Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

SweatPlay.exe

windows7-x64

7

SweatPlay.exe

windows10-2004-x64

7

Resubmissions

14/02/2024, 17:51

240214-wflfdshc7v 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SweatPlay.exe

  • Size

    5.4MB

  • Sample

    240214-wflfdshc7v

  • MD5

    bc3b6e037bdc796b73739eae8aa628c0

  • SHA1

    413599ae5ba0dc4912dc2ab65faced7bee16da1c

  • SHA256

    f52ebb9a43f48645ec294e7e782772b12992705b2029d713722e8ec4534a4a8a

  • SHA512

    4e3a619f8fd85f2167b88803050deda17e6bbd3b3cea27f97e0a59a87fb4ce3119acba59dffe32f269a51733b0b90dca380a0463b2333b46c2365bb7c84cecca

  • SSDEEP

    98304:hQ1qpFRe/WHemwI41qpFRe/WHemwIuwy8/eV4dkocar7y2prw6/UzvVTBVGO88IZ:e0pFIqemwI40pFIqemwI7tY4K/cvprfr

Score
7/10
agilenet

Malware Config

Targets

    • Target

      SweatPlay.exe

    • Size

      5.4MB

    • MD5

      bc3b6e037bdc796b73739eae8aa628c0

    • SHA1

      413599ae5ba0dc4912dc2ab65faced7bee16da1c

    • SHA256

      f52ebb9a43f48645ec294e7e782772b12992705b2029d713722e8ec4534a4a8a

    • SHA512

      4e3a619f8fd85f2167b88803050deda17e6bbd3b3cea27f97e0a59a87fb4ce3119acba59dffe32f269a51733b0b90dca380a0463b2333b46c2365bb7c84cecca

    • SSDEEP

      98304:hQ1qpFRe/WHemwI41qpFRe/WHemwIuwy8/eV4dkocar7y2prw6/UzvVTBVGO88IZ:e0pFIqemwI40pFIqemwI7tY4K/cvprfr

    Score
    7/10
    agilenet

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

      agilenet

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks