Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f63d40d6138f8402595ac66d1d7ee0b75b9ad3bb9341cd0915244196085b04a6

  • Size

    70KB

  • Sample

    241120-1y9cdstfqb

  • MD5

    46229e8c71216f7d7dea253ab15c86b0

  • SHA1

    0f6422303dc22782986359d8b65f44abc00ce28c

  • SHA256

    f63d40d6138f8402595ac66d1d7ee0b75b9ad3bb9341cd0915244196085b04a6

  • SHA512

    119f77bdc42368241cd683be7bbe41f7876faa4250cfce14ff808b5d37a895e1ecfd4748e756ff899d72e82d1e73bb24ebc59a5954d29b11245bba2103bb87ae

  • SSDEEP

    1536:OhKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+KJ+hDcnTLiQrRTZws8Eo:uKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM2

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

https://sacvasanth.com/public/lyP2lh1hlJr/

xlm40.dropper

https://webguruindia.com/theme/wTbEyLVvMNB3j/

xlm40.dropper

http://stockmorehouse.com/Casa_Grande/AS4VPkTsOqWDGGO/

Targets

    • Target

      f63d40d6138f8402595ac66d1d7ee0b75b9ad3bb9341cd0915244196085b04a6

    • Size

      70KB

    • MD5

      46229e8c71216f7d7dea253ab15c86b0

    • SHA1

      0f6422303dc22782986359d8b65f44abc00ce28c

    • SHA256

      f63d40d6138f8402595ac66d1d7ee0b75b9ad3bb9341cd0915244196085b04a6

    • SHA512

      119f77bdc42368241cd683be7bbe41f7876faa4250cfce14ff808b5d37a895e1ecfd4748e756ff899d72e82d1e73bb24ebc59a5954d29b11245bba2103bb87ae

    • SSDEEP

      1536:OhKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+KJ+hDcnTLiQrRTZws8Eo:uKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM2

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

MITRE ATT&CK Enterprise v15

Tasks