Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
HWX.vbs
-
Size
269KB
-
Sample
230831-qf7qqseg9x
-
MD5
eff515cd80fca123c65f7ed20d7f071f
-
SHA1
6f7bf5b871e413f40f1c23e7953251d0fabbbf95
-
SHA256
26176205211fdce7ad34cf10d72f178f1646e913e368f0f5bcc325e5428a69cc
-
SHA512
f2959e3b6b618eca7f96b720c293fb47474440e0a65e838cd588af5078131a0c93bc76c151fd277a65e5f96e1b51d0bc4a56f657bae3a3d2ebe831017b78375e
-
SSDEEP
6144:t7jmLQQJm7ILm5BmZMLpRKsEAlOb4b5bdZ7ZmZ8Z7V:t7jmLQQJm7ILm5BmZMLp4sEAT
Static task
static1
Behavioral task
behavioral1
Sample
HWX.vbs
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
HWX.vbs
Resource
win10v2004-20230703-en
Malware Config
Extracted
https://uploaddeimagens.com.br/images/004/563/621/original/universo_vbs.jpeg?1690931855
https://uploaddeimagens.com.br/images/004/563/621/original/universo_vbs.jpeg?1690931855
Targets
-
-
Target
HWX.vbs
-
Size
269KB
-
MD5
eff515cd80fca123c65f7ed20d7f071f
-
SHA1
6f7bf5b871e413f40f1c23e7953251d0fabbbf95
-
SHA256
26176205211fdce7ad34cf10d72f178f1646e913e368f0f5bcc325e5428a69cc
-
SHA512
f2959e3b6b618eca7f96b720c293fb47474440e0a65e838cd588af5078131a0c93bc76c151fd277a65e5f96e1b51d0bc4a56f657bae3a3d2ebe831017b78375e
-
SSDEEP
6144:t7jmLQQJm7ILm5BmZMLpRKsEAlOb4b5bdZ7ZmZ8Z7V:t7jmLQQJm7ILm5BmZMLp4sEAT
Score10/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-