Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

7

BOTNETGENE...IT.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    BOTNETGENERATOR_2023_NETGEAR_EXPLOIT.exe

  • Size

    4.5MB

  • Sample

    230211-ecmevabf77

  • MD5

    19f2f9f101f6a1018e1a37f0aec62d51

  • SHA1

    94b2446dd6c11495b9022401bae8117ff3458a37

  • SHA256

    e919ae7d21d27145b580beb65bb568efb6092d1863b3423bcb683367d6cc72d4

  • SHA512

    06118ccf3844a986986c05b78b4bacce15e78f68134f3d9ad292323dfbd924aaf7981d6e61443adb1e008209fc3b00492d78ee1acb96f2355b9c70525f3e3ce5

  • SSDEEP

    98304:et2qYSI7x8nquqk9OU602w8Eog5fafmOolbmsk:esPNvkvP2TSXosk

Score
9/10
evasionthemidatrojan

Malware Config

Targets

    • Target

      BOTNETGENERATOR_2023_NETGEAR_EXPLOIT.exe

    • Size

      4.5MB

    • MD5

      19f2f9f101f6a1018e1a37f0aec62d51

    • SHA1

      94b2446dd6c11495b9022401bae8117ff3458a37

    • SHA256

      e919ae7d21d27145b580beb65bb568efb6092d1863b3423bcb683367d6cc72d4

    • SHA512

      06118ccf3844a986986c05b78b4bacce15e78f68134f3d9ad292323dfbd924aaf7981d6e61443adb1e008209fc3b00492d78ee1acb96f2355b9c70525f3e3ce5

    • SSDEEP

      98304:et2qYSI7x8nquqk9OU602w8Eog5fafmOolbmsk:esPNvkvP2TSXosk

    Score
    9/10
    evasionthemidatrojan

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Checks whether UAC is enabled

      evasiontrojan

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks