Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

Lucifer_21.zip

windows7-x64

1

Lucifer_21.zip

windows10-2004-x64

1

Lucifer/attacks.json

windows7-x64

3

Lucifer/attacks.json

windows10-2004-x64

3

Lucifer/br...in.tfx

windows7-x64

3

Lucifer/br...in.tfx

windows10-2004-x64

3

Lucifer/br...er.tfx

windows7-x64

3

Lucifer/br...er.tfx

windows10-2004-x64

3

Lucifer/br...sg.tfx

windows7-x64

3

Lucifer/br...sg.tfx

windows10-2004-x64

3

Lucifer/br...lp.tfx

windows7-x64

3

Lucifer/br...lp.tfx

windows10-2004-x64

3

Lucifer/br...fo.tfx

windows7-x64

3

Lucifer/br...fo.tfx

windows10-2004-x64

3

Lucifer/br...sg.tfx

windows7-x64

3

Lucifer/br...sg.tfx

windows10-2004-x64

3

Lucifer/br...ds.tfx

windows7-x64

3

Lucifer/br...ds.tfx

windows10-2004-x64

3

Lucifer/br...es.tfx

windows7-x64

3

Lucifer/br...es.tfx

windows10-2004-x64

3

Lucifer/br...ls.tfx

windows7-x64

3

Lucifer/br...ls.tfx

windows10-2004-x64

3

Lucifer/cnc.exe

windows7-x64

1

Lucifer/cnc.exe

windows10-2004-x64

1

Lucifer/cnc/auth.js

windows7-x64

1

Lucifer/cnc/auth.js

windows10-2004-x64

1

Lucifer/cnc/conf.go

windows7-x64

3

Lucifer/cnc/conf.go

windows10-2004-x64

3

Lucifer/cn...ase.go

windows7-x64

3

Lucifer/cn...ase.go

windows10-2004-x64

3

Lucifer/cn...kup.go

windows7-x64

3

Lucifer/cn...kup.go

windows10-2004-x64

3

Resubmissions

13/02/2024, 03:28

240213-d1bskshe72 7

13/02/2024, 03:26

240213-dzfp5shd54 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Lucifer_21.zip

  • Size

    20.7MB

  • Sample

    240213-dzfp5shd54

  • MD5

    bc5a64e94d9ae6a90d1e3e5527aef946

  • SHA1

    537c3fc0c54a8bb3dc8e8651c645dae30662fb17

  • SHA256

    07548b3bd8978a673ba74f5949d438685b8e569e092d057d04f305655714494b

  • SHA512

    ec301b266fdae6a87ed439ac274803ed9f549cd3f880403a55e1a803f3c1ee758dd48fb1f98a1cbc85cd9f2ce9bc82dac936ef5884a19674602e8cca8a6fdc3f

  • SSDEEP

    393216:78VilnYOjCeWHx3j8iAAUgBZZaMWqOqzZCeMlqmE9ESt3inwnqiSWh5ohxvvhxj3:78IGOjKHZ9AAUg8VqOqVhErE9v3iPWQp

Score
7/10
upx

Malware Config

Targets

    • Target

      Lucifer_21.zip

    • Size

      20.7MB

    • MD5

      bc5a64e94d9ae6a90d1e3e5527aef946

    • SHA1

      537c3fc0c54a8bb3dc8e8651c645dae30662fb17

    • SHA256

      07548b3bd8978a673ba74f5949d438685b8e569e092d057d04f305655714494b

    • SHA512

      ec301b266fdae6a87ed439ac274803ed9f549cd3f880403a55e1a803f3c1ee758dd48fb1f98a1cbc85cd9f2ce9bc82dac936ef5884a19674602e8cca8a6fdc3f

    • SSDEEP

      393216:78VilnYOjCeWHx3j8iAAUgBZZaMWqOqzZCeMlqmE9ESt3inwnqiSWh5ohxvvhxj3:78IGOjKHZ9AAUg8VqOqVhErE9v3iPWQp

