Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

Justifican...go.vbs

windows7-x64

8

Justifican...go.vbs

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Justificante de pago.vbs

  • Size

    210KB

  • Sample

    240418-k1my6saa5w

  • MD5

    ee9f4f75ebcf4734ca7a472f014a9682

  • SHA1

    4878d0e591ae10ad9817c11be5abd34735dc7165

  • SHA256

    319f43e5b712ba70a59285b4ccb0f362b5f2c0cae447b8bf69fdb542de431359

  • SHA512

    3fac1b74b317010aa6811824c8e9920dcd138a77334c8512506aebadfe1ad467ce58c9dad90a28b008adc646496c7cfbf1c841cee85ce8b3100273f9c8b4218d

  • SSDEEP

    6144:XYBgIjQvrMbWSR4WHUJJs9E87Fy4lZrUChpqKmjum4QlNVrDjXR46cCPCRJfaqzl:02dOXnuW

Score
8/10

Malware Config

Targets

    • Target

      Justificante de pago.vbs

    • Size

      210KB

    • MD5

      ee9f4f75ebcf4734ca7a472f014a9682

    • SHA1

      4878d0e591ae10ad9817c11be5abd34735dc7165

    • SHA256

      319f43e5b712ba70a59285b4ccb0f362b5f2c0cae447b8bf69fdb542de431359

    • SHA512

      3fac1b74b317010aa6811824c8e9920dcd138a77334c8512506aebadfe1ad467ce58c9dad90a28b008adc646496c7cfbf1c841cee85ce8b3100273f9c8b4218d

    • SSDEEP

      6144:XYBgIjQvrMbWSR4WHUJJs9E87Fy4lZrUChpqKmjum4QlNVrDjXR46cCPCRJfaqzl:02dOXnuW

    Score
    8/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks