Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

6ae77e4d72...c.xlsb

windows7-x64

10

6ae77e4d72...c.xlsb

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6ae77e4d723bcb30896ee54441402e0ad6ac51a46f590bded930a632543e781c

  • Size

    1.2MB

  • Sample

    240801-1d8v5a1ekd

  • MD5

    9fe555ef085da9a67ffa00e6110d02f6

  • SHA1

    5f1530ef2891bfb9320dd3474b56e5971d4d2dc7

  • SHA256

    6ae77e4d723bcb30896ee54441402e0ad6ac51a46f590bded930a632543e781c

  • SHA512

    bd0acc99cf95d9ad928ae83ee045b721e8e8acba80bb9a4efd452cca2efa989778a272aaceaf5653f938930150bbebf8737aac11c62444752aa83228a9b5ab22

  • SSDEEP

    24576:JiWxUUOy+cKPpxlDPTMFf9P0kmppxlDPTMFfypxlDPTMFf/:EEcy0jDLMd+bjDLMdEjDLMd/

Score
10/10
discovery

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://162.19.135.167/248185143.dat
xlm40.dropper

http://138.124.184.233/248185143.dat
xlm40.dropper

http://188.165.62.1/248185143.dat

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://162.19.135.167/856113025.dat
xlm40.dropper

http://138.124.184.233/856113025.dat
xlm40.dropper

http://188.165.62.1/856113025.dat

Targets

    • Target

      6ae77e4d723bcb30896ee54441402e0ad6ac51a46f590bded930a632543e781c

    • Size

      1.2MB

    • MD5

      9fe555ef085da9a67ffa00e6110d02f6

    • SHA1

      5f1530ef2891bfb9320dd3474b56e5971d4d2dc7

    • SHA256

      6ae77e4d723bcb30896ee54441402e0ad6ac51a46f590bded930a632543e781c

    • SHA512

      bd0acc99cf95d9ad928ae83ee045b721e8e8acba80bb9a4efd452cca2efa989778a272aaceaf5653f938930150bbebf8737aac11c62444752aa83228a9b5ab22

    • SSDEEP

      24576:JiWxUUOy+cKPpxlDPTMFf9P0kmppxlDPTMFfypxlDPTMFf/:EEcy0jDLMd+bjDLMdEjDLMd/

    Score
    10/10
    discovery

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks