Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0927c120a5ebae66b98e7962edb57903

  • Size

    36KB

  • Sample

    231230-a8m9ssdaap

  • MD5

    0927c120a5ebae66b98e7962edb57903

  • SHA1

    879cfc1d3a74ea615189899061823488b8cd1726

  • SHA256

    4b61d9c4fd6a10ac18c1f8d2eddf94b9b0d86276a770ccaddd4f05b577bd46d2

  • SHA512

    ba011c9d4599ba91e557f8f7ba09d3bdcc70c34ba3864c0f87ce9503359f86645a9be2189db1fd086a281a90cc22e46a092a16d1fa68b5dc294a14fbf80dcaaa

  • SSDEEP

    768:0PqNk3hbdlylKsgqopeJBWhZFGkE+cL2NdAJYmBbArqccjAxC4mMrY:wok3hbdlylKsgqopeJBWhZFGkE+cL2Nu

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

https://statedauto.com/wp-data.php

xlm40.dropper

https://markens.online/wp-data.php

Targets

    • Target

      0927c120a5ebae66b98e7962edb57903

    • Size

      36KB

    • MD5

      0927c120a5ebae66b98e7962edb57903

    • SHA1

      879cfc1d3a74ea615189899061823488b8cd1726

    • SHA256

      4b61d9c4fd6a10ac18c1f8d2eddf94b9b0d86276a770ccaddd4f05b577bd46d2

    • SHA512

      ba011c9d4599ba91e557f8f7ba09d3bdcc70c34ba3864c0f87ce9503359f86645a9be2189db1fd086a281a90cc22e46a092a16d1fa68b5dc294a14fbf80dcaaa

    • SSDEEP

      768:0PqNk3hbdlylKsgqopeJBWhZFGkE+cL2NdAJYmBbArqccjAxC4mMrY:wok3hbdlylKsgqopeJBWhZFGkE+cL2Nu

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

MITRE ATT&CK Enterprise v15

Tasks