Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

c14ee063f6...18.doc

windows7-x64

10

c14ee063f6...18.doc

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c14ee063f603688a82973f739d07437b_JaffaCakes118

  • Size

    161KB

  • Sample

    240825-w1tbqsxfmd

  • MD5

    c14ee063f603688a82973f739d07437b

  • SHA1

    228491c3faa9d8cf9c138cced2121afbecefb67a

  • SHA256

    18e942439d79f97e34245158394275fae160da61d8abc66b9f45496a11e5a22e

  • SHA512

    77ce17669ed8b95268869ac12094c613cf4c537422375880346c66e7ab26473dd92c994366088782c82e257aefd3e1bcc26043333b2a746715acd0d966065bf6

  • SSDEEP

    1536:VxYAcBPFEiUSQH/P7HgOdPTQlmncksPsrbfPchzb8JRD3bNqfNpu39IId5a6XP3p:PR1qf69xak3MgxCo/ZIb0X+RrMgo

Score
10/10
discovery

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

http://transfersuvan.com/wp-admin/1J/
exe.dropper

http://da-industrial.com/js/aX/
exe.dropper

http://daprofesional.com/data4/aE/
exe.dropper

http://degepro.com/eTrac/px/
exe.dropper

http://hoagietesting10.com/wp-content/a/
exe.dropper

https://lifeadvicer.com/wp-content/FX/
exe.dropper

https://bangkokcityjewel.com/cgi-bin/F3/

Targets

    • Target

      c14ee063f603688a82973f739d07437b_JaffaCakes118

    • Size

      161KB

    • MD5

      c14ee063f603688a82973f739d07437b

    • SHA1

      228491c3faa9d8cf9c138cced2121afbecefb67a

    • SHA256

      18e942439d79f97e34245158394275fae160da61d8abc66b9f45496a11e5a22e

    • SHA512

      77ce17669ed8b95268869ac12094c613cf4c537422375880346c66e7ab26473dd92c994366088782c82e257aefd3e1bcc26043333b2a746715acd0d966065bf6

    • SSDEEP

      1536:VxYAcBPFEiUSQH/P7HgOdPTQlmncksPsrbfPchzb8JRD3bNqfNpu39IId5a6XP3p:PR1qf69xak3MgxCo/ZIb0X+RrMgo

    Score
    10/10
    discovery

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks