Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

game.bat

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    game.bat

  • Size

    4KB

  • Sample

    231003-el66lsgb5y

  • MD5

    5c3319e045a738c49066e254cefa728e

  • SHA1

    1963f565093619780748da2ef604c3d191029920

  • SHA256

    08563fc77698091b0a2b3e342d2dc25d32a0d407e96e265c08291da456f49500

  • SHA512

    8a8b6c2b9735296db4683cdace2740c902972aa927ad104c9f73510717b3e0fb890f486e8a48a9d77f069574b6953cfa624e18e5e4df0ca115c806d287f03a32

  • SSDEEP

    96:YBlYcIcIcIcIcIcIckt4NzA3KhG9Hpzq2/8QRX:YfYcIcIcIcIcIcIcmmA3JJ7/8Ql

Score
10/10
persistence

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
exe.dropper

https://cdn.discordapp.com/attachments/1026368512589037568/1157889000858734703/Screenshot_20230929_022057_CapCut.jpg

Extracted

Language
ps1
Deobfuscated
URLs
exe.dropper

https://cdn.discordapp.com/attachments/1026368512589037568/1157889001072623657/Screenshot_20230929_043046_CapCut.jpg

Targets

    • Target

      game.bat

    • Size

      4KB

    • MD5

      5c3319e045a738c49066e254cefa728e

    • SHA1

      1963f565093619780748da2ef604c3d191029920

    • SHA256

      08563fc77698091b0a2b3e342d2dc25d32a0d407e96e265c08291da456f49500

    • SHA512

      8a8b6c2b9735296db4683cdace2740c902972aa927ad104c9f73510717b3e0fb890f486e8a48a9d77f069574b6953cfa624e18e5e4df0ca115c806d287f03a32

    • SSDEEP

      96:YBlYcIcIcIcIcIcIckt4NzA3KhG9Hpzq2/8QRX:YfYcIcIcIcIcIcIcmmA3JJ7/8Ql

    Score
    10/10
    persistence

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks