Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
164s -
max time network
173s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
05/01/2024, 20:03
General
-
Target
MW3 Aibot Gui(Run after MW3 Aimbot).exe
-
Size
16KB
-
MD5
6c4070fd4c1999a4a36bddc72f9696e3
-
SHA1
abca1a72e6498d6187d8a19e4e5e5447b1aadac6
-
SHA256
fe595251c4f0dc81a0555629548b249ae0ecf6b69f8a8a31bcb5f708965b4640
-
SHA512
27fff09994ddf992232790636b9ccf95525ed1f59dc0a5909974e98fcca95c57e0c69f5c570cd2ca6f3f4fbd9049f7a1e0e6d816a4da1d744200612c7945e182
-
SSDEEP
384:7LWKhblATfIAxbSkdcHkeUlKCcl24LTSPl8sOyK:vWNbbSkdLeUlSfs/K
Score
10/10
Malware Config
Extracted
Credentials
Protocol: smtp- Host:
smtp.gmail.com - Port:
587 - Username:
[email protected] - Password:
ligotti19
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\MW3 Aibot Gui(Run after MW3 Aimbot).exe"C:\Users\Admin\AppData\Local\Temp\MW3 Aibot Gui(Run after MW3 Aimbot).exe"1⤵
- Adds Run key to start application
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
624KB
-
Filesize
9.6MB
-
Filesize
64KB
-
Filesize
9.6MB
-
Filesize
4.8MB
-
Filesize
664KB
-
Filesize
64KB
-
Filesize
9.6MB
-
Filesize
64KB
-
Filesize
9.6MB
-
Filesize
64KB