Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

CREDIT NOTE.js

windows7-x64

10

CREDIT NOTE.js

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d60d8e99d973dde704190da239c92efc

  • Size

    27KB

  • Sample

    221004-x1flbabhh6

  • MD5

    d60d8e99d973dde704190da239c92efc

  • SHA1

    f91128cc134c66670fb390d76a7253e176f36ef0

  • SHA256

    b9bb061078e650e5b8f245119408bc1f25ccde688102d9f82ca499611638dfea

  • SHA512

    145d27abe328d62f54036067e3108e1788010dc88d542c58733fa0fc434d2e1e306adfa96968439e240d6e7870af9747c4c45896cc3dc610ece4f8c47261283e

  • SSDEEP

    384:mFbU14x95gcDaqkA0CKLakfsse6ierjnIRMKpEdKVzigYdSJTexYEHG/pxPlSf:mFbUex7Dai0HGkfsBuMS0Vz76ACxYTW

Score
10/10
vjw0rmpersistencetrojanworm

Malware Config

Targets

    • Target

      CREDIT NOTE.js

    • Size

      47KB

    • MD5

      771ee97bd2e61801d47f37b60a69d1c8

    • SHA1

      b77ea83d939bc5ce8ceff9668488f8045ba58a0b

    • SHA256

      25027a9677193ee152a6621382d40fcf31437b4366f6566d369f24d93f52f56d

    • SHA512

      2ac19e006117d449467ec49f4b600293775bdbb0f03869a6e7c914449fb522d22f74ab060d0086ef1a033c91d987c38ddd97e258a7575581e95d68b1657737b1

    • SSDEEP

      768:bH5hjkXAZJMdHG7TH8eA0oWz6nSwsmjX1uMW7/1W8eXBnKX2CzHsPOux4GsPje//:bH5hIwZ+dHk8n0ISwXZ8OBKX2yKCXlgT

    Score
    10/10
    vjw0rmpersistencetrojanworm

    • Vjw0rm

      Vjw0rm is a remote access trojan written in JavaScript.

      trojanwormvjw0rm

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks