Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

URLScan

urlscan

1

https://gitlab.com/B...

windows7-x64

10

https://gitlab.com/B...

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://gitlab.com/Binayak7/golden/-/raw/main/Cloud_Stx2.msi?inline=false

  • Sample

    220913-qcv8jabdfn

Score
10/10
babadedacrypterloaderpersistence

Malware Config

Targets

    • Target

      https://gitlab.com/Binayak7/golden/-/raw/main/Cloud_Stx2.msi?inline=false

    Score
    10/10
    babadedacrypterloaderpersistence

    • Babadeda

      Babadeda is a crypter delivered as a legitimate installer and used to drop other malware families.

      loadercrypterbabadeda

    • Babadeda Crypter

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.