Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Order No 455100.doc
-
Size
3KB
-
Sample
231013-y1vkxaba44
-
MD5
b369f7fc426c775b65a99ae2c304751e
-
SHA1
74e3cda013b63cfec95c366dc0f71b6630df85b3
-
SHA256
0d3a500677f84c749dfa47f13c1951e80b8b77fab39c6ff1c4fb40b0568569d3
-
SHA512
6185c9df5ff994c866e9a8fa89cc618c37537e5cd9aeddddba4df1cf107252d4e7f43502284b5bca31da28cd1468f770440cff39392825cbb970d7ce17eee5b5
Static task
static1
Behavioral task
behavioral1
Sample
Order No 455100.rtf
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Order No 455100.rtf
Resource
win10v2004-20230915-en
Malware Config
Extracted
formbook
4.1
ge06
azaharparis.com
nationaleventsafety.com
covesstudy.com
quinshon4.com
moderco.net
trailblazerbaby.com
time-edu.net
azeemtourism.com
anakmedan3.click
bookinternationaltours.com
ulksht.top
newswirex.com
dingg.net
waveoflife.pro
miamirealestatecommercial.com
rtplive77.xyz
bowllywood.com
automation-tools-84162.bond
booptee.com
ebx.lat
gdlongzhong.icu
seoulbeautytw.com
bulgarianarchive.com
pojipoji.com
mochibees-wylie.com
ecoboat.world
eroyfw.top
centralngs.com
youtube-manager.site
eatlust.com
geutik.cfd
credit-cards-16215.bond
lodsoab.com
jon188.ink
52iwin.win
juanmafit.com
gamemuggaz.com
oneresi.com
pj69vip12.cyou
west-paws.com
chaineccn.com
mentiti.com
modeparisiennefr.com
skyboxpro.net
versebuild.xyz
luxpsy.com
nivaarnalawgroup.com
c091627.com
preppal.shop
narrativepages.com
yqsoysy.com
diverseindiatours.com
batcavela.com
ayyp300.top
daqtpt.cfd
livers-guardplus.com
chucobuilt.net
qianxz109.xyz
carat-automotive.com
hndswicco.best
workwithray.live
sxchenggu.com
sanpan010.com
fufe066.xyz
fakeittilyoumakeitfinance.com
Targets
-
-
Target
Order No 455100.doc
-
Size
3KB
-
MD5
b369f7fc426c775b65a99ae2c304751e
-
SHA1
74e3cda013b63cfec95c366dc0f71b6630df85b3
-
SHA256
0d3a500677f84c749dfa47f13c1951e80b8b77fab39c6ff1c4fb40b0568569d3
-
SHA512
6185c9df5ff994c866e9a8fa89cc618c37537e5cd9aeddddba4df1cf107252d4e7f43502284b5bca31da28cd1468f770440cff39392825cbb970d7ce17eee5b5
-
Formbook payload
-
Blocklisted process makes network request
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-