Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Badlion Client Setup 3.12.2.exe
-
Size
130.2MB
-
Sample
230131-hbekdseh46
-
MD5
8a2c0126d77da21e6dd849e99cc55f7f
-
SHA1
cc8559df3b55887e4da205fdcaac5dd273740d8d
-
SHA256
e403e94b43a16fed936c5869728ee337c565f4bd80582374cfee51a7d10949e9
-
SHA512
f04d9d3815ae6f4b9ebc19c372a11bdd19f055a34a4a269c5e5cbff71379b9c4c4901a51fa156e115a17948603e94eead2eaa9863d2f88e1f8932803510778e3
-
SSDEEP
3145728:VAW7XW1mma/U9kGEqR5easiT2roh0SgtY0MuZns6eIMjFnfZC:OW7G1K4kgEwTwoWS7uZnsvjFnfZC
Static task
static1
Behavioral task
behavioral1
Sample
Badlion Client Setup 3.12.2.exe
Resource
win10-20220812-en
Malware Config
Targets
-
-
Target
Badlion Client Setup 3.12.2.exe
-
Size
130.2MB
-
MD5
8a2c0126d77da21e6dd849e99cc55f7f
-
SHA1
cc8559df3b55887e4da205fdcaac5dd273740d8d
-
SHA256
e403e94b43a16fed936c5869728ee337c565f4bd80582374cfee51a7d10949e9
-
SHA512
f04d9d3815ae6f4b9ebc19c372a11bdd19f055a34a4a269c5e5cbff71379b9c4c4901a51fa156e115a17948603e94eead2eaa9863d2f88e1f8932803510778e3
-
SSDEEP
3145728:VAW7XW1mma/U9kGEqR5easiT2roh0SgtY0MuZns6eIMjFnfZC:OW7G1K4kgEwTwoWS7uZnsvjFnfZC
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-