Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

vadwax.exe

windows7-x64

1

vadwax.exe

windows10-2004-x64

7

vadwax.exe

windows10-ltsc 2021-x64

7

vadwax.exe

windows11-21h2-x64

7

Resubmissions

30/12/2024, 11:02

241230-m5lm1sxpcw 7

04/05/2023, 23:00

230504-2zcv9ahd71 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    vadwax.exe

  • Size

    1205.9MB

  • Sample

    241230-m5lm1sxpcw

  • MD5

    2bdd63a7fd97796129b56bd964c8af83

  • SHA1

    5ea8f5f06cb702b4e8d205cc08b860ffd2239c87

  • SHA256

    f91d9de259052595946250a1440a2457dbda9ee8aec8add24419ff939f13e003

  • SHA512

    f0383898783a2194e5a91de0d923a924787c40aa29f0095ef20bdef9e80ad515b7493edd1f5335b8c52e9b68469165103f92d6095a97a2e36a16f4b310582a7f

  • SSDEEP

    196608:HW36QOxQ8JEgOpcqGs4anqH4mJsMQOgKmEiTBh:S63Q8JExpIGnqYxMNmEiTf

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      vadwax.exe

    • Size

      1205.9MB

    • MD5

      2bdd63a7fd97796129b56bd964c8af83

    • SHA1

      5ea8f5f06cb702b4e8d205cc08b860ffd2239c87

    • SHA256

      f91d9de259052595946250a1440a2457dbda9ee8aec8add24419ff939f13e003

    • SHA512

      f0383898783a2194e5a91de0d923a924787c40aa29f0095ef20bdef9e80ad515b7493edd1f5335b8c52e9b68469165103f92d6095a97a2e36a16f4b310582a7f

    • SSDEEP

      196608:HW36QOxQ8JEgOpcqGs4anqH4mJsMQOgKmEiTBh:S63Q8JExpIGnqYxMNmEiTf

    Score
    7/10
    discoverypersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks