Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

DuoHacker.exe

windows10-1703-x64

7

Resubmissions

12/04/2023, 12:40

230412-pv99qscc64 7

12/04/2023, 12:34

230412-prx51acc39 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DuoHacker.exe

  • Size

    65.5MB

  • Sample

    230412-pv99qscc64

  • MD5

    705019eaf223137bb5078a24b16d328f

  • SHA1

    a908b1321641d7f5c5773ba4cb46990978605ee3

  • SHA256

    839671ce4f71f26bae33aa91246a409cda9367fc27d0cf9f57cb7f4df7a3d177

  • SHA512

    bddac83468088c0fdc199733be89e67fd3a1f0d3ef2addd84936ba886856e02c4919892cd4f32de1321672c4b611a74b64fb396607d9d4f43d8a66c3520a4b24

  • SSDEEP

    1572864:AXky+ptb+Nkl6BaArQ2ocxSG3oSi061S71zyV6yrh8+c1zVBrYaNe:A0yUt5qpnYG3Zi061SZzyc9+cyMe

Score
7/10
discovery

Malware Config

Targets

    • Target

      DuoHacker.exe

    • Size

      65.5MB

    • MD5

      705019eaf223137bb5078a24b16d328f

    • SHA1

      a908b1321641d7f5c5773ba4cb46990978605ee3

    • SHA256

      839671ce4f71f26bae33aa91246a409cda9367fc27d0cf9f57cb7f4df7a3d177

    • SHA512

      bddac83468088c0fdc199733be89e67fd3a1f0d3ef2addd84936ba886856e02c4919892cd4f32de1321672c4b611a74b64fb396607d9d4f43d8a66c3520a4b24

    • SSDEEP

      1572864:AXky+ptb+Nkl6BaArQ2ocxSG3oSi061S71zyV6yrh8+c1zVBrYaNe:A0yUt5qpnYG3Zi061SZzyc9+cyMe

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks