Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

FizzyCheat.rar

windows10-2004-x64

3

FizzyCheat.rar

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    FizzyCheat.rar

  • Size

    68.1MB

  • Sample

    240708-cm5casxfjn

  • MD5

    d63e96a26544d011a8395b5ed01f117c

  • SHA1

    5c482e3379267d47c7a6ebc45027baa04bcdf2f5

  • SHA256

    c1649ac36df3ff0d9dcf3111fc30d7e8d3bcb326c74da9411214416a749129ea

  • SHA512

    26befe007297f0502a76171f3edba49447996a529f1990bd31ce5db3297057cbcce9b22466af900fbf00196f039c9097661563d2d0dd5f3df3a6df3644ee80a5

  • SSDEEP

    1572864:YmMZM1p6+cYGGH+ldhDayMlS2u2cQVHsAodlznqycmktkpEB/1TE:IM1pUxuykS2u2csOlGywkmxpE

Score
10/10
executionpersistence

Malware Config

Targets

    • Target

      FizzyCheat.rar

    • Size

      68.1MB

    • MD5

      d63e96a26544d011a8395b5ed01f117c

    • SHA1

      5c482e3379267d47c7a6ebc45027baa04bcdf2f5

    • SHA256

      c1649ac36df3ff0d9dcf3111fc30d7e8d3bcb326c74da9411214416a749129ea

    • SHA512

      26befe007297f0502a76171f3edba49447996a529f1990bd31ce5db3297057cbcce9b22466af900fbf00196f039c9097661563d2d0dd5f3df3a6df3644ee80a5

    • SSDEEP

      1572864:YmMZM1p6+cYGGH+ldhDayMlS2u2cQVHsAodlznqycmktkpEB/1TE:IM1pUxuykS2u2csOlGywkmxpE

    Score
    10/10
    executionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks