Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ecc924f51fee7e688cae26b1d212d74245ed88b69d70ede5348545b242aeb0d3

  • Size

    63KB

  • Sample

    241111-16bfbsxjbs

  • MD5

    00ff35c09f9f96d0623f547085f2ab0b

  • SHA1

    7f60351d937535a40a73b177dd21b5f2fd0963dc

  • SHA256

    ecc924f51fee7e688cae26b1d212d74245ed88b69d70ede5348545b242aeb0d3

  • SHA512

    b5d7979028442741004761fd92cf74ba2188e92a058da1be1cc5d07fb50cd9d099c00f0f7b790ef9717c9ca43e27bfd3e368c65d1863cb7b689ce1c9e6abcca1

  • SSDEEP

    1536:9pKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgRHuS4VcTO9/r7UYdEJeS+x:7Kpb8rGYrMPe3q7Q0XV5xtezEsi8/dge

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://cashmailsystem.com/upload/XmPSGLcygR7/

xlm40.dropper

https://ingelse.net/ndMmqxh/

xlm40.dropper

https://kwickconnect.com/im-messenger/Szrb9EthOX91/

xlm40.dropper

https://manchesterslt.co.uk/a-to-z-of-slt/xOgw/

Targets

    • Target

      ecc924f51fee7e688cae26b1d212d74245ed88b69d70ede5348545b242aeb0d3

    • Size

      63KB

    • MD5

      00ff35c09f9f96d0623f547085f2ab0b

    • SHA1

      7f60351d937535a40a73b177dd21b5f2fd0963dc

    • SHA256

      ecc924f51fee7e688cae26b1d212d74245ed88b69d70ede5348545b242aeb0d3

    • SHA512

      b5d7979028442741004761fd92cf74ba2188e92a058da1be1cc5d07fb50cd9d099c00f0f7b790ef9717c9ca43e27bfd3e368c65d1863cb7b689ce1c9e6abcca1

    • SSDEEP

      1536:9pKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgRHuS4VcTO9/r7UYdEJeS+x:7Kpb8rGYrMPe3q7Q0XV5xtezEsi8/dge

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

MITRE ATT&CK Enterprise v15

Tasks