e9a468674767f675c91f191535ecf92b1c3e26f892ea13f0faf6f60952460c44 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

№ 106 - ...ex.vbs

windows7-x64

1

№ 106 - ...ex.vbs

windows10-2004-x64

7

Sharing

General

Target

№ 106 - Supply of Flex.vbs
Size

558KB
Sample

221012-qln6ksdeh2
MD5

fed4fab7721be9607d879c72178ba475
SHA1

9491ad9409f20a90767459e77264fcb2b8621617
SHA256

e9a468674767f675c91f191535ecf92b1c3e26f892ea13f0faf6f60952460c44
SHA512

29240a2b6989c4e3539805e842d96f57c8132ce9ffffe3076446eae573923261bc7365ca74432dd438b5c5b2685e47acce1126c2139832380b0231628e16d83e
SSDEEP

12288:ErXjb+WfItdE1se2/MhiIAKV5b/EQyUzszxbvZbOtYHb:YSMIHkwKLlIzxbRbgY7

Score

7^/10

Static task

static1

Behavioral task

behavioral1

Sample

№ 106 - Supply of Flex.vbs

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

№ 106 - Supply of Flex.vbs

Resource

win10v2004-20220812-en

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  № 106 - Supply of Flex.vbs
- Size
  
  558KB
- MD5
  
  fed4fab7721be9607d879c72178ba475
- SHA1
  
  9491ad9409f20a90767459e77264fcb2b8621617
- SHA256
  
  e9a468674767f675c91f191535ecf92b1c3e26f892ea13f0faf6f60952460c44
- SHA512
  
  29240a2b6989c4e3539805e842d96f57c8132ce9ffffe3076446eae573923261bc7365ca74432dd438b5c5b2685e47acce1126c2139832380b0231628e16d83e
- SSDEEP
  
  12288:ErXjb+WfItdE1se2/MhiIAKV5b/EQyUzszxbvZbOtYHb:YSMIHkwKLlIzxbRbgY7
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.