Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Valorant Checker by Xinax.rar

  • Size

    1.8MB

  • Sample

    230315-yvkthshc61

  • MD5

    9bd8cf45d40c44adf81e6b758910fa49

  • SHA1

    a116df4e2d665544dc55a5661c430de704937573

  • SHA256

    c946298fbdee04f337615a247a5035d08fb5afba83d2e851f64a601e094e7ac8

  • SHA512

    ed5e6d878966232cd08faf8a231bf13e8ee9b8e179f4103789d7e69caad40a37077ca8148f20c9d203a9a1c0c8381031a115fda5b88931a07990463422f48eb4

  • SSDEEP

    49152:U/6bfvTHwPXANaG4G8q+QmkT5Z21vxkAClcX4qQP6tuvux:USbfvzw4F4G8jktZ21vTCyoqdA+

Score
7/10

Malware Config

Targets

    • Target

      Valorant Checker by Xinax.exe

    • Size

      2.0MB

    • MD5

      91061e34a8dbc6156e3fa75dc322e4b0

    • SHA1

      628a4c88f0a3823e07ae055df36bae6b36049419

    • SHA256

      68e98c4079707047d46a02729663551e5eafb34e76bccd018d0beee25dc70ed0

    • SHA512

      6029bed5c4486d0ff4bc348eb924cc9901d57d6781af818b5add937a55fc5cc9acfdc1a7dd01021de13d0e685d3f71bc865730fcd2f47e92797de29413aaaf22

    • SSDEEP

      49152:IBJgkNXymHeCn46zWhYhJseQLTKNWAGM9SwE:yWkxddnK+OiUAGMw

    Score
    7/10
    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Target

      password.txt

    • Size

      44B

    • MD5

      2f8be14b1b4a06a2810d7e35013d4571

    • SHA1

      5c9e88af348ac60bea4b6ecd94ee415b8ac1cc36

    • SHA256

      ee8178a72f38a22185d9fd5aedaf4a8b7b1bebaaf5e4e142178062627b44fe7c

    • SHA512

      dff49719f73d650509e156bbd664bb204f86ddb2322a1a0cfe2e1427dfd1ffe43d06d3557223409ce5696f4a426432fa14bbc5f821ccf29b28b3149dd9f4a847

    Score
    1/10

MITRE ATT&CK Enterprise v6

Tasks