Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

8

bc127ab9ae...b5.xls

windows7-x64

10

bc127ab9ae...b5.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5014be5bf154ed9bbfe3b5868ad702d1.bin

  • Size

    76KB

  • Sample

    231011-3x2bhaee66

  • MD5

    6a54143cd891ce797cdecba6e71d1a56

  • SHA1

    3ccad3e9d64a30afc6714da9a0a16aeebc236266

  • SHA256

    8617373dde4cd0ab5e3dd348aeb96b50d30c3c8325ac65eee85b846eb7cd436e

  • SHA512

    c3498276ed6e809f553d2117152c93be8e9e7bc1fcf4792e606f7ca53e0133eb52591d8a704304e92073e6750c2ef572442088f144d17c6520de40616e3af9d7

  • SSDEEP

    1536:0cnwPuhGg0ZHsYQb1Q4dy3DDpsCTl1uHI3Bh64cuC/p9orG6:VnwWhGHFsL5xy3DL1BBc4cuCB9uR

Score
10/10
macromacro_on_action

Malware Config

Targets

    • Target

      bc127ab9ae2605214e214b69cda0597477f8bc4b903d5215dd9e221cda0991b5.xls

    • Size

      100KB

    • MD5

      5014be5bf154ed9bbfe3b5868ad702d1

    • SHA1

      1ccadf970129812badcb86515d286ff1d6dd5200

    • SHA256

      bc127ab9ae2605214e214b69cda0597477f8bc4b903d5215dd9e221cda0991b5

    • SHA512

      486ae1acfb7c80b279dcdcf254d4e797ed6e7d146f2de5634584e4d995944ab6923ab747733bea85ae0bb39fa1be468e5f74cb9fd010e09a69c59279bbeed3a2

    • SSDEEP

      3072:5rxEtjPOtioVjDGUU1qfDlaGGx+cL2QnAQtJE2zuxq+fr9wBLa71ba2ryLTHeYE:BxEtjPOtioVjDGUU1qfDlavx+W2QnAsF

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks