Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

mtc-artill...up.exe

windows7-x64

8

mtc-artill...up.exe

windows10-2004-x64

8

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows7-x64

1

$PLUGINSDI...ls.dll

windows10-2004-x64

1

mtc-artill...ay.exe

windows7-x64

1

mtc-artill...ay.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    mtc-artillery-overlay_0.2.4_x64-setup.exe

  • Size

    2.0MB

  • Sample

    240625-r18zzawbnf

  • MD5

    95efe9841f8583ff59e6c61f13307983

  • SHA1

    e9c243683ef0d273aeeb58619bcec8483d75706a

  • SHA256

    d56176af1f4f536cfd1f41eb5559e6733e7694e61dcfa4b40ab03cb01e86d572

  • SHA512

    09d823be98ac694af732af5039840fac7921a7b558c2e71ba0b85ecb4459c4b9d19b8e9e454b277c660a65b0bf5672a3603f29ca7bab9ecc788ba567f0d476d0

  • SSDEEP

    49152:h9SwbIG/SGvC1FO6+Nq7GEhXJuzn7a6rU/0b9ZBwv:h7b+Xn+ET5Qn7xA/GUv

Score
8/10
discoveryevasiontrojan

Malware Config

Targets

    • Target

      mtc-artillery-overlay_0.2.4_x64-setup.exe

    • Size

      2.0MB

    • MD5

      95efe9841f8583ff59e6c61f13307983

    • SHA1

      e9c243683ef0d273aeeb58619bcec8483d75706a

    • SHA256

      d56176af1f4f536cfd1f41eb5559e6733e7694e61dcfa4b40ab03cb01e86d572

    • SHA512

      09d823be98ac694af732af5039840fac7921a7b558c2e71ba0b85ecb4459c4b9d19b8e9e454b277c660a65b0bf5672a3603f29ca7bab9ecc788ba567f0d476d0

    • SSDEEP

      49152:h9SwbIG/SGvC1FO6+Nq7GEhXJuzn7a6rU/0b9ZBwv:h7b+Xn+ET5Qn7xA/GUv

    Score
    8/10
    discovery

    • Downloads MZ/PE file

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      15KB

    • MD5

      ee68463fed225c5c98d800bdbd205598

    • SHA1

      306364af624de3028e2078c4d8c234fa497bd723

    • SHA256

      419485a096bc7d95f872ed1b9b7b5c537231183d710363beee4d235bb79dbe04

    • SHA512

      b14fb74cb76b8f4e80fdd75b44adac3605883e2dcdb06b870811759d82fa2ec732cd63301f20a2168d7ad74510f62572818f90038f5116fe19c899eba68a5107

    • SSDEEP

      384:7py18oahashajPmIYInUJggBOZgAHhUKijb:7py18oafmeggBOCAHpij

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/StartMenu.dll

    • Size

      7KB

    • MD5

      d070f3275df715bf3708beff2c6c307d

    • SHA1

      93d3725801e07303e9727c4369e19fd139e69023

    • SHA256

      42dd4dda3249a94e32e20f76eaffae784a5475ed00c60ef0197c8a2c1ccd2fb7

    • SHA512

      fcaf625dac4684dad33d12e3a942b38489ecc90649eee885d823a932e70db63c1edb8614b9fa8904d1710e9b820e82c5a37aeb8403cf21cf1e3692f76438664d

    • SSDEEP

      96:h8dPIKJhMuhik+CfoEwknt6io8zv+qy5/utta/H3lkCTcaqHCI:yZIKXgk+cx6QYFkAXlncviI

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      cff85c549d536f651d4fb8387f1976f2

    • SHA1

      d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e

    • SHA256

      8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8

    • SHA512

      531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88

    • SSDEEP

      192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      6c3f8c94d0727894d706940a8a980543

    • SHA1

      0d1bcad901be377f38d579aafc0c41c0ef8dcefd

    • SHA256

      56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2

    • SHA512

      2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355

    • SSDEEP

      96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc

    Score
    3/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/nsis_tauri_utils.dll

    • Size

      28KB

    • MD5

      a573dcf90cb9d9e30624eea14018980e

    • SHA1

      01e48d6429b48b640230c6ce8f257c84758943aa

    • SHA256

      2fe7953cd06cd9ab1d5e91834ecfe70bcf7a9ed6b2c40aebc21c98c6f96eb89c

    • SHA512

      823a79f1b1e6e64481f0c305e189d95b51528b6ce87a2330e2199a33ebfe074a6e39382c79cb28d89c89294205031f0519bff5aacd2334813a74d32529d2eaa7

    • SSDEEP

      384:sq6F316ZZDGeN/b42AHrKLHxEojKCKpnbOMdjdhQD7bGh+qkzAGj:sq6Fl6ZICb3ercFKpnq0jdhK7W+q4

    Score
    1/10
    behavioral11behavioral12

    • Target

      mtc-artillery-overlay.exe

    • Size

      6.8MB

    • MD5

      42aaafe801e51ec0fdaa45ec84bc10fd

    • SHA1

      4104ba1741065adb2486381c1a2f13576a8e2304

    • SHA256

      99208d8532dfeedf1d2d1e155ff05bcacd2705d58d58e92f4b0846dccea07e65

    • SHA512

      9621c3138421abbb91a63bb1bf14c3efdbdc47ed26ce168efe2d65cbcd0d3edf411039710d92231d7da135707801025da33b7a349ec590d3b5070d060282ae44

    • SSDEEP

      98304:cf2S1l5xiZzEekYKG8mTYBJV+uCIAvs9iVK6:k898m8cYip

    Score
    6/10
    evasiontrojan

    • Checks whether UAC is enabled

      evasiontrojan

    • Drops file in System32 directory

    behavioral13behavioral14

MITRE ATT&CK Enterprise v15

Tasks