Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3LomebuGame.rar
windows7-x64
3LomebuGame.rar
windows10-2004-x64
3bomelugame...me.exe
windows7-x64
7bomelugame...me.exe
windows10-2004-x64
7$PLUGINSDI...er.dll
windows7-x64
1$PLUGINSDI...er.dll
windows10-2004-x64
1$PLUGINSDI...ls.dll
windows7-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows7-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDIR/app-64.7z
windows7-x64
3$PLUGINSDIR/app-64.7z
windows10-2004-x64
7LICENSE.electron.txt
windows7-x64
1LICENSE.electron.txt
windows10-2004-x64
1LICENSES.c...m.html
windows7-x64
1LICENSES.c...m.html
windows10-2004-x64
1LomebuGame.exe
windows7-x64
1LomebuGame.exe
windows10-2004-x64
7chrome_100...nt.pak
windows7-x64
3chrome_100...nt.pak
windows10-2004-x64
3chrome_200...nt.pak
windows7-x64
3chrome_200...nt.pak
windows10-2004-x64
3d3dcompiler_47.dll
windows10-2004-x64
1ffmpeg.dll
windows7-x64
1ffmpeg.dll
windows10-2004-x64
1icudtl.dat
windows7-x64
3icudtl.dat
windows10-2004-x64
3libEGL.dll
windows7-x64
1libEGL.dll
windows10-2004-x64
1libGLESv2.dll
windows7-x64
1General
-
Target
LomebuGame.rar
-
Size
78.9MB
-
Sample
240427-ybnfasfc9t
-
MD5
d3b29753e900b931d16a9179c90b8658
-
SHA1
842a771bec88f02b7e5ec945ab3f4a5ce2ed513a
-
SHA256
05451b195a176fa75fb7a8de600068e1f08b2a0b5cef42eef8439ec28ed26a59
-
SHA512
d569de1d4ae986385aa37e3cb72cb60f0e54d68f2b6fb08cf26977a054f149f6ec53603e39fb84612d5e4985a0835b05f3808a7f86526e6aaceee058a8744fa2
-
SSDEEP
1572864:67pRw6rTMzJ0UK+qqgimG2ZXB7NyzUjZiRFVQbqgO9ugYqh75k:6VhvsCUex7NEUcRvYqU
Static task
static1
Behavioral task
behavioral1
Sample
LomebuGame.rar
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
LomebuGame.rar
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
bomelugame/LomebuGame.exe
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
bomelugame/LomebuGame.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/SpiderBanner.dll
Resource
win7-20240419-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/SpiderBanner.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/WinShell.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/WinShell.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/app-64.7z
Resource
win7-20240419-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/app-64.7z
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
LICENSE.electron.txt
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
LICENSE.electron.txt
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
LICENSES.chromium.html
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
LICENSES.chromium.html
Resource
win10v2004-20240419-en
Behavioral task
behavioral19
Sample
LomebuGame.exe
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
LomebuGame.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral21
Sample
chrome_100_percent.pak
Resource
win7-20240215-en
Behavioral task
behavioral22
Sample
chrome_100_percent.pak
Resource
win10v2004-20240419-en
Behavioral task
behavioral23
Sample
chrome_200_percent.pak
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
chrome_200_percent.pak
Resource
win10v2004-20240419-en
Behavioral task
behavioral25
Sample
d3dcompiler_47.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral26
Sample
ffmpeg.dll
Resource
win7-20240221-en
Behavioral task
behavioral27
Sample
ffmpeg.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral28
Sample
icudtl.dat
Resource
win7-20240419-en
Behavioral task
behavioral29
Sample
icudtl.dat
Resource
win10v2004-20240419-en
Behavioral task
behavioral30
Sample
libEGL.dll
Resource
win7-20240221-en
Behavioral task
behavioral31
Sample
libEGL.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral32
Sample
libGLESv2.dll
Resource
win7-20231129-en
Malware Config
Targets
-
-
Target
LomebuGame.rar
-
Size
78.9MB
-
MD5
d3b29753e900b931d16a9179c90b8658
-
SHA1
842a771bec88f02b7e5ec945ab3f4a5ce2ed513a
-
SHA256
05451b195a176fa75fb7a8de600068e1f08b2a0b5cef42eef8439ec28ed26a59
-
SHA512
d569de1d4ae986385aa37e3cb72cb60f0e54d68f2b6fb08cf26977a054f149f6ec53603e39fb84612d5e4985a0835b05f3808a7f86526e6aaceee058a8744fa2
-
SSDEEP
1572864:67pRw6rTMzJ0UK+qqgimG2ZXB7NyzUjZiRFVQbqgO9ugYqh75k:6VhvsCUex7NEUcRvYqU
Score3/10 -
-
-
Target
bomelugame/LomebuGame.exe
-
Size
78.8MB
-
MD5
882b8d5c6c03b71237371c2df7c7b4a5
-
SHA1
02113016c7454d10796aa25d44dc700fa459390e
-
SHA256
c33a96f700dae9d6c4535ac35694a38659ffe364eee052687c8a1232be6e625f
-
SHA512
d696dcb0fa737cd6fd4c408ac3e7d6a87502a4c12231975c1c1c23ae25947cf5f29133a2ef8c98042fe0f588fa325d331c3983791dbfaed2fc2d79b3e208d2c8
-
SSDEEP
1572864:QW6LBY9gqfyVAYQxwo0xZHBFdNYZvpXm6IKEqI:Q9uffYARxczFC3IKEh
Score7/10-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
-
-
Target
$PLUGINSDIR/SpiderBanner.dll
-
Size
9KB
-
MD5
17309e33b596ba3a5693b4d3e85cf8d7
-
SHA1
7d361836cf53df42021c7f2b148aec9458818c01
-
SHA256
996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
-
SHA512
1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298
-
SSDEEP
192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
Score1/10 -
-
-
Target
$PLUGINSDIR/StdUtils.dll
-
Size
100KB
-
MD5
c6a6e03f77c313b267498515488c5740
-
SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15
-
SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
-
SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
-
SSDEEP
3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
12KB
-
MD5
0d7ad4f45dc6f5aa87f606d0331c6901
-
SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457
-
SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
-
SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
-
SSDEEP
192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
Score3/10 -
-
-
Target
$PLUGINSDIR/WinShell.dll
-
Size
3KB
-
MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56
-
SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c
-
SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
-
SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
Score3/10 -
-
-
Target
$PLUGINSDIR/app-64.7z
-
Size
78.3MB
-
MD5
8fb67e61525557b1b476143fdd7269fc
-
SHA1
bc7186214e2c59d8608c55929f56d1d890b349b3
-
SHA256
f942960cdcd442304e8fe57e42769e2d532b3b77955fa16b6c376fbc2f3c1fac
-
SHA512
6ee6cbd2cd9235925c2397f75bec3983442dc0ef5dda28d81f4c10ce04a6b7f3b95c6035a799b05d1027bf3a9318e69376a14ee0edf33667924ffe962db5a0c4
-
SSDEEP
1572864:Y6LBY9gqfyVAYQxwo0xZHBFdNYZvpXm6IKEqP:ruffYARxczFC3IKEY
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
-
-
Target
LICENSE.electron.txt
-
Size
1KB
-
MD5
4d42118d35941e0f664dddbd83f633c5
-
SHA1
2b21ec5f20fe961d15f2b58efb1368e66d202e5c
-
SHA256
5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
-
SHA512
3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
Score1/10 -
-
-
Target
LICENSES.chromium.html
-
Size
7.9MB
-
MD5
312446edf757f7e92aad311f625cef2a
-
SHA1
91102d30d5abcfa7b6ec732e3682fb9c77279ba3
-
SHA256
c2656201ac86438d062673771e33e44d6d5e97670c3160e0de1cb0bd5fbbae9b
-
SHA512
dce01f2448a49a0e6f08bbde6570f76a87dcc81179bb51d5e2642ad033ee81ae3996800363826a65485ab79085572bbace51409ae7102ed1a12df65018676333
-
SSDEEP
24576:dbTy6TU675kfWScRQfJw91SmfJB6i6e6R626X8HHdE/pG6:tygpj
Score1/10 -
-
-
Target
LomebuGame.exe
-
Size
152.7MB
-
MD5
88719f2009bf17f5be9713212f520ab4
-
SHA1
0b843803935d15ff0179cbc83a66768eed88f381
-
SHA256
cde6587e39b95f9debf34ce7c2af0932c8711597fc81609f4d300e63b2fe39dd
-
SHA512
c1fa450234e5571d4c6cfa4a19e7ef5859bcf2300a25462e9eb16198618b9dfdcdb1f15fce309571de58c38c1107c26ad47a65d03eaf1e72ec538b0410784b0b
-
SSDEEP
1572864:gLBZB52nvuZ7wVuMbgR7Sp6kYdEctmhoLsPagBsgkx52HYhwj+vfIBUdoJnP9Dj0:gypCmJctBjj2+Jv
Score7/10-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
-
-
Target
chrome_100_percent.pak
-
Size
124KB
-
MD5
acd0fa0a90b43cd1c87a55a991b4fac3
-
SHA1
17b84e8d24da12501105b87452f86bfa5f9b1b3c
-
SHA256
ccbca246b9a93fa8d4f01a01345e7537511c590e4a8efd5777b1596d10923b4b
-
SHA512
3e4c4f31c6c7950d5b886f6a8768077331a8f880d70b905cf7f35f74be204c63200ff4a88fa236abccc72ec0fc102c14f50dd277a30f814f35adfe5a7ae3b774
-
SSDEEP
3072:vlKzwqCT4wDNzIwL2o418Gb0+VRLf0ld0GY3cQ39Vm2I:vlKzwt4uEgK18Gb0OV8ld0GecQ3f2
Score3/10 -
-
-
Target
chrome_200_percent.pak
-
Size
173KB
-
MD5
4610337e3332b7e65b73a6ea738b47df
-
SHA1
8d824c9cf0a84ab902e8069a4de9bf6c1a9aaf3b
-
SHA256
c91abf556e55c29d1ea9f560bb17cc3489cb67a5d0c7a22b58485f5f2fbcf25c
-
SHA512
039b50284d28dcd447e0a486a099fa99914d29b543093cccda77bbefdd61f7b7f05bb84b2708ae128c5f2d0c0ab19046d08796d1b5a1cff395a0689ab25ccb51
-
SSDEEP
3072:4DQYaEQN6AJPKNzIwafR54x5GMR+F44ffbdZnYw9p4AbIVGYoDd+HxNK/rIM0:4DQYaNN68QEVgx5GMRejnbdZnVE6YopY
Score3/10 -
-
-
Target
d3dcompiler_47.dll
-
Size
4.7MB
-
MD5
2191e768cc2e19009dad20dc999135a3
-
SHA1
f49a46ba0e954e657aaed1c9019a53d194272b6a
-
SHA256
7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d
-
SHA512
5adcb00162f284c16ec78016d301fc11559dd0a781ffbeff822db22efbed168b11d7e5586ea82388e9503b0c7d3740cf2a08e243877f5319202491c8a641c970
-
SSDEEP
49152:KCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvhiD0N+YEzI4og/RfzHLeHTRhFRNc:xG2QCwmHPnog/pzHAo/A6l
Score1/10 -
-
-
Target
ffmpeg.dll
-
Size
2.7MB
-
MD5
e096c168b79a56ded0df1aa142d9f1da
-
SHA1
318f20dab294a315bd935160e9417fb5b28300f5
-
SHA256
65cc75329d17ec264e7a2db571ea55f918394241445ea64569a56c75d0cfdc60
-
SHA512
3dccf6ce85ef7e75690a5851642f10bb5e6e1572e91e933bacb7fcbfe405b0412b94ba0e160c3ba8d68d2b9afc1da268f61c83dccd6453d8c9470931ee900bfd
-
SSDEEP
49152:YGJO72cNsdMZWfAn1fdmZMOqcQrGhjUHgNxGUwSCmmfYDJGz5SN3lzl3hSKqH:Jj8n1QqGCmmfIUz59t
Score1/10 -
-
-
Target
icudtl.dat
-
Size
10.1MB
-
MD5
d89ce8c00659d8e5d408c696ee087ce3
-
SHA1
49fc8109960be3bb32c06c3d1256cb66dded19a8
-
SHA256
9dfbe0dad5c7021cfe8df7f52458c422cbc5be9e16ff33ec90665bb1e3f182de
-
SHA512
db097ce3eb9e132d0444df79b167a7dcb2df31effbbd3df72da3d24ae2230cc5213c6df5e575985a9918fbd0a6576e335b6ebc12b6258bc93fa205399de64c37
-
SSDEEP
98304:OKPBQYOo+ddlymOk25flQCUliXUxiG9Ha93Whla6ZGdnp/8k:OKPBhORjOhCliXUxiG9Ha93Whla6ZGrn
Score3/10 -
-
-
Target
libEGL.dll
-
Size
470KB
-
MD5
1eecfb04c4434f5a813c8f0c0c8f2c88
-
SHA1
6dc3ca4b3f72e7fb33ba26fa488de323edb59add
-
SHA256
897ceb95fb164640ddd2426673997b5f6fc2619fd916b038b575a70a0682a706
-
SHA512
d7818a42a76508ac3150aea8d4e168b2db36f55f71983a177002086380a82e307624cfe37b01ffc3d7eb407485d182654d0d7c6a0c06ccaae60666630469c7e0
-
SSDEEP
6144:F9L2FFtoVsruIzUEzUST6uHKw+BubaOQ74PlqF8:F9CGafznzUSTRY70I
Score1/10 -
-
-
Target
libGLESv2.dll
-
Size
7.3MB
-
MD5
cba2436016f7a2838588a52d5b6f30f1
-
SHA1
81ddf44b3e122dfbee1a2cd8d4544364f1a621a4
-
SHA256
bcb3a3d2fca3c33fa3d1d5dc976aa913cdc8001df8e64c2cd3d2c545245141bf
-
SHA512
d92a880b5f83c5ae10ae9a83e38a293bb0e8c7659dd6ece162fc752d57c9fcde8036b81b023cd9f0f4f32b95b06fd4c366e20301010354b6cb904398a3149a44
-
SSDEEP
98304:U8qvGdDtslh+LD3ZDWfnSvBSDU5bPm3k89Ld3gsOMt/:JD3ZXJ7bPWLWsD/
Score1/10 -