Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    889075e8c2480c2c6c76b8b261f77823b2a61c5fba866f0c25107cbbbca76f6e

  • Size

    70KB

  • Sample

    241111-z3qkeawhkp

  • MD5

    09febc12dbeee0ede04c09400c99f400

  • SHA1

    36acdcbc14d07f6a4183454ee571783e265dd93f

  • SHA256

    889075e8c2480c2c6c76b8b261f77823b2a61c5fba866f0c25107cbbbca76f6e

  • SHA512

    59f78e89f3b3bb688ac8a3c904c7ce41950359125ec13cdaf0032f6499b26c7a1fbbb060852557d7bdab3d95d8e8ecaa877562a43000ba5d3fe0147eb77b2269

  • SSDEEP

    1536:OhKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+/+hDcnTLiQrRTZws8EbK:uKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM1

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

https://prprofile.com/wp-admin/CIqrvgYsvBiBlIM/

xlm40.dropper

https://retardantedefuegoperu.com/slider/rFhAa78/

xlm40.dropper

http://survei.absensi.net/cc-content/YCcjkOA3ijYNu46Y/

Targets

    • Target

      889075e8c2480c2c6c76b8b261f77823b2a61c5fba866f0c25107cbbbca76f6e

    • Size

      70KB

    • MD5

      09febc12dbeee0ede04c09400c99f400

    • SHA1

      36acdcbc14d07f6a4183454ee571783e265dd93f

    • SHA256

      889075e8c2480c2c6c76b8b261f77823b2a61c5fba866f0c25107cbbbca76f6e

    • SHA512

      59f78e89f3b3bb688ac8a3c904c7ce41950359125ec13cdaf0032f6499b26c7a1fbbb060852557d7bdab3d95d8e8ecaa877562a43000ba5d3fe0147eb77b2269

    • SSDEEP

      1536:OhKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+/+hDcnTLiQrRTZws8EbK:uKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM1

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

MITRE ATT&CK Enterprise v15

Tasks