da8cc13a680f030766b3b07a11880426fac9724baebeef0bca38ea1e53bc6f30 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

1

CrossFireWest.exe

windows7-x64

6

CrossFireWest.exe

windows10-2004-x64

6

Sharing

General

Target

CrossFireWest.exe
Size

3.5MB
Sample

231011-wtql9sff74
MD5

79db08eb67031596ee9ea22eedda8ff3
SHA1

9f2a0658b4cc84a3d87ca4ecb377e7ad016c7322
SHA256

da8cc13a680f030766b3b07a11880426fac9724baebeef0bca38ea1e53bc6f30
SHA512

06cefc409bdf6ba2f7d161d66ecfc8d85103fed6d23af5abbfd21d60d9051e8ab2760e9d77b4c3f64059cd1727b5fdf332eaa52c9687034ea87daa566b86ae75
SSDEEP

98304:JGUXXPvOiyg82ontlpgPQzLx8agSKu+o53P:JGUvvTyg82onb78bSR+0P

Score

6^/10

evasion trojan

Static task

static1

Behavioral task

behavioral1

Sample

CrossFireWest.exe

Resource

win7-20230831-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

CrossFireWest.exe

Resource

win10v2004-20230915-en

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  CrossFireWest.exe
- Size
  
  3.5MB
- MD5
  
  79db08eb67031596ee9ea22eedda8ff3
- SHA1
  
  9f2a0658b4cc84a3d87ca4ecb377e7ad016c7322
- SHA256
  
  da8cc13a680f030766b3b07a11880426fac9724baebeef0bca38ea1e53bc6f30
- SHA512
  
  06cefc409bdf6ba2f7d161d66ecfc8d85103fed6d23af5abbfd21d60d9051e8ab2760e9d77b4c3f64059cd1727b5fdf332eaa52c9687034ea87daa566b86ae75
- SSDEEP
  
  98304:JGUXXPvOiyg82ontlpgPQzLx8agSKu+o53P:JGUvvTyg82onb78bSR+0P
Score

6^/10

evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy