Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    36a402b83becc37e6281529b9db77f71cf9e90adfae87e252c310af627dfe8f2

  • Size

    96KB

  • Sample

    241111-zj244ayrcl

  • MD5

    9510a5fd59d1497c7b3846c0f258cbb9

  • SHA1

    e43dbea5b8a1a8eecc19d780928af0add78dcbc3

  • SHA256

    36a402b83becc37e6281529b9db77f71cf9e90adfae87e252c310af627dfe8f2

  • SHA512

    917b8f2fd29d6f843de12e7a3afff0947f38f6b77f370b6f6ee4bd8be23b82015be65743ce18261f7677d42e3f078a159d036f2228925cebd0dee923d137421d

  • SSDEEP

    1536:7kKpb8rGYrMPe3q7Q0XV5xtezEsi8/dg4jHuS4hcTO97v7UYdEJm3m:IKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgO

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://fisika.mipa.uns.ac.id/reseller/img/nRAvAgoY8Y/

xlm40.dropper

http://greycoconut.com/edm/71qUA/

xlm40.dropper

http://zonainformatica.es/tienda/XCHJmidSYTkE/

xlm40.dropper

http://balletmagazine.ro/wp-content/9VrMPV/

Targets

    • Target

      36a402b83becc37e6281529b9db77f71cf9e90adfae87e252c310af627dfe8f2

    • Size

      96KB

    • MD5

      9510a5fd59d1497c7b3846c0f258cbb9

    • SHA1

      e43dbea5b8a1a8eecc19d780928af0add78dcbc3

    • SHA256

      36a402b83becc37e6281529b9db77f71cf9e90adfae87e252c310af627dfe8f2

    • SHA512

      917b8f2fd29d6f843de12e7a3afff0947f38f6b77f370b6f6ee4bd8be23b82015be65743ce18261f7677d42e3f078a159d036f2228925cebd0dee923d137421d

    • SSDEEP

      1536:7kKpb8rGYrMPe3q7Q0XV5xtezEsi8/dg4jHuS4hcTO97v7UYdEJm3m:IKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgO

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

MITRE ATT&CK Enterprise v15

Tasks