Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
EXX.vbs
-
Size
209KB
-
Sample
231009-q4n9asdb9t
-
MD5
5d8410c20a0349ff3b5a346180455b76
-
SHA1
8d1ed5a505bba5df81757273aeef0ff2df403dd7
-
SHA256
ea995ab98439bc4ce6209707650964576c98ad11cd270351d4fbb5d0076bc40f
-
SHA512
a7da8ab934ff7779eb9a713eeb9bf0d2a625a620c9c4b621cc6217b0b62b8ce189cbf7d7c92ce6a1876e0d8a030faef78215f9ddc381f377d2b960b8a5ea97f7
-
SSDEEP
3072:Z/////P/LeDa/////4/////FrqqHFR/////p/////T/////F2/////zA//Bg////:1SrqqHFw
Static task
static1
Behavioral task
behavioral1
Sample
EXX.vbs
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
EXX.vbs
Resource
win10v2004-20230915-en
Malware Config
Extracted
https://uploaddeimagens.com.br/images/004/616/609/original/rump_vbs.jpg?1695408937
https://uploaddeimagens.com.br/images/004/616/609/original/rump_vbs.jpg?1695408937
Targets
-
-
Target
EXX.vbs
-
Size
209KB
-
MD5
5d8410c20a0349ff3b5a346180455b76
-
SHA1
8d1ed5a505bba5df81757273aeef0ff2df403dd7
-
SHA256
ea995ab98439bc4ce6209707650964576c98ad11cd270351d4fbb5d0076bc40f
-
SHA512
a7da8ab934ff7779eb9a713eeb9bf0d2a625a620c9c4b621cc6217b0b62b8ce189cbf7d7c92ce6a1876e0d8a030faef78215f9ddc381f377d2b960b8a5ea97f7
-
SSDEEP
3072:Z/////P/LeDa/////4/////FrqqHFR/////p/////T/////F2/////zA//Bg////:1SrqqHFw
Score10/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-