Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Babylon12_Setup.exe
-
Size
670KB
-
Sample
230923-lc2m4aeb61
-
MD5
5cc9e44078f5a9740fa7692c8252a25a
-
SHA1
ad2256d2cf6d13e8aef26089bafa70c480c73623
-
SHA256
3ba30ffbb1a0059f5d0c2de7b38a33ba05031404d8cd8c970e50861e4c892475
-
SHA512
e024c97ca1273cd0660d128aad5ba44aa020701f50b9b6fd391576c652967876a7ea5cb18a84ef3a6b95a376d0cfe1d3c2119d9afd32d34378235ee369b002fa
-
SSDEEP
12288:7Wb5/jrfSV8RvOSmnIYVrr9bw9nwqfFBDuYGW+f7Ybf0H7n239fV:7gF3fSCRmSdyG9jlXGW+fv239t
Static task
static1
Behavioral task
behavioral1
Sample
Babylon12_Setup.exe
Resource
win7-20230831-en
Malware Config
Targets
-
-
Target
Babylon12_Setup.exe
-
Size
670KB
-
MD5
5cc9e44078f5a9740fa7692c8252a25a
-
SHA1
ad2256d2cf6d13e8aef26089bafa70c480c73623
-
SHA256
3ba30ffbb1a0059f5d0c2de7b38a33ba05031404d8cd8c970e50861e4c892475
-
SHA512
e024c97ca1273cd0660d128aad5ba44aa020701f50b9b6fd391576c652967876a7ea5cb18a84ef3a6b95a376d0cfe1d3c2119d9afd32d34378235ee369b002fa
-
SSDEEP
12288:7Wb5/jrfSV8RvOSmnIYVrr9bw9nwqfFBDuYGW+f7Ybf0H7n239fV:7gF3fSCRmSdyG9jlXGW+fv239t
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Registers COM server for autorun
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Browser Extensions
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2