Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
Steam Chec...ne.dll
windows7-x64
1Steam Chec...ne.dll
windows10-2004-x64
1Steam Chec...52.dll
windows7-x64
1Steam Chec...52.dll
windows10-2004-x64
1Steam Chec...me.dll
windows7-x64
1Steam Chec...me.dll
windows10-2004-x64
1Steam Chec...in.dll
windows7-x64
1Steam Chec...in.dll
windows10-2004-x64
1Steam Chec...gn.dll
windows7-x64
1Steam Chec...gn.dll
windows10-2004-x64
1Steam Chec...ts.dll
windows7-x64
1Steam Chec...ts.dll
windows10-2004-x64
1Steam Chec...rk.dll
windows7-x64
1Steam Chec...rk.dll
windows10-2004-x64
1Steam Chec....0.dll
windows7-x64
1Steam Chec....0.dll
windows10-2004-x64
1Steam Chec...on.dll
windows7-x64
1Steam Chec...on.dll
windows10-2004-x64
1Steam Chec...on.exe
windows7-x64
10Steam Chec...on.exe
windows10-2004-x64
10Steam Chec...ne.dll
windows7-x64
1Steam Chec...ne.dll
windows10-2004-x64
1Steam Chec...en.dll
windows7-x64
1Steam Chec...en.dll
windows10-2004-x64
1Steam Chec...ig.bat
windows7-x64
10Steam Chec...ig.bat
windows10-2004-x64
10Steam Chec...C2.ps1
windows7-x64
1Steam Chec...C2.ps1
windows10-2004-x64
1Steam Chec...To.ps1
windows7-x64
1Steam Chec...To.ps1
windows10-2004-x64
1Steam Chec...rk.bat
windows7-x64
10Steam Chec...rk.bat
windows10-2004-x64
10Analysis
-
max time kernel
90s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-es -
resource tags
arch:x64arch:x86image:win10v2004-20221111-eslocale:es-esos:windows10-2004-x64systemwindows -
submitted
01/01/2023, 04:29
Static task
static1
Behavioral task
behavioral1
Sample
Steam Checker By abbadon/BruteEngine.dll
Resource
win7-20221111-es
Behavioral task
behavioral2
Sample
Steam Checker By abbadon/BruteEngine.dll
Resource
win10v2004-20221111-es
Behavioral task
behavioral3
Sample
Steam Checker By abbadon/Bunifu_UI_v1.52.dll
Resource
win7-20221111-es
Behavioral task
behavioral4
Sample
Steam Checker By abbadon/Bunifu_UI_v1.52.dll
Resource
win10v2004-20220812-es
Behavioral task
behavioral5
Sample
Steam Checker By abbadon/Login Theme.dll
Resource
win7-20221111-es
Behavioral task
behavioral6
Sample
Steam Checker By abbadon/Login Theme.dll
Resource
win10v2004-20221111-es
Behavioral task
behavioral7
Sample
Steam Checker By abbadon/MaterialSkin.dll
Resource
win7-20221111-es
Behavioral task
behavioral8
Sample
Steam Checker By abbadon/MaterialSkin.dll
Resource
win10v2004-20220812-es
Behavioral task
behavioral9
Sample
Steam Checker By abbadon/MetroFramework.Design.dll
Resource
win7-20220901-es
Behavioral task
behavioral10
Sample
Steam Checker By abbadon/MetroFramework.Design.dll
Resource
win10v2004-20220812-es
Behavioral task
behavioral11
Sample
Steam Checker By abbadon/MetroFramework.Fonts.dll
Resource
win7-20221111-es
Behavioral task
behavioral12
Sample
Steam Checker By abbadon/MetroFramework.Fonts.dll
Resource
win10v2004-20220812-es
Behavioral task
behavioral13
Sample
Steam Checker By abbadon/MetroFramework.dll
Resource
win7-20220812-es
Behavioral task
behavioral14
Sample
Steam Checker By abbadon/MetroFramework.dll
Resource
win10v2004-20221111-es
Behavioral task
behavioral15
Sample
Steam Checker By abbadon/MetroSuite 2.0.dll
Resource
win7-20221111-es
Behavioral task
behavioral16
Sample
Steam Checker By abbadon/MetroSuite 2.0.dll
Resource
win10v2004-20221111-es
Behavioral task
behavioral17
Sample
Steam Checker By abbadon/Newtonsoft.Json.dll
Resource
win7-20220901-es
Behavioral task
behavioral18
Sample
Steam Checker By abbadon/Newtonsoft.Json.dll
Resource
win10v2004-20220812-es
Behavioral task
behavioral19
Sample
Steam Checker By abbadon/Steam Checker V0.1 By Abbadon.exe
Resource
win7-20221111-es
Behavioral task
behavioral20
Sample
Steam Checker By abbadon/Steam Checker V0.1 By Abbadon.exe
Resource
win10v2004-20220812-es
Behavioral task
behavioral21
Sample
Steam Checker By abbadon/SuperEngine.dll
Resource
win7-20221111-es
Behavioral task
behavioral22
Sample
Steam Checker By abbadon/SuperEngine.dll
Resource
win10v2004-20220812-es
Behavioral task
behavioral23
Sample
Steam Checker By abbadon/Teen.dll
Resource
win7-20220901-es
Behavioral task
behavioral24
Sample
Steam Checker By abbadon/Teen.dll
Resource
win10v2004-20220812-es
Behavioral task
behavioral25
Sample
Steam Checker By abbadon/config/Config.bat
Resource
win7-20221111-es
Behavioral task
behavioral26
Sample
Steam Checker By abbadon/config/Config.bat
Resource
win10v2004-20221111-es
Behavioral task
behavioral27
Sample
Steam Checker By abbadon/config/System/C2.ps1
Resource
win7-20220812-es
Behavioral task
behavioral28
Sample
Steam Checker By abbadon/config/System/C2.ps1
Resource
win10v2004-20221111-es
Behavioral task
behavioral29
Sample
Steam Checker By abbadon/config/System/CopyTo.ps1
Resource
win7-20220812-es
Behavioral task
behavioral30
Sample
Steam Checker By abbadon/config/System/CopyTo.ps1
Resource
win10v2004-20221111-es
Behavioral task
behavioral31
Sample
Steam Checker By abbadon/config/System/FrameWork.bat
Resource
win7-20220812-es
General
-
Target
Steam Checker By abbadon/config/System/CopyTo.ps1
-
Size
195B
-
MD5
4cad39a3c49a131b8d172fca8259f2fa
-
SHA1
940a0789c909d26de9357533bf5dd1ad2db01b4a
-
SHA256
2273ff44dd60f9ef1a13a1867355b8181c6fbd2b8ef2f8d0ef426538c841dd7e
-
SHA512
0fb9127f8b0a63d3abb52d83b078aaeaaaf964e897a148ae09bf76c0539633f59dd6c467945fa24c3eb03dbc03a7811387e2e2773a652ed6585f6049c97fb72f
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 5016 powershell.exe 5016 powershell.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 5016 powershell.exe