Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

MW3 Aibot ...t).exe

windows7-x64

10

MW3 Aibot ...t).exe

windows10-2004-x64

10

MW3 Aimbot.exe

windows7-x64

10

MW3 Aimbot.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44515f40f4a2860380bf32d8586aca0d

  • Size

    27KB

  • Sample

    240105-ys1ryshffm

  • MD5

    44515f40f4a2860380bf32d8586aca0d

  • SHA1

    b7d40c0f3c90fe8fab8daff00c139fcec3618eef

  • SHA256

    23ba3e46ad59f8663958fd8cec0f492b28981e02775c668634e7accaf1d4be64

  • SHA512

    b76da90acc1b9e32040411cb9860e65b8e64a051e34f29edc137e8ad5de9e822a6a0da4c901a8093d8ec7b821b350ed573f09f104dbb0f478c687e6bb48f5580

  • SSDEEP

    768:S+WClEGfYaaOZF87zdUXf/rhYiwJEQOBVk:S1ClFtZFgzdUXf/uFGVk

Score
10/10
persistencespywarestealer

Malware Config

Extracted

Credentials

  • Protocol:     smtp
  • Host:
    smtp.gmail.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    ligotti19

Targets

    • Target

      MW3 Aibot Gui(Run after MW3 Aimbot).exe

    • Size

      16KB

    • MD5

      6c4070fd4c1999a4a36bddc72f9696e3

    • SHA1

      abca1a72e6498d6187d8a19e4e5e5447b1aadac6

    • SHA256

      fe595251c4f0dc81a0555629548b249ae0ecf6b69f8a8a31bcb5f708965b4640

    • SHA512

      27fff09994ddf992232790636b9ccf95525ed1f59dc0a5909974e98fcca95c57e0c69f5c570cd2ca6f3f4fbd9049f7a1e0e6d816a4da1d744200612c7945e182

    • SSDEEP

      384:7LWKhblATfIAxbSkdcHkeUlKCcl24LTSPl8sOyK:vWNbbSkdLeUlSfs/K

    Score
    10/10
    persistence
    behavioral1behavioral2

    • Target

      MW3 Aimbot.exe

    • Size

      48KB

    • MD5

      aa288aea58f791b8be539e90491d72a5

    • SHA1

      123e8b8b3cda53afc5f9c90ec394127f0364a626

    • SHA256

      872cd4a24881b39989ec3747948f27e2094d2bc015c62ac0f90f6ebc29f0e1fd

    • SHA512

      f099bf4c6c15c8c2ca652a2425cbb4c69da95339796d34700445008bae5dac93767567eaa77ef28a0d78336770bba244f49a76318bdac7bb768e08e5f06e32b0

    • SSDEEP

      768:fDmdi89DcrWXmWupeHTO+E5AImSUq7WXo+OLOoXajdMp1c:yXcrdSTS5jwo+OLOoXajy1c

    Score
    10/10
    persistencespywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks