Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

potwierdze...84.vbs

windows7-x64

10

potwierdze...84.vbs

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    potwierdzenie wpłaty-021784.vbs

  • Size

    188KB

  • Sample

    220927-l6sx2secfr

  • MD5

    68551303b71795b507434b77679f5796

  • SHA1

    c198cb2cc41fbb62e3993bbff7d5931403cab2ed

  • SHA256

    261fd97d96d213ebbb0add61ced1a5e913389078a52d4bd1036203f16cd11981

  • SHA512

    a33cbdb1d9a62b5f00634bf1e974fc209d01ac0bb8a21a9cafaedc867975d4681e1bf7c4a7edba8c16c67fb334e0116cb3d58ef9b760339307f527f434a7c660

  • SSDEEP

    3072:FyBpnpcufxKYM6++ct//47uJQ+xNIga/v5GycoOEPQfevM8K4Ec5C+O8:FCn3ZKEi//WuJlIga/hGycoOEPSe3EcF

Score
10/10
guloaderdownloader

Malware Config

Targets

    • Target

      potwierdzenie wpłaty-021784.vbs

    • Size

      188KB

    • MD5

      68551303b71795b507434b77679f5796

    • SHA1

      c198cb2cc41fbb62e3993bbff7d5931403cab2ed

    • SHA256

      261fd97d96d213ebbb0add61ced1a5e913389078a52d4bd1036203f16cd11981

    • SHA512

      a33cbdb1d9a62b5f00634bf1e974fc209d01ac0bb8a21a9cafaedc867975d4681e1bf7c4a7edba8c16c67fb334e0116cb3d58ef9b760339307f527f434a7c660

    • SSDEEP

      3072:FyBpnpcufxKYM6++ct//47uJQ+xNIga/v5GycoOEPQfevM8K4Ec5C+O8:FCn3ZKEi//WuJlIga/hGycoOEPSe3EcF

    Score
    10/10
    guloaderdownloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks