Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Sipariş onayı.xls

  • Size

    1.1MB

  • Sample

    240709-mh8t2a1fna

  • MD5

    94d52f7b132f459b88ba2b9c6ed076cb

  • SHA1

    6970a28538c35aa1c20b32a855e40c85842025d7

  • SHA256

    57b1e7f094836b89c613e86a12966702169ead968058ac24c738b891bb8fa01e

  • SHA512

    c8a18dab02481a7d226d9d3a71b38087e3406e089051995c1be66e49dcb5b715212ab3eb8a36fe7925a32cb79d6baa98ba0ed2cdb8ea5803d5c1e5fe80b8b594

  • SSDEEP

    24576:48q+k+xbyN3g3yBO128OA2BFzfOSr4hBBzcIPuV8rv4zBkS3QHVO:dq+k+yOUJvSSr4N4IzvT+QH

Score
8/10

Malware Config

Targets

    • Target

      Sipariş onayı.xls

    • Size

      1.1MB

    • MD5

      94d52f7b132f459b88ba2b9c6ed076cb

    • SHA1

      6970a28538c35aa1c20b32a855e40c85842025d7

    • SHA256

      57b1e7f094836b89c613e86a12966702169ead968058ac24c738b891bb8fa01e

    • SHA512

      c8a18dab02481a7d226d9d3a71b38087e3406e089051995c1be66e49dcb5b715212ab3eb8a36fe7925a32cb79d6baa98ba0ed2cdb8ea5803d5c1e5fe80b8b594

    • SSDEEP

      24576:48q+k+xbyN3g3yBO128OA2BFzfOSr4hBBzcIPuV8rv4zBkS3QHVO:dq+k+yOUJvSSr4N4IzvT+QH

    Score
    8/10
    • Blocklisted process makes network request

    • Abuses OpenXML format to download file from external location

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks