Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

2 Vkontakt...k .exe

windows7-x64

10

2 Vkontakt...k .exe

windows10-2004-x64

10

2 Vkontakt...ll.exe

windows7-x64

10

2 Vkontakt...ll.exe

windows10-2004-x64

10

smart_avat...sa.exe

windows7-x64

1

smart_avat...sa.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    40c92f90a2625431921b9c4ae9c74026_JaffaCakes118

  • Size

    2.8MB

  • Sample

    240713-jjsyessbqp

  • MD5

    40c92f90a2625431921b9c4ae9c74026

  • SHA1

    927fb985d911b34c221e64bf7dc6bdb1e28385d5

  • SHA256

    e6b6644243ee561b6c388581f42117c317967ffa5cf12080838e61e89f98b7ec

  • SHA512

    98b255b601800b1124e2950d5e64e726ddd306e18e9cae6e2d361f067be45821408798744f543d02bebcd386acf3a40c36881586f3b6f948c111b5e5bf8ac877

  • SSDEEP

    49152:QCDlkLo7oM5Zfr3363u2eINYvQkfc3nAnoAamVJjHOpYfN354P3PHRJ8W9+c:AOoMI7jOjk3AnHnfNOJ8UX

Score
10/10
aspackv2evasion

Malware Config

Targets

    • Target

      2 Vkontakte Smart Avatark/2 Vkontakte Smart Avatark .exe

    • Size

      149KB

    • MD5

      cc4ca16249d1d659b5261f2ef0230b5b

    • SHA1

      c1f89e1bcfc913505519e47d89def027061eae71

    • SHA256

      8194af2417a6e979cdc1d9df203bbababb0ef5d290cf7609dfb07b378b069609

    • SHA512

      6d5c625024a12b36ac5a5213ea472dcf2cb79bfc6bbc7c47f151095b22878da4ac4668db3170b1de8e7646ec38995e054dbcd83979971986831bb50e8ee69f55

    • SSDEEP

      3072:uZ1UE7Zk06M6fjScmUdt+LPGvtix2n2Az5S31AibtLOQeJ7aWC:uZpL6MEjwTxqbz5S31jtLOLdC

    Score
    10/10
    evasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

    • Target

      2 Vkontakte Smart Avatark/WinrRarSerialInstall.exe

    • Size

      149KB

    • MD5

      809f5b6750aef3fbd5c7915ec20bd119

    • SHA1

      1d794d9d0184eb1d9b4adf5a55e01dd02bbb76d8

    • SHA256

      960cd42ade15c84c566a5510449082e4f27b70d35cf857d129e141f8b08e3b96

    • SHA512

      ca3dab3463e773d45e9514fe2e07754071a5f17855153676f6580767548c092544ea283cbb113d4da4356a0ed5e4f6792a2569ae6d20b55410c977c061120700

    • SSDEEP

      3072:cPyB0GTWtakxp4lCcqUAlrGP+2OzN+Uli:0yBRq8kgGUA1o5M2

    Score
    10/10
    evasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral3behavioral4

    • Target

      smart_avatark/vksa.exe

    • Size

      365KB

    • MD5

      4909d153465abc90d927d31372d6f917

    • SHA1

      52a795aac8c0e8d901f2882ce60baff7792f718d

    • SHA256

      cd8b2e8709ea52e9376eb136b7c16368eb686d7a8583d956c4fed3e4fe8885b2

    • SHA512

      cbe209118117c1f5a4f6259d88e18e86574d1c79c3038397db7c44663cef8de3cdb3fc1804e751a088ad3cf09d7e3454cd6ceeec450986decdfba76ebd33e94a

    • SSDEEP

      6144:Fv+