Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    79d0f76320f33881127ad0f5b5ec3e2693f8461145f87a82bd9a0a70f3197bd3

  • Size

    56KB

  • Sample

    241111-zkep7ayrcr

  • MD5

    c2e06232445eb81c5c571a683bbdd91a

  • SHA1

    bf157f2d96eee294116d4ef4e17dfed906c4f355

  • SHA256

    79d0f76320f33881127ad0f5b5ec3e2693f8461145f87a82bd9a0a70f3197bd3

  • SHA512

    42163892cd65160e9871dd363b4207c74427694b4ab1f90be42cd575f1074298d9194fdb719606b86d129d3e45e5a497fbbf6e3da3025e30f0e04e56d3de72b4

  • SSDEEP

    1536:VsKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgx5G9XSZ4Xsvm:aKpb8rGYrMPe3q7Q0XV5xtezEsi8/dg6

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://dharian.org/_sharedtemplates/D3QgytUZsO7korYQrG/

xlm40.dropper

http://digitalripple.com/scripts/4ovLPfq/

Targets

    • Target

      79d0f76320f33881127ad0f5b5ec3e2693f8461145f87a82bd9a0a70f3197bd3

    • Size

      56KB

    • MD5

      c2e06232445eb81c5c571a683bbdd91a

    • SHA1

      bf157f2d96eee294116d4ef4e17dfed906c4f355

    • SHA256

      79d0f76320f33881127ad0f5b5ec3e2693f8461145f87a82bd9a0a70f3197bd3

    • SHA512

      42163892cd65160e9871dd363b4207c74427694b4ab1f90be42cd575f1074298d9194fdb719606b86d129d3e45e5a497fbbf6e3da3025e30f0e04e56d3de72b4

    • SSDEEP

      1536:VsKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgx5G9XSZ4Xsvm:aKpb8rGYrMPe3q7Q0XV5xtezEsi8/dg6

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

MITRE ATT&CK Enterprise v15

Tasks