Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

code.vbs

windows7-x64

6

code.vbs

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    code.vbs

  • Size

    1KB

  • Sample

    240824-jz262asfkk

  • MD5

    10e6ce0cef8e5e4d696abce1935848b2

  • SHA1

    39cad1402cfecb68cdd9ad8a0255ad90e2989387

  • SHA256

    32ebdb5eb8be7401acac75f791e9a018a96329179ddae30963e1cde6fcf84d8a

  • SHA512

    1d1f0eb5f3d76327f1f2bb3e6e4191b4488510199c92deccd641a41502d83847e1fe8aaa080860153bedc687f8ed454d580872aa9da4303924245ddbcadcb745

Score
7/10
discoveryexecution

Malware Config

Targets

    • Target

      code.vbs

    • Size

      1KB

    • MD5

      10e6ce0cef8e5e4d696abce1935848b2

    • SHA1

      39cad1402cfecb68cdd9ad8a0255ad90e2989387

    • SHA256

      32ebdb5eb8be7401acac75f791e9a018a96329179ddae30963e1cde6fcf84d8a

    • SHA512

      1d1f0eb5f3d76327f1f2bb3e6e4191b4488510199c92deccd641a41502d83847e1fe8aaa080860153bedc687f8ed454d580872aa9da4303924245ddbcadcb745

    Score
    7/10
    discoveryexecution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Command and Scripting Interpreter: PowerShell

      Invoke Powershell command.

      execution

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

      execution

    • Enumerates processes with tasklist

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks