Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

8

0b3a67ed43...8.xlsm

windows7-x64

10

0b3a67ed43...8.xlsm

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0b3a67ed4345f9a78699d1cf94d97ca1_JaffaCakes118

  • Size

    363KB

  • Sample

    241002-r93vbasclm

  • MD5

    0b3a67ed4345f9a78699d1cf94d97ca1

  • SHA1

    934f6af23ca3ed74c3ed258d4f1a7a519d7c1656

  • SHA256

    18c3c2bb0dcecfc36f0604781b1f2bc587995eb2ef00c4dbd7871d06e167db01

  • SHA512

    9590198603b7fa72c80a0ef9faaa08c9d1610e20312e007fbfa02dc72aebe9daa7fd87d87b6f87eaa69d7579cea07cc9320848ed9fbb860bcb57a3487b5c1098

  • SSDEEP

    6144:Qj9HMInvpPbR/5L4YvQ6bgcsEEmi+efMi0oGytKoUsfozwLhOUdL:Qj9tRbtp4Wl8cnEQeNGytKmCwLhOQL

Score
10/10
discoverymacroxlm

Malware Config

Targets

    • Target

      0b3a67ed4345f9a78699d1cf94d97ca1_JaffaCakes118

    • Size

      363KB

    • MD5

      0b3a67ed4345f9a78699d1cf94d97ca1

    • SHA1

      934f6af23ca3ed74c3ed258d4f1a7a519d7c1656

    • SHA256

      18c3c2bb0dcecfc36f0604781b1f2bc587995eb2ef00c4dbd7871d06e167db01

    • SHA512

      9590198603b7fa72c80a0ef9faaa08c9d1610e20312e007fbfa02dc72aebe9daa7fd87d87b6f87eaa69d7579cea07cc9320848ed9fbb860bcb57a3487b5c1098

    • SSDEEP

      6144:Qj9HMInvpPbR/5L4YvQ6bgcsEEmi+efMi0oGytKoUsfozwLhOUdL:Qj9tRbtp4Wl8cnEQeNGytKmCwLhOQL

    Score
    10/10
    discovery

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks