Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

bad-piggie...in.exe

windows7-x64

8

bad-piggie...in.exe

windows10-1703-x64

8

bad-piggie...in.exe

windows10-2004-x64

8

Resubmissions

14/09/2022, 05:09

220914-fs6n4adahk 8

14/09/2022, 05:09

220914-fs459shcf2 8

11/08/2022, 20:58

220811-zr9h5sefg3 8

02/08/2022, 11:13

220802-nbqkjsebg7 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bad-piggies-1-3-0-en-win.exe

  • Size

    26.9MB

  • Sample

    220914-fs6n4adahk

  • MD5

    e7cfb590d467514eae6071e3fe264c4d

  • SHA1

    d5ba530239e3a9fb3af41468db606c6d10503d65

  • SHA256

    d069cc98d81da2a127a958a0f27929c2f4d28df190423231bd4403d0a2d5738e

  • SHA512

    bf9a2f7df2421f5c4530d62fe6f524b75d7d893d3e930005e67433ffafc998fe099379a10eaf93bf6dbc3e548213c5e61ad14820c88c4f5bb5ccbba0bff95849

  • SSDEEP

    393216:IJo5AaSO3UpcWKhef0O12q6EgdzmGcpeT4oRW2Jsyhjo25XBEIDoSfaANuZxXa+7:U9aSOi9Khef0cJGjwT2HrsnXa7MnmXw

Score
8/10

Malware Config

Targets

    • Target

      bad-piggies-1-3-0-en-win.exe

    • Size

      26.9MB

    • MD5

      e7cfb590d467514eae6071e3fe264c4d

    • SHA1

      d5ba530239e3a9fb3af41468db606c6d10503d65

    • SHA256

      d069cc98d81da2a127a958a0f27929c2f4d28df190423231bd4403d0a2d5738e

    • SHA512

      bf9a2f7df2421f5c4530d62fe6f524b75d7d893d3e930005e67433ffafc998fe099379a10eaf93bf6dbc3e548213c5e61ad14820c88c4f5bb5ccbba0bff95849

    • SSDEEP

      393216:IJo5AaSO3UpcWKhef0O12q6EgdzmGcpeT4oRW2Jsyhjo25XBEIDoSfaANuZxXa+7:U9aSOi9Khef0cJGjwT2HrsnXa7MnmXw

    Score
    8/10

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v6

Tasks