    Score
    1/10
    behavioral1behavioral2

    • Target

      Lucifer/attacks.json

    • Size

      5KB

    • MD5

      a5c5c93be49bbe4a92dc335ddcefa27e

    • SHA1

      f763c5ec3cbe6d9e51ea097615d03a97921318cd

    • SHA256

      90412d9f174fc3714efb73d7a50c14cecdbf871533732f6cbb27655311fb6fb5

    • SHA512

      5702d107296da00390f24cf02f2eaefa192d2304d82f600da013901734c5f379e32687834f0ad1e6000c191494629c86add5f8b5132ab4919365e53da214df89

    • SSDEEP

      96:AfozaTB+ADp4+Ap/+shg/W+ADy+ADsa+AoZp4+A9lt+AC1Ay+A9Ab+Fos7/+A5x2:AfozsZpmTO/uqwpqtBzAJU

    Score
    3/10
    behavioral3behavioral4

    • Target

      Lucifer/branding/admin.tfx

    • Size

      15KB

    • MD5

      d936f331bf5b8c9b477d31007eab21c1

    • SHA1

      2f96622785fe208135e5b4475f0ba1aac57a4dac

    • SHA256

      6055ce50b13b10ec337477517933775e7aabe55d7f38d04ecdac7c2c4baf6f5e

    • SHA512

      623d94d825354643c3888d90a888109fd26f7c6d427769c938b7b4748580b3826d55c361f5af542db0858e26d80ecb1309d8ad689f5ba687274266064a57921a

    • SSDEEP

      384:hlcpaqx5BeTQ83g6wPELZ3UmOrdESAnRap1LlRlcpaqx5BeTQ83g6wPELZ3UmOr/:hlcpaqx5BeTQ83g6wPELZ3UmOrdESAnH

    Score
    3/10
    behavioral5behavioral6

    • Target

      Lucifer/branding/banner.tfx

    • Size

      112B

    • MD5

      04d661d0cc3b349f9a3ea796a4fe12a1

    • SHA1

      4905436d6d26cac3dd87fbe8d329dea735ba927e

    • SHA256

      257483c3af4a0eec05a3901a91af0e1f85d379f22b362a7018facbd2f1ab4697

    • SHA512

      5133b6d298b774f6303892c06ca439452a83fee2b68e93f6ec77dc19edfc219b284a27befd6e10840f9659ebcd432855e57027342104d8c839a0284cac5cf321

    Score
    3/10
    behavioral7behavioral8

    • Target

      Lucifer/branding/expiredmsg.tfx

    • Size

      97B

    • MD5

      ce50d8435c76d1689db6cabaaa25bdb2

    • SHA1

      66f0efd7975e14413f18760fec43a10672381ef9

    • SHA256

      498fcede2ecb5c1562c2ce93b2ad9ba5de9045a9150bfee45ea24619065f8728

    • SHA512

      5d14be47c0965e3f1de4d6314aea03bb26f85324a4e82991f10d0fe2e55afd110c3b94a13b8806a3f6bdccb3e27388d612017eccc6805a5b725106feea038e10

    Score
    3/10
    behavioral10behavioral9

    • Target

      Lucifer/branding/help.tfx

    • Size

      13KB

    • MD5

      7fd7d2e3eadfa9532683ec2e7475c27b

    • SHA1

      4cca4b4a5ad9abb9afa076e0704f229a25ee8d2b

    • SHA256

      2146a5a5f7b1899f2215344cd4415a1c98a8bf376b17c9bde08bc05f541bfa23

    • SHA512

      b20064efbbddddbdac20e10bef243ce51c36d894f9a802beedc0b07868d49ff8987c0289d8250cfc6f7f94445b677035270b632ab0051bf90c68c038b751ff3b

    • SSDEEP

      384:hlcM5ca8eTx+wKIrlIwkhkQAESAqxLGkOhkqdlcM5ca8eTx+wKIrlIwkhkQAESAI:hlcM5ca8eTx+wKIrlIwkhkQAESAqxLG7

