Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    09092024125309092024TWSPO331120240909003.xls

  • Size

    185KB

  • Sample

    240909-w1h6rsvckb

  • MD5

    f9ab1d7b74030338276597360d1f1fe9

  • SHA1

    08dd4159d3e19c3f1140f07300d80ef64f1d75ef

  • SHA256

    34a9da84adcef6ef3408b20bbdedfab6b961640ef765dbe1cb86cb3c48daa173

  • SHA512

    65093248fb4adb398b926cac06b02960377974bc7cc4cba68e8f444efb48df69b16197535331ec5b047c78236f4f987d830ee4aeec44fadcad38b73ce7aed669

  • SSDEEP

    3072:uXINL0+hGvRHDfiQZUZN32/VcgQ0RIsjO2z+NP0qJHuMmOboPywH:u4Z0LJHDSZNrD0esK2ajJSOyB

Score
10/10

Malware Config

Targets

    • Target

      09092024125309092024TWSPO331120240909003.xls

    • Size

      185KB

    • MD5

      f9ab1d7b74030338276597360d1f1fe9

    • SHA1

      08dd4159d3e19c3f1140f07300d80ef64f1d75ef

    • SHA256

      34a9da84adcef6ef3408b20bbdedfab6b961640ef765dbe1cb86cb3c48daa173

    • SHA512

      65093248fb4adb398b926cac06b02960377974bc7cc4cba68e8f444efb48df69b16197535331ec5b047c78236f4f987d830ee4aeec44fadcad38b73ce7aed669

    • SSDEEP

      3072:uXINL0+hGvRHDfiQZUZN32/VcgQ0RIsjO2z+NP0qJHuMmOboPywH:u4Z0LJHDSZNrD0esK2ajJSOyB

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

MITRE ATT&CK Enterprise v15

Tasks