Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

6f71d0ec96...74.vbs

windows7-x64

10

6f71d0ec96...74.vbs

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b239d8601aa55d184cf8bf44d18e7ffb.bin

  • Size

    12KB

  • Sample

    230524-bxmdssac62

  • MD5

    6ceb7a5690aaf32836686468eac1a3ab

  • SHA1

    e9a682ecf3d07f6afd7b70e47be3b4f41fa99a97

  • SHA256

    5ca72b40fba3400f16f4161942bf9bce3669a49c995e55fe560725915adb5516

  • SHA512

    622b1ce9f6ba949a79c9485f2cf148890ad75fd616482f4aad5b8ddb51f3185c28744bab3cb6fe7c12a5c49b0504773d7e9cf12a15faf2503a8682895e4e8436

  • SSDEEP

    192:JM3t3zXaH6JfX0E8TBNUjzhxaIY1d0Nkj4r1O8t3+e9uXHek+8UjWsOC1dMTOc:yZw6JfD8TvUfLhY1ONkj48+M+HDjvMqc

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

https://firebasestorage.googleapis.com/v0/b/tttttttt-e4b70.appspot.com/o/new_rump_vb.net.txt?alt=media&token=b27d42df-d877-4be0-ab6a-efe2fee3e2b3

Targets

    • Target

      6f71d0ec96daa79c7ba3655e06ff8cc3f6d59c5a9cf713a5e940d8b854923b74.vbs

    • Size

      222KB

    • MD5

      b239d8601aa55d184cf8bf44d18e7ffb

    • SHA1

      e91823bdf6c822ef6e10cb010ff29f79ee32d158

    • SHA256

      6f71d0ec96daa79c7ba3655e06ff8cc3f6d59c5a9cf713a5e940d8b854923b74

    • SHA512

      0a90dcd0cbb9bf552f0169fd19c2d8ce370be5795b72fd431c02571c760238e9df6f1b80f6cb552e3a4e0a1286b1dfdda9b88e9b5493ffbd39bf57d9033c44ca

    • SSDEEP

      768:XnHGdUBDCKtfYjE3Luo4+eaWTYFPk9Wai2d:XHGd+CKtfSo4+4YFNai2d

    Score
    10/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks