Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

bc3891b902...8.docm

windows7-x64

7

bc3891b902...8.docm

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bc3891b9029229e2af500c6600cad6a6_JaffaCakes118

  • Size

    166KB

  • Sample

    240823-sd7das1djb

  • MD5

    bc3891b9029229e2af500c6600cad6a6

  • SHA1

    dd3e26001d98b3bc2faf912c401bc5c5bbac31ba

  • SHA256

    fc5402c5b704b7e3a60a662ac119b3503e1cb185c58da0064dfb9fdc2b097a44

  • SHA512

    237a7bd2b97adcf67f0dce3046bf0a33b798dd9a16e78c5fce840145459df5d59c79b360e321b6d880a387b258e88a98f0c29d746db8329456a86183f4365504

  • SSDEEP

    3072:UyvES1XRJHB2yrlqx1Jxh3Sc7g2QhxmKiIrUl9ugcnSE4BcyYbbSa5haq6Z:UysmXReuGJ3ZsqK5UknSnbghC

Score
10/10
discovery

Malware Config

Targets

    • Target

      bc3891b9029229e2af500c6600cad6a6_JaffaCakes118

    • Size

      166KB

    • MD5

      bc3891b9029229e2af500c6600cad6a6

    • SHA1

      dd3e26001d98b3bc2faf912c401bc5c5bbac31ba

    • SHA256

      fc5402c5b704b7e3a60a662ac119b3503e1cb185c58da0064dfb9fdc2b097a44

    • SHA512

      237a7bd2b97adcf67f0dce3046bf0a33b798dd9a16e78c5fce840145459df5d59c79b360e321b6d880a387b258e88a98f0c29d746db8329456a86183f4365504

    • SSDEEP

      3072:UyvES1XRJHB2yrlqx1Jxh3Sc7g2QhxmKiIrUl9ugcnSE4BcyYbbSa5haq6Z:UysmXReuGJ3ZsqK5UknSnbghC

    Score
    10/10
    discovery

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Abuses OpenXML format to download file from external location

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks