Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

Badlion Cl....0.exe

windows7-x64

7

Badlion Cl....0.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Badlion Client Setup 3.15.0.exe

  • Size

    129.2MB

  • Sample

    230415-vhh8dagd6v

  • MD5

    738356dfa877aefd77c96d84ca7a134a

  • SHA1

    398c3d7cfa411d1c649b52b445594db0aa85105a

  • SHA256

    30d263ed9e4d4fb72e25b664ebca8e4b2c92878c993be2c48362ca4ba73089e5

  • SHA512

    d7eb3532f0f3b38025023f68553f0c8feb9f349623ce0f3280de4eb7c201b0b812fd9c03942e2135573518736914110fa2a7c6c7403fc00a1f390870b8fdbf5c

  • SSDEEP

    3145728:faW75NJgEd/qt0DdEzcDKNiT2roh0SgtY0VpgeZns6H03EeCg3kO:CW75NKE5DYiTwoWS8pfZnsPPCg3kO

Score
7/10
discovery

Malware Config

Targets

    • Target

      Badlion Client Setup 3.15.0.exe

    • Size

      129.2MB

    • MD5

      738356dfa877aefd77c96d84ca7a134a

    • SHA1

      398c3d7cfa411d1c649b52b445594db0aa85105a

    • SHA256

      30d263ed9e4d4fb72e25b664ebca8e4b2c92878c993be2c48362ca4ba73089e5

    • SHA512

      d7eb3532f0f3b38025023f68553f0c8feb9f349623ce0f3280de4eb7c201b0b812fd9c03942e2135573518736914110fa2a7c6c7403fc00a1f390870b8fdbf5c

    • SSDEEP

      3145728:faW75NJgEd/qt0DdEzcDKNiT2roh0SgtY0VpgeZns6H03EeCg3kO:CW75NKE5DYiTwoWS8pfZnsPPCg3kO

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks