Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    57d32dfc76b9e3da64b4892795b847c95a72c54a71fa30f01e5fbd75a10a34af

  • Size

    126KB

  • Sample

    241111-zxk3qsvra1

  • MD5

    fdb7917da1fe47b423dadd150143e1b1

  • SHA1

    2d09d50db73a33e7f58732cfb6d9bc21cf85302c

  • SHA256

    57d32dfc76b9e3da64b4892795b847c95a72c54a71fa30f01e5fbd75a10a34af

  • SHA512

    1863a9b852ff301093a694232bbe4db94f3351614e23f0d3d8a717feba2a20fe2ccbc9c09232b209efb1d18c005c0155abba9b336c0195f7c1e3742e2dabe793

  • SSDEEP

    3072:EsKpbdrHYrMue8q7QPX+5xtekEdi8/dgj3Siz+3z4Icu6hlC4:7KpbdrHYrMue8q7QPX+5xtFEdi8/dgjp

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://www.forensisbilisim.com/ankara/bplsmKfaKAwAyavNj/

xlm40.dropper

https://www.faitmaison.uk/wp-admin/BZMoK/

xlm40.dropper

http://www.fahriefe.com.tr/yargitaykararlari/aVg/

xlm40.dropper

http://www.parapetyrs.cz/wp-content/uploads/UTnG7GKKkZf/

xlm40.dropper

https://www.whow.fr/wp-includes/aZo78JmHBoEmW6fVQ/

xlm40.dropper

http://www.drcno.sk/_sub/FcEgwPugDI7wr2/

Targets

    • Target

      57d32dfc76b9e3da64b4892795b847c95a72c54a71fa30f01e5fbd75a10a34af

    • Size

      126KB

    • MD5

      fdb7917da1fe47b423dadd150143e1b1

    • SHA1

      2d09d50db73a33e7f58732cfb6d9bc21cf85302c

    • SHA256

      57d32dfc76b9e3da64b4892795b847c95a72c54a71fa30f01e5fbd75a10a34af

    • SHA512

      1863a9b852ff301093a694232bbe4db94f3351614e23f0d3d8a717feba2a20fe2ccbc9c09232b209efb1d18c005c0155abba9b336c0195f7c1e3742e2dabe793

    • SSDEEP

      3072:EsKpbdrHYrMue8q7QPX+5xtekEdi8/dgj3Siz+3z4Icu6hlC4:7KpbdrHYrMue8q7QPX+5xtFEdi8/dgjp

    Score
    10/10

MITRE ATT&CK Enterprise v15

Tasks