Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a1317e0982918c25463fe3561f2f31254eb13d8c2dc5f8419aff13aa05dde302

  • Size

    95KB

  • Sample

    241111-1y5dfaxgkm

  • MD5

    6eeefec95d5c87fa75270a5e1a4f194f

  • SHA1

    c23198b020d219826ea5d6b42ee85dc204faac11

  • SHA256

    a1317e0982918c25463fe3561f2f31254eb13d8c2dc5f8419aff13aa05dde302

  • SHA512

    32326bae7a93b839d6d1691a95ceaecce13e744526c766ee5d390422dcbfd6c3aab32ca1b5e684f188f77d7499f73db175244a6504aee22d34170cb4f3eda400

  • SSDEEP

    1536:iFKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgcHuS4hcTO97v7UYdEJmQt:cKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgg

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://dazzlecollections.co.za/THDXpHbk3YwA/HTolLw1ams3x/

xlm40.dropper

http://www.daxberger.at/stats/NfxCfPkIhjZqEvLMN2Ul/

xlm40.dropper

http://k-s-j.jp/contact/r3a9keM/

xlm40.dropper

http://kentandcowines.com.au/wp-content/nkz1FRU9Y5i/L/

Targets

    • Target

      a1317e0982918c25463fe3561f2f31254eb13d8c2dc5f8419aff13aa05dde302

    • Size

      95KB

    • MD5

      6eeefec95d5c87fa75270a5e1a4f194f

    • SHA1

      c23198b020d219826ea5d6b42ee85dc204faac11

    • SHA256

      a1317e0982918c25463fe3561f2f31254eb13d8c2dc5f8419aff13aa05dde302

    • SHA512

      32326bae7a93b839d6d1691a95ceaecce13e744526c766ee5d390422dcbfd6c3aab32ca1b5e684f188f77d7499f73db175244a6504aee22d34170cb4f3eda400

    • SSDEEP

      1536:iFKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgcHuS4hcTO97v7UYdEJmQt:cKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgg

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

MITRE ATT&CK Enterprise v15

Tasks