4f598f13fd473b3e9364dce26b99495ae728eac9ca9e278bd76be41141757c03 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

Ojvpuwa.hta

windows7-x64

3

Ojvpuwa.hta

windows10-2004-x64

8

Sharing

General

Target

Ojvpuwa.hta
Size

348KB
Sample

230420-bl6cjaee73
MD5

e99b6cfcb794606f20ec5d1abed23906
SHA1

7278ef13293d8eecfe4202362b0c3ec1ae8f8559
SHA256

4f598f13fd473b3e9364dce26b99495ae728eac9ca9e278bd76be41141757c03
SHA512

ef7421a36f13ce928cb5205be59db8f57061d9e9b14dabf8cd860742bbc5c141f570d807ce25d439d2f83b62a62f9f88f29733a406d1abb272006d66461b0da0
SSDEEP

6144:id3ndjrklqgqr5K0NJhI101WdQyPK3LwCDkpJUbbj9KctPCltrt8gd3ndjrkW:yOauMvDyeUOW

Score

8^/10

Static task

static1

Behavioral task

behavioral1

Sample

Ojvpuwa.hta

Resource

win7-20230220-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

Ojvpuwa.hta

Resource

win10v2004-20230220-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  Ojvpuwa.hta
- Size
  
  348KB
- MD5
  
  e99b6cfcb794606f20ec5d1abed23906
- SHA1
  
  7278ef13293d8eecfe4202362b0c3ec1ae8f8559
- SHA256
  
  4f598f13fd473b3e9364dce26b99495ae728eac9ca9e278bd76be41141757c03
- SHA512
  
  ef7421a36f13ce928cb5205be59db8f57061d9e9b14dabf8cd860742bbc5c141f570d807ce25d439d2f83b62a62f9f88f29733a406d1abb272006d66461b0da0
- SSDEEP
  
  6144:id3ndjrklqgqr5K0NJhI101WdQyPK3LwCDkpJUbbj9KctPCltrt8gd3ndjrkW:yOauMvDyeUOW
Score

8^/10
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy