Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b239d8601aa55d184cf8bf44d18e7ffb.bin
-
Size
12KB
-
Sample
230524-bxmdssac62
-
MD5
6ceb7a5690aaf32836686468eac1a3ab
-
SHA1
e9a682ecf3d07f6afd7b70e47be3b4f41fa99a97
-
SHA256
5ca72b40fba3400f16f4161942bf9bce3669a49c995e55fe560725915adb5516
-
SHA512
622b1ce9f6ba949a79c9485f2cf148890ad75fd616482f4aad5b8ddb51f3185c28744bab3cb6fe7c12a5c49b0504773d7e9cf12a15faf2503a8682895e4e8436
-
SSDEEP
192:JM3t3zXaH6JfX0E8TBNUjzhxaIY1d0Nkj4r1O8t3+e9uXHek+8UjWsOC1dMTOc:yZw6JfD8TvUfLhY1ONkj48+M+HDjvMqc
Static task
static1
Behavioral task
behavioral1
Sample
6f71d0ec96daa79c7ba3655e06ff8cc3f6d59c5a9cf713a5e940d8b854923b74.vbs
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
6f71d0ec96daa79c7ba3655e06ff8cc3f6d59c5a9cf713a5e940d8b854923b74.vbs
Resource
win10v2004-20230221-en
Malware Config
Extracted
https://firebasestorage.googleapis.com/v0/b/tttttttt-e4b70.appspot.com/o/new_rump_vb.net.txt?alt=media&token=b27d42df-d877-4be0-ab6a-efe2fee3e2b3
Targets
-
-
Target
6f71d0ec96daa79c7ba3655e06ff8cc3f6d59c5a9cf713a5e940d8b854923b74.vbs
-
Size
222KB
-
MD5
b239d8601aa55d184cf8bf44d18e7ffb
-
SHA1
e91823bdf6c822ef6e10cb010ff29f79ee32d158
-
SHA256
6f71d0ec96daa79c7ba3655e06ff8cc3f6d59c5a9cf713a5e940d8b854923b74
-
SHA512
0a90dcd0cbb9bf552f0169fd19c2d8ce370be5795b72fd431c02571c760238e9df6f1b80f6cb552e3a4e0a1286b1dfdda9b88e9b5493ffbd39bf57d9033c44ca
-
SSDEEP
768:XnHGdUBDCKtfYjE3Luo4+eaWTYFPk9Wai2d:XHGd+CKtfSo4+4YFNai2d
Score10/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-