Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

VastGen.exe

windows7-x64

7

VastGen.exe

windows10-2004-x64

7

main.pyc

windows7-x64

3

main.pyc

windows10-2004-x64

3

data/usernames.vbs

windows7-x64

1

data/usernames.vbs

windows10-2004-x64

1

hsw-stuff/...hsw.js

windows7-x64

1

hsw-stuff/...hsw.js

windows10-2004-x64

1

hsw-stuff/obf.js

windows7-x64

1

hsw-stuff/obf.js

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    VastGen-PROD.zip

  • Size

    40.7MB

  • MD5

    f4c2ec0c4bd2be2aa15e71a783b3c5ed

  • SHA1

    4e98a51e00c428326829c6bad9a1dd91adbac88f

  • SHA256

    8fa72d02675d6c3da7374ad0e00b5fe076c0ac84bde0d6d1b2be5824beaee689

  • SHA512

    634d928a201b894b3365aca40a95d721903c62804f624ae22efbe35462a9f421cc0f73a01c0e7c5cf457239f9011b8f885d1dfcd637498d4a013ebcf7b7dc9bf

  • SSDEEP

    786432:YOKoGQCWHqiiVoMHbTr5ydW5VvQCH7GLGuXaA7DiOj+OyAzfgSMhqPe9bwJOBNPq:YOKo7RAiM7Tr5ia5H6L3ZDj+OyA12qPB

Score
10/10
pyinstallersnakebotsnakebot

Malware Config

Signatures

  • Snakebot family
    snakebot
  • Contains SnakeBOT related strings 1 IoCs
    snakebot
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • VastGen-PROD.zip
    .zip
  • VastGen.exe
    .exe windows:5 windows x64

    ba5546933531fafa869b1f86a4e2a959


    Headers

    Imports

    Sections

  • main.pyc
  • config.toml
  • data/bios.txt
  • data/proxies.txt
  • data/usernames.txt
    .vbs
  • hsw-stuff/extensions/hsw.js
    .js
  • hsw-stuff/obf.js
    .js
  • hsw-stuff/package-lock.json
  • hsw-stuff/package.json