Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
1boredape/a..._store
windows7-x64
3boredape/a..._store
windows10-2004-x64
3boredape/a...rt.png
windows7-x64
3boredape/a...rt.png
windows10-2004-x64
3boredape/a...nd.png
windows7-x64
3boredape/a...nd.png
windows10-2004-x64
3boredape/a...ar.otf
windows7-x64
3boredape/a...ar.otf
windows10-2004-x64
7boredape/a...go.png
windows7-x64
3boredape/a...go.png
windows10-2004-x64
3boredape/a...rd.svg
windows7-x64
1boredape/a...rd.svg
windows10-2004-x64
1boredape/a...ta.svg
windows7-x64
1boredape/a...ta.svg
windows10-2004-x64
1boredape/a...ta.xml
windows7-x64
1boredape/a...ta.xml
windows10-2004-x64
1boredape/a...er.svg
windows7-x64
1boredape/a...er.svg
windows10-2004-x64
1boredape/index.html
windows7-x64
1boredape/index.html
windows10-2004-x64
1boredape/p...k.json
windows7-x64
3boredape/p...k.json
windows10-2004-x64
3boredape/package.json
windows7-x64
3boredape/package.json
windows10-2004-x64
3boredape/settings.js
windows7-x64
1boredape/settings.js
windows10-2004-x64
1boredape/s...le.css
windows7-x64
3boredape/s...le.css
windows10-2004-x64
7boredape/s...es.css
windows7-x64
3boredape/s...es.css
windows10-2004-x64
7boredape/s...aim.js
windows7-x64
1boredape/s...aim.js
windows10-2004-x64
1Analysis
-
max time kernel
1364s -
max time network
1160s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
14/11/2023, 20:14
Static task
static1
Behavioral task
behavioral1
Sample
boredape/assets/.ds_store
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
boredape/assets/.ds_store
Resource
win10v2004-20231025-en
Behavioral task
behavioral3
Sample
boredape/assets/alert.png
Resource
win7-20231020-en
Behavioral task
behavioral4
Sample
boredape/assets/alert.png
Resource
win10v2004-20231023-en
Behavioral task
behavioral5
Sample
boredape/assets/background.png
Resource
win7-20231023-en
Behavioral task
behavioral6
Sample
boredape/assets/background.png
Resource
win10v2004-20231020-en
Behavioral task
behavioral7
Sample
boredape/assets/fonts/MonumentExtended-Regular.otf
Resource
win7-20231023-en
Behavioral task
behavioral8
Sample
boredape/assets/fonts/MonumentExtended-Regular.otf
Resource
win10v2004-20231020-en
Behavioral task
behavioral9
Sample
boredape/assets/logo.png
Resource
win7-20231023-en
Behavioral task
behavioral10
Sample
boredape/assets/logo.png
Resource
win10v2004-20231023-en
Behavioral task
behavioral11
Sample
boredape/assets/svg/discord.svg
Resource
win7-20231023-en
Behavioral task
behavioral12
Sample
boredape/assets/svg/discord.svg
Resource
win10v2004-20231025-en
Behavioral task
behavioral13
Sample
boredape/assets/svg/insta.svg
Resource
win7-20231025-en
Behavioral task
behavioral14
Sample
boredape/assets/svg/insta.svg
Resource
win10v2004-20231023-en
Behavioral task
behavioral15
Sample
boredape/assets/svg/meta.xml
Resource
win7-20231025-en
Behavioral task
behavioral16
Sample
boredape/assets/svg/meta.xml
Resource
win10v2004-20231020-en
Behavioral task
behavioral17
Sample
boredape/assets/svg/twiter.svg
Resource
win7-20231020-en
Behavioral task
behavioral18
Sample
boredape/assets/svg/twiter.svg
Resource
win10v2004-20231025-en
Behavioral task
behavioral19
Sample
boredape/index.html
Resource
win7-20231023-en
Behavioral task
behavioral20
Sample
boredape/index.html
Resource
win10v2004-20231020-en
Behavioral task
behavioral21
Sample
boredape/package-lock.json
Resource
win7-20231023-en
Behavioral task
behavioral22
Sample
boredape/package-lock.json
Resource
win10v2004-20231023-en
Behavioral task
behavioral23
Sample
boredape/package.json
Resource
win7-20231020-en
Behavioral task
behavioral24
Sample
boredape/package.json
Resource
win10v2004-20231023-en
Behavioral task
behavioral25
Sample
boredape/settings.js
Resource
win7-20231020-en
Behavioral task
behavioral26
Sample
boredape/settings.js
Resource
win10v2004-20231020-en
Behavioral task
behavioral27
Sample
boredape/src/css/style.css
Resource
win7-20231023-en
Behavioral task
behavioral28
Sample
boredape/src/css/style.css
Resource
win10v2004-20231020-en
Behavioral task
behavioral29
Sample
boredape/src/css/styles.css
Resource
win7-20231020-en
Behavioral task
behavioral30
Sample
boredape/src/css/styles.css
Resource
win10v2004-20231023-en
Behavioral task
behavioral31
Sample
boredape/src/js/claim.js
Resource
win7-20231020-en
Behavioral task
behavioral32
Sample
boredape/src/js/claim.js
Resource
win10v2004-20231023-en
General
-
Target
boredape/assets/fonts/MonumentExtended-Regular.otf
-
Size
33KB
-
MD5
73b9994bb505da43a387d107849baf95
-
SHA1
1e787896f58bb8ef3b6d5276f8c6d8da541150d9
-
SHA256
62b958648c1a7f8e984788b7f02902d11531f76e481ce0b9043ad53840a72d09
-
SHA512
97c9ef46ee62423cdbec88ac8e1870120c86536292d234dc3235b9f036aa79897e80e5b63f65e6c700c3ef34192f4b618b348cd60f4758f348b465b6fad077b1
-
SSDEEP
768:L3wgJKUWGRAsvTz1pc+ldR50nOyRukIL7QnDGKVI8RN50XHPIkWC6wi:DZJK7GRfzMIdR5xKuADGgIa+HgCp
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-3350690463-3549324357-1323838019-1000\Control Panel\International\Geo\Nation cmd.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3350690463-3549324357-1323838019-1000_Classes\Local Settings cmd.exe -
Suspicious use of WriteProcessMemory 2 IoCs
description pid Process procid_target PID 2676 wrote to memory of 1636 2676 cmd.exe 87 PID 2676 wrote to memory of 1636 2676 cmd.exe 87
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\boredape\assets\fonts\MonumentExtended-Regular.otf1⤵
- Checks computer location settings
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:2676 -
C:\Windows\System32\fontview.exe"C:\Windows\System32\fontview.exe" C:\Users\Admin\AppData\Local\Temp\boredape\assets\fonts\MonumentExtended-Regular.otf2⤵PID:1636
-