Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    WiiWarePatcher.bat

  • Size

    41KB

  • Sample

    230401-nkceaahg22

  • MD5

    e8b1754bf6eae0e4b7038cd54d1d9d16

  • SHA1

    0471df70b332ed579af7c02383be9a9d3d0617a2

  • SHA256

    a99c40f1fae6e3e66250761079a59288d602cf123be94ab7281ed3bf28a6d137

  • SHA512

    9a36cb2175c2d3ab7da28c98fe617e4c1ee318120fe567aee71a0ffcb334c14adae072c8ced4ea021d36fcb7f67ef9c4bcb995075d84bdf498b5e41b8a9667a3

  • SSDEEP

    384:P/pgn0y9YQ3twCj4bGg2+wapvn1D1U5hGIcL19eCKouLyLpR+PgbuLQ1qlMmUf:KhW19souOLpR+Pgbukq2/f

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
exe.dropper

https://patcher.rc24.xyz/update/WiiWare-Patcher/v1/curl.exe

Targets

    • Target

      WiiWarePatcher.bat

    • Size

      41KB

    • MD5

      e8b1754bf6eae0e4b7038cd54d1d9d16

    • SHA1

      0471df70b332ed579af7c02383be9a9d3d0617a2

    • SHA256

      a99c40f1fae6e3e66250761079a59288d602cf123be94ab7281ed3bf28a6d137

    • SHA512

      9a36cb2175c2d3ab7da28c98fe617e4c1ee318120fe567aee71a0ffcb334c14adae072c8ced4ea021d36fcb7f67ef9c4bcb995075d84bdf498b5e41b8a9667a3

    • SSDEEP

      384:P/pgn0y9YQ3twCj4bGg2+wapvn1D1U5hGIcL19eCKouLyLpR+PgbuLQ1qlMmUf:KhW19souOLpR+Pgbukq2/f

    Score
    10/10
    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Executes dropped EXE

MITRE ATT&CK Enterprise v6

Tasks