Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
castrrrrrrrrrrrrrrrFilevbs_JC.unknown
-
Size
354KB
-
Sample
231005-xdds7sgb92
-
MD5
d3b052e6d69f99af39bc63450bf1c954
-
SHA1
1f599f59153db4d76511bc367c7f98ca2e9f2ff1
-
SHA256
7839b201945e7614f7f2d216308aaf552e6229f3ccb4453b7babc0ce63926c81
-
SHA512
0f7e7c366bdadd7d4415d1cfa8503558705743aec2079cd1a59365281f55f3da22d16695676f992eb38e758bce8b991634a7fe1b057eb4a9f84816e1e85e9f4d
-
SSDEEP
3072:54hieoOY/ieopMwFwXCjw2jE8vieUyeE8vieUytelffP7FF0JSsUOeIxjc:QcOY/cpDR9+9telffP7FP
Static task
static1
Behavioral task
behavioral1
Sample
castrrrrrrrrrrrrrrrFilevbs_JC.vbs
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
castrrrrrrrrrrrrrrrFilevbs_JC.vbs
Resource
win10v2004-20230915-en
Malware Config
Extracted
https://uploaddeimagens.com.br/images/004/616/609/original/rump_vbs.jpg?1695408937
https://uploaddeimagens.com.br/images/004/616/609/original/rump_vbs.jpg?1695408937
Targets
-
-
Target
castrrrrrrrrrrrrrrrFilevbs_JC.unknown
-
Size
354KB
-
MD5
d3b052e6d69f99af39bc63450bf1c954
-
SHA1
1f599f59153db4d76511bc367c7f98ca2e9f2ff1
-
SHA256
7839b201945e7614f7f2d216308aaf552e6229f3ccb4453b7babc0ce63926c81
-
SHA512
0f7e7c366bdadd7d4415d1cfa8503558705743aec2079cd1a59365281f55f3da22d16695676f992eb38e758bce8b991634a7fe1b057eb4a9f84816e1e85e9f4d
-
SSDEEP
3072:54hieoOY/ieopMwFwXCjw2jE8vieUyeE8vieUytelffP7FF0JSsUOeIxjc:QcOY/cpDR9+9telffP7FP
Score10/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-