Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
8Static
static
3Silent Aim.rar
windows7-x64
3Silent Aim.rar
windows10-2004-x64
3Silent Aim...gs.reg
windows7-x64
1Silent Aim...gs.reg
windows10-2004-x64
1Silent Aim...IX.reg
windows7-x64
8Silent Aim...IX.reg
windows10-2004-x64
8Silent Aim...AX.reg
windows7-x64
1Silent Aim...AX.reg
windows10-2004-x64
1Silent Aim...ix.reg
windows7-x64
1Silent Aim...ix.reg
windows10-2004-x64
1Silent Aim/config.cfg
windows7-x64
3Silent Aim/config.cfg
windows10-2004-x64
3Silent Aim...er.dll
windows7-x64
1Silent Aim...er.dll
windows10-2004-x64
1Silent Aim...bg.dll
windows7-x64
1Silent Aim...bg.dll
windows10-2004-x64
1Silent Aim...bg.dll
windows7-x64
1Silent Aim...bg.dll
windows10-2004-x64
1Silent Aim..._s.dll
windows7-x64
1Silent Aim..._s.dll
windows10-2004-x64
1Silent Aim/klaxer.cfg
windows7-x64
3Silent Aim/klaxer.cfg
windows10-2004-x64
3Silent Aim...ig.cfg
windows7-x64
3Silent Aim...ig.cfg
windows10-2004-x64
3Analysis
-
max time kernel
64s -
max time network
72s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
11/06/2023, 20:01
Static task
static1
Behavioral task
behavioral1
Sample
Silent Aim.rar
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Silent Aim.rar
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
Silent Aim/Registry Fix Tools/Net Settings.reg
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Silent Aim/Registry Fix Tools/Net Settings.reg
Resource
win10v2004-20230221-en
Behavioral task
behavioral5
Sample
Silent Aim/Registry Fix Tools/No-Recoil FIX.reg
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
Silent Aim/Registry Fix Tools/No-Recoil FIX.reg
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
Silent Aim/Registry Fix Tools/No-Recoil MAX.reg
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
Silent Aim/Registry Fix Tools/No-Recoil MAX.reg
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
Silent Aim/Registry Fix Tools/Ping Fix.reg
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
Silent Aim/Registry Fix Tools/Ping Fix.reg
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
Silent Aim/config.cfg
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
Silent Aim/config.cfg
Resource
win10v2004-20230221-en
Behavioral task
behavioral13
Sample
Silent Aim/dlls/FireHelper.dll
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
Silent Aim/dlls/FireHelper.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
Silent Aim/dlls/dbg.dll
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
Silent Aim/dlls/dbg.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
Silent Aim/dlls/odbg.dll
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
Silent Aim/dlls/odbg.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
Silent Aim/dlls/vstdlib_s.dll
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
Silent Aim/dlls/vstdlib_s.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
Silent Aim/klaxer.cfg
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
Silent Aim/klaxer.cfg
Resource
win10v2004-20230220-en
Behavioral task
behavioral23
Sample
Silent Aim/userconfig.cfg
Resource
win7-20230220-en
Behavioral task
behavioral24
Sample
Silent Aim/userconfig.cfg
Resource
win10v2004-20230220-en
General
-
Target
Silent Aim/Registry Fix Tools/No-Recoil FIX.reg
-
Size
26KB
-
MD5
57385bfb64c5fae5340db3f266dcf30d
-
SHA1
f536b28768e4d5d1b6446831c0da4283d3ab5adf
-
SHA256
ed43a0648213aef25bb19e724efdde626c137f9198a77cc2c181564da7e71758
-
SHA512
e24b5ac28e65cbddb492fb1f2c71bd446b5317206b71a8bd3bcf61979745629458fa370f01981ecd4ef85ee71b4026efb2029bb3b6a232644b04fb0511f85bf2
-
SSDEEP
192:P9HsEjwc5wTDsFa5eOJjvsZlZocovigZvMzBJa0Z6INNkkiHsVn:P15wTgF+3K3
Malware Config
Signatures
-
Sets DLL path for service in the registry 2 TTPs 2 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\LanmanServer\Parameters\ServiceDll = "%SystemRoot%\\System32\\srvsvc.dll" regedit.exe Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\LanmanWorkstation\Parameters\ServiceDll = "%SystemRoot%\\System32\\wkssvc.dll" regedit.exe -
Sets service image path in registry 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\ImagePath = "system32\\DRIVERS\\tcpip.sys" regedit.exe -
Runs .reg file with regedit 1 IoCs
pid Process 4024 regedit.exe