    Score
    3/10
    behavioral11behavioral12

    • Target

      Lucifer/branding/info.tfx

    • Size

      13KB

    • MD5

      c64663d7d07f18e0ed83855737b78e15

    • SHA1

      db4e00e7f4faa4cc797e461c486d5932d2f209e6

    • SHA256

      f210cc82e990ab535ec0e305af16b8d9f9f2a5edd33d705eecd1fe924aae1251

    • SHA512

      c672301b75f04fd65c8e9c524ae996be80f48a2a8e1c2fdb5521bf2a3ecca58bfe52e8a720f1a550104218bc40ad8f709e68a600dab3b2a114eb2d6d226d09d3

    • SSDEEP

      384:hlcMUca8eWQ83zLrlLZ3Um1PJXsmRP5TG1MSlcMUca8eWQ83zLrlLZ3Um1PJXsmm:hlcMUca8eWQ83zLrlLZ3Um1PJXsmRP5P

    Score
    3/10
    behavioral13behavioral14

    • Target

      Lucifer/branding/loginmsg.tfx

    • Size

      46B

    • MD5

      4b45bc2ddfd21892d91cd48b535dd32b

    • SHA1

      447af8d3c3fcbc2c0f690556457196817c40b71f

    • SHA256

      cade5ef7b4e5517180f5c67b5717c7f26a3d2a20ea5f4b7f6f9f58baee348bb9

    • SHA512

      85db2516ae979a4da28a04ee467c49d191a28e9578d239e21d87ba7df9ceddc12ce9b7e7048c2b9bdd0300a184bd219729ecd06bdd283eb87aeb3ae5bba01deb

    Score
    3/10
    behavioral15behavioral16

    • Target

      Lucifer/branding/methods.tfx

    • Size

      16KB

    • MD5

      987b773de8805043ed3abf10638e7b48

    • SHA1

      aa45003b347c055a2f00d64a8f4af5bbb15f8964

    • SHA256

      09bf83902f7d7070878104a8ae94782b4abe5dc915d7908c091ebb371b017a02

    • SHA512

      3ca33116641aaf90ddc245d347d89543a0accca6cecaf94b960b6f1a26ee7d6eb21a28b400b268b59910a0387b26366d96be5e0c8abd4598dba265a81790b2f8

    • SSDEEP

      384:Ra8eWQnOg6IrlLZmLCJQAUXstssGKMlcpaqxa8eWQnOg6IrlLZmLCJQAUXstsh4C:Ra8eWQnOg6IrlLZmLCJQAUXstssGflch

    Score
    3/10
    behavioral17behavioral18

    • Target

      Lucifer/branding/rules.tfx

    • Size

      485B

    • MD5

      9e06f994b74665b8b033895352b66b7d

    • SHA1

      2ed3c3fd7bf238e061962528935e23c869384db0

    • SHA256

      ff93014af57901a37645a9aac6c79dbc260e28aa5ffa95cd1759c796897cb41c

    • SHA512

      0d40ae221fe92ec704b4877ff623c38b74a601808d4b869732d5e86d1d2db8c7a5d3ddf8aa05c03d1c1a59fb8d6e8210fac9492b0a9a101dc027271e5df0b0f9

    Score
    3/10
    behavioral19behavioral20

    • Target

      Lucifer/branding/tools.tfx

    • Size

      16KB

    • MD5

      92d1d945d43fd377fde2dcd710e0f4b1

    • SHA1

      d0fd62870e5cba1c7fe0184f87ede580979456c1

    • SHA256

      e7ab4393867edac46f0f8a3334b8cfa0c659f76254404c57c0f6f1eca6407520

    • SHA512

      bef4edce4b2a82e93bc3e92693fc064fa57984df1fb3b7faf9f6e27162d7baa64277ca1784a3b1167a97d2ea4909047022f3960068303f2c9cad242d89c60fcc

