892bab06f90118fd592241950ff8481cc812c264afbc

  • SHA512

    d56e7fe4409d91b9f2e4b4edffc34857f8c45ca346f976fb0de933c8a3c25baf0de9aa46be252fc25290188026661ae931f9d2851c728e554184c802c6c22403

  • SSDEEP

    6144:yMKZcXTO3S/ntVpyKxmYajzu74yDy059R95x13fDAIZogPIB56FOidXO0q4YSCKI:yMoS/ntrd9Cu74OyUH9DPI3idXp5YSCD

Score
10/10

Malware Config

Targets

    • Target

      MT103.doc

    • Size

      2.7MB

    • MD5

      0e94677f6640d3cda39138601e7dd82b

    • SHA1

      ee39f7527ce696a2998b6312cf8807fc4a3f6ea3

    • SHA256

      4fa32c417f3c773dac915a446b84d135130f548fd1c36626bea1d83dfa710523

    • SHA512

      f6b2db33927975a7db3ef341b6abe7bd7053d1b950f0f3c3ab846bc40b39d26229d78503b7a6759511876ffc8753cb09b0b6e201e86eda7c70d88182878db85d

    • SSDEEP

      24576:0csbD+4ybRtDAVrA5cYJKAK2hyin32lMO:S

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks