Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

Lethal company.zip

windows7-x64

1

Lethal company.zip

windows10-2004-x64

1

Lethal Com...ic.rar

windows7-x64

3

Lethal Com...ic.rar

windows10-2004-x64

7

Lethal Com...Ex.zip

windows7-x64

1

Lethal Com...Ex.zip

windows10-2004-x64

1

Lethal Com...er.dat

windows7-x64

3

Lethal Com...er.dat

windows10-2004-x64

3

Lethal Com...YT.cfg

windows7-x64

3

Lethal Com...YT.cfg

windows10-2004-x64

3

Lethal Com...ny.cfg

windows7-x64

3

Lethal Com...ny.cfg

windows10-2004-x64

3

Lethal Com...ot.cfg

windows7-x64

3

Lethal Com...ot.cfg

windows10-2004-x64

3

Lethal Com...ny.dll

windows7-x64

1

Lethal Com...ny.dll

windows10-2004-x64

1

Lethal Com...20.dll

windows7-x64

1

Lethal Com...20.dll

windows10-2004-x64

1

Lethal Com...op.dll

windows7-x64

1

Lethal Com...op.dll

windows10-2004-x64

1

Lethal Com...db.dll

windows7-x64

1

Lethal Com...db.dll

windows10-2004-x64

1

Lethal Com...db.dll

windows7-x64

1

Lethal Com...db.dll

windows10-2004-x64

1

Lethal Com...ls.dll

windows7-x64

1

Lethal Com...ls.dll

windows10-2004-x64

1

Lethal Com...en.exe

windows7-x64

1

Lethal Com...en.exe

windows10-2004-x64

1

Lethal Com...ie.dll

windows7-x64

1

Lethal Com...ie.dll

windows10-2004-x64

1

Lethal Com...assets

windows7-x64

1

Lethal Com...assets

windows10-2004-x64

1

Analysis

  • max time kernel
    138s
  • max time network
    166s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/06/2024, 14:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Lethal Company/Lethal Company/BepInEx/config/FlipMods.ReservedFlashlightSlot.cfg

  • Size

    1KB

  • MD5

    bc585efa4947b2506c7967d506c241e9

  • SHA1

    0c33370d04a579d1f0b131347f242698f1f04a38

  • SHA256

    bd125f7167caba4317f03328465b3e4216c6c94a44ce32f3585496a05d0356de

  • SHA512

    9448ebffbe8a1bf0135e4580f7ace32d61a0da645b90e7b4de395e3c427ce7b499b334dbff1704b2f473db89237ca634a5afb6607c1cc496f8ff79d1ea02e327

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c "C:\Users\Admin\AppData\Local\Temp\Lethal Company\Lethal Company\BepInEx\config\FlipMods.ReservedFlashlightSlot.cfg"
    1⤵
    • Modifies registry class
    PID:924
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:4824

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads