Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Fortnite_SkibidiMenu.exe

  • Size

    6.3MB

  • Sample

    240620-wen5wszdme

  • MD5

    458a7ca0673cba20d3cbc8350363d1c3

  • SHA1

    96291d27b3216edaac67b2d4652dc12248d8a528

  • SHA256

    f13600dec74a3393d80393d0b2c42e4a3c2bb9531995b615437de490bd1dedb0

  • SHA512

    46bd57012ceb42ad1aad82ac78d6a230a57fa21cb483de7d976a195b0bece9e80ea0587068785dfa46aa0f61c9591bf8dae8780b225dddfad9a9852ddb8ff6c3

  • SSDEEP

    98304:ju1ZvNtfv/uJfpM4nX/FqyaNif13g6SuTf+91hOQVwZu5V8Nq8i:KtR/aZPcyaNsyuTG91hOQVwZY0q8i

Malware Config

Targets

    • Target

      Fortnite_SkibidiMenu.exe

    • Size

      6.3MB

    • MD5

      458a7ca0673cba20d3cbc8350363d1c3

    • SHA1

      96291d27b3216edaac67b2d4652dc12248d8a528

    • SHA256

      f13600dec74a3393d80393d0b2c42e4a3c2bb9531995b615437de490bd1dedb0

    • SHA512

      46bd57012ceb42ad1aad82ac78d6a230a57fa21cb483de7d976a195b0bece9e80ea0587068785dfa46aa0f61c9591bf8dae8780b225dddfad9a9852ddb8ff6c3

    • SSDEEP

      98304:ju1ZvNtfv/uJfpM4nX/FqyaNif13g6SuTf+91hOQVwZu5V8Nq8i:KtR/aZPcyaNsyuTG91hOQVwZY0q8i

    • AgentTesla

      Agent Tesla is a remote access tool (RAT) written in visual basic.

    • AgentTesla payload

    • Looks for VirtualBox Guest Additions in registry

    • Looks for VMWare Tools registry key

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks