Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
3plpscripts..._1.zip
windows11-21h2-x64
1plpscripts...ELP.md
windows11-21h2-x64
1plpscripts...ll.bat
windows11-21h2-x64
10plpscripts...bot.py
windows11-21h2-x64
3plpscripts...st.zip
windows11-21h2-x64
1archive/data.pkl
windows11-21h2-x64
3archive/da...988160
windows11-21h2-x64
1archive/da...651120
windows11-21h2-x64
1archive/da...651216
windows11-21h2-x64
1archive/da...760992
windows11-21h2-x64
1archive/da...785696
windows11-21h2-x64
1archive/da...797712
windows11-21h2-x64
1archive/da...665328
windows11-21h2-x64
1archive/da...860848
windows11-21h2-x64
1archive/da...060304
windows11-21h2-x64
1archive/da...374192
windows11-21h2-x64
1archive/da...374288
windows11-21h2-x64
1archive/da...501856
windows11-21h2-x64
1archive/da...582784
windows11-21h2-x64
1archive/da...647568
windows11-21h2-x64
1archive/da...701936
windows11-21h2-x64
1archive/da...741200
windows11-21h2-x64
1archive/da...778800
windows11-21h2-x64
1archive/da...274048
windows11-21h2-x64
1plpscripts...g.json
windows11-21h2-x64
3plpscripts...e.json
windows11-21h2-x64
3plpscripts...ain.py
windows11-21h2-x64
3plpscripts...ev2.py
windows11-21h2-x64
3plpscripts...t__.py
windows11-21h2-x64
3plpscripts...me.dll
windows11-21h2-x64
1plpscripts...rt.bat
windows11-21h2-x64
1plpscripts...ts.txt
windows11-21h2-x64
3Analysis
-
max time kernel
92s -
max time network
95s -
platform
windows11-21h2_x64 -
resource
win11-20240426-en -
resource tags
arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system -
submitted
13/05/2024, 15:21
Static task
static1
Behavioral task
behavioral1
Sample
plpscripts_freeV2_1.zip
Resource
win11-20240508-en
Behavioral task
behavioral2
Sample
plpscripts_freeV2/1.READ ME & THIS HAS HELP.md
Resource
win11-20240426-en
Behavioral task
behavioral3
Sample
plpscripts_freeV2/auto_setup_install.bat
Resource
win11-20240508-en
Behavioral task
behavioral4
Sample
plpscripts_freeV2/plpscripts free ai aimbot/aimbot.py
Resource
win11-20240508-en
Behavioral task
behavioral5
Sample
plpscripts_freeV2/plpscripts free ai aimbot/config/best.zip
Resource
win11-20240426-en
Behavioral task
behavioral6
Sample
archive/data.pkl
Resource
win11-20240426-en
Behavioral task
behavioral7
Sample
archive/data/94907481988160
Resource
win11-20240426-en
Behavioral task
behavioral8
Sample
archive/data/94909076651120
Resource
win11-20240426-en
Behavioral task
behavioral9
Sample
archive/data/94909076651216
Resource
win11-20240419-en
Behavioral task
behavioral10
Sample
archive/data/94909076760992
Resource
win11-20240508-en
Behavioral task
behavioral11
Sample
archive/data/94909076785696
Resource
win11-20240426-en
Behavioral task
behavioral12
Sample
archive/data/94909076797712
Resource
win11-20240426-en
Behavioral task
behavioral13
Sample
archive/data/94909083665328
Resource
win11-20240508-en
Behavioral task
behavioral14
Sample
archive/data/94909083860848
Resource
win11-20240508-en
Behavioral task
behavioral15
Sample
archive/data/94909084060304
Resource
win11-20240508-en
Behavioral task
behavioral16
Sample
archive/data/94909084374192
Resource
win11-20240508-en
Behavioral task
behavioral17
Sample
archive/data/94909084374288
Resource
win11-20240426-en
Behavioral task
behavioral18
Sample
archive/data/94909084501856
Resource
win11-20240508-en
Behavioral task
behavioral19
Sample
archive/data/94909084582784
Resource
win11-20240426-en
Behavioral task
behavioral20
Sample
archive/data/94909084647568
Resource
win11-20240426-en
Behavioral task
behavioral21
Sample
archive/data/94909084701936
Resource
win11-20240426-en
Behavioral task
behavioral22
Sample
archive/data/94909084741200
Resource
win11-20240508-en
Behavioral task
behavioral23
Sample
archive/data/94909084778800
Resource
win11-20240426-en
Behavioral task
behavioral24
Sample
archive/data/94909086274048
Resource
win11-20240426-en
Behavioral task
behavioral25
Sample
plpscripts_freeV2/plpscripts free ai aimbot/config/config.json
Resource
win11-20240419-en
Behavioral task
behavioral26
Sample
plpscripts_freeV2/plpscripts free ai aimbot/config/style.json
Resource
win11-20240508-en
Behavioral task
behavioral27
Sample
plpscripts_freeV2/plpscripts free ai aimbot/main.py
Resource
win11-20240508-en
Behavioral task
behavioral28
Sample
plpscripts_freeV2/plpscripts free ai aimbot/plpscripts_freev2.py
Resource
win11-20240426-en
Behavioral task
behavioral29
Sample
plpscripts_freeV2/plpscripts free ai aimbot/pyarmor_runtime_000000/__init__.py
Resource
win11-20240508-en
Behavioral task
behavioral30
Sample
plpscripts_freeV2/plpscripts free ai aimbot/pyarmor_runtime_000000/pyarmor_runtime.dll
Resource
win11-20240426-en
Behavioral task
behavioral31
Sample
plpscripts_freeV2/plpscripts free ai aimbot/start.bat
Resource
win11-20240419-en
Behavioral task
behavioral32
Sample
plpscripts_freeV2/requirements.txt
Resource
win11-20240508-en
General
-
Target
archive/data.pkl
-
Size
87KB
-
MD5
adfa40b240ba8f37e1200da44f9a16c1
-
SHA1
f3690f553394ab1c2dec6e6ff8a8f186058297d6
-
SHA256
56533e4fe0e01d6362379ce8911c2e48a40a79f9c0a0d9f03a45d9bd4dbb76fc
-
SHA512
a6b714eb4bd15293c19937fc9f303ac7392e02643cd3e69831c325f8805b1216e299500ef04ce40471d4d4ed5f908c4f24c2d86ead6f83a4771acc5d9b93990c
-
SSDEEP
1536:UEdS4MBU+ONaVqI+VFxB/tO6FwdpGoRGjuDp9zsdmSZsI/e1oz/S6BAh2BUuLYsZ:UQzfdq+LBA0BUuLYsdsZLM2Ye5wC41r/
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-3062789476-783164490-2318012559-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1680 OpenWith.exe