    • SSDEEP

      384:hlcM5ca8eTx+wKIrlIwkhkQAESAqxLGkOhkqdlcM5ca8eTx+wKIrlIwkhkQAESAf:hlcM5ca8eTx+wKIrlIwkhkQAESAqxLGQ

    Score
    3/10
    behavioral21behavioral22

    • Target

      Lucifer/cnc.exe

    • Size

      8.1MB

    • MD5

      c549b0c14717f5612fa26a06a73d503c

    • SHA1

      80e6e39f076978d8a7ef7913232b44389da901ee

    • SHA256

      a494436b195930d7debd547b0116e26563e480cb33c50667755a014f9983ca03

    • SHA512

      904fd451b363aa51aa64a81d3a0aa7bf02ffa0d4340438031ac5f764439ceb4af1658f1234df2898e666fc65327021f63dc4a75db19b8d6c8bcb086fa7a833f1

    • SSDEEP

      98304:GVhwrJqAYNUui8i3FG7oRherab4E2n5/2wdMIaOW14PG:g7NNVW3FG6hzxAMI/s4

    Score
    1/10
    behavioral23behavioral24

    • Target

      Lucifer/cnc/auth.go

    • Size

      1KB

    • MD5

      1a1a27e9f4587d33e0d35f17f52543f2

    • SHA1

      eab6e3443176ba9b6e036209040208449904796c

    • SHA256

      1fe82a0aa6b4babd1d260565ddaeef61ed4ef6282aa3d62970563c30a9dd457d

    • SHA512

      52d9db1975a56f2d77e3297325cdd7448c8117a394ef4dd0ad88d61172d9ff1704aa34421b3a67c27516cc785ab5756761035869801aec31a63fcb91386df04b

    Score
    1/10
    behavioral25behavioral26

    • Target

      Lucifer/cnc/conf.go

    • Size

      1KB

    • MD5

      d8f69ae164a7532531e928e2315d1118

    • SHA1

      eda1289b8349336851fe7166b211544fabafbf40

    • SHA256

      96f21d79d26694b9ff3dd2c15f5646220416397c9694ebf2786c2caf861a2489

    • SHA512

      2d10dec572187d4a091b41df0cf730833c82b4e6d9c6fb314e4625cc2eb1ca4bf42d1aadb55e9fca87f4ee7556c3dd3650b5bbfa3e3772b33873dfb13dc17a9d

    Score
    3/10
    behavioral27behavioral28

    • Target

      Lucifer/cnc/database.go

    • Size

      14KB

    • MD5

      3f56cd14a6e48d17d7ad63c17fb1045c

    • SHA1

      3f41a9d97f74cc95b727a28e8315d94fa508191e

    • SHA256

      4e1ac9551a19051f1e38a6ea96950200db8816c31dba37804bb25d97294ee40a

    • SHA512

      49c9baf0a682566acc658951a492761c24469985a0db2ead4be4a2dc77d36872c6b1ab2227ec12431335f562a7ee48bc0f5932e1b2da53ae26d6020c706970cc

    • SSDEEP

      192:tlR04lRMMzVoBylDNZXm+b5l5HyG8Jc0sUc666kRHQtU1B65aMn6LCUPYKb8Ypbj:tJrnbQOlgGesiHMsUu596LLPB8atR

    Score
    3/10
    behavioral29behavioral30

    • Target

      Lucifer/cnc/iplookup.go

    • Size

      3KB

    • MD5

      c99d16a20a65ebf4ca80e931cb02699d

    • SHA1

      16bad3e9d4a4752f36d265e8140f5540103227a5

    • SHA256

      97ae3a34f3c9b9eded787161170623d28a62312020f81f70846a164ec6cbc6a8

    • SHA512

      e46d25fbac29a5d01595eb0472aec22d3f13aa9041fd6c4203a853ec7f388a2a541b3cdf462c016bb275388c1785a95c609100914ae53bb56388ac919bd7f801

    Score
    3/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks