Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

cb9bb9fe47...253.js

windows7-x64

10

cb9bb9fe47...253.js

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb9bb9fe4729d711117ad59954345253

  • Size

    139KB

  • Sample

    240315-rgt2psae2s

  • MD5

    cb9bb9fe4729d711117ad59954345253

  • SHA1

    259df8492477a434755722941f30ac55b67b4527

  • SHA256

    570738dbd47c6e17c764ed50451f1f9b6bb1d69cafbb24d134cdc5e39e0594db

  • SHA512

    868d72f39c4a5257d9980acf939fc34c22f730c772d8adc4727081cae6e569a1b7485c8ca8b3d0aaf1e6375810e89b5ac00817a7e13982b248c52f784bc703cc

  • SSDEEP

    3072:hkwt8kyLG9u53QwDd9Ry98guHVBqqg2bcruzUHmLKeMMU7GwbWBPwVGWl9SZ8kVW:hIky69uxQwJ9Ry9RuXqW4SzUHmLKeMMS

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

http://smart-integrator.hr/pornhub.php

Targets

    • Target

      cb9bb9fe4729d711117ad59954345253

    • Size

      139KB

    • MD5

      cb9bb9fe4729d711117ad59954345253

    • SHA1

      259df8492477a434755722941f30ac55b67b4527

    • SHA256

      570738dbd47c6e17c764ed50451f1f9b6bb1d69cafbb24d134cdc5e39e0594db

    • SHA512

      868d72f39c4a5257d9980acf939fc34c22f730c772d8adc4727081cae6e569a1b7485c8ca8b3d0aaf1e6375810e89b5ac00817a7e13982b248c52f784bc703cc

    • SSDEEP

      3072:hkwt8kyLG9u53QwDd9Ry98guHVBqqg2bcruzUHmLKeMMU7GwbWBPwVGWl9SZ8kVW:hIky69uxQwJ9Ry9RuXqW4SzUHmLKeMMS

    Score
    10/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks