Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    https://pixeldrain.com/api/file/XR5kMSus?download?id=51ffcfc7-062c-45df-9ef0-6889176f530f

  • Sample

    250312-snmfwatzhx

Malware Config

Targets

    • Target

      https://pixeldrain.com/api/file/XR5kMSus?download?id=51ffcfc7-062c-45df-9ef0-6889176f530f

    • Vjw0rm

      Vjw0rm is a remote access trojan written in JavaScript.

    • Vjw0rm family

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks