Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
SERVER~1.JS
-
Size
45.1MB
-
Sample
240326-tcyv7sgf61
-
MD5
e8dbd1070fa7ecc4da9dd4f37ffd6346
-
SHA1
08367987a51783b8eb309929c5a4c836f455ea36
-
SHA256
4f9a9d04880d17de55763ccb6c6fe0c7d5dbb7129531a5083ce7ec5a10895a44
-
SHA512
bd94e0911d541c6ca4fe914ded139923cdea9b0f1b93109aa759a6d311084384854bc405ef412034a5c9e4094f9264d1767c279b44a57ddc56314ab3543066be
-
SSDEEP
6144:jyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyj:P
Static task
static1
Behavioral task
behavioral1
Sample
SERVER~1.js
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
SERVER~1.js
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
SERVER~1.JS
-
Size
45.1MB
-
MD5
e8dbd1070fa7ecc4da9dd4f37ffd6346
-
SHA1
08367987a51783b8eb309929c5a4c836f455ea36
-
SHA256
4f9a9d04880d17de55763ccb6c6fe0c7d5dbb7129531a5083ce7ec5a10895a44
-
SHA512
bd94e0911d541c6ca4fe914ded139923cdea9b0f1b93109aa759a6d311084384854bc405ef412034a5c9e4094f9264d1767c279b44a57ddc56314ab3543066be
-
SSDEEP
6144:jyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyj:P
Score10/10-
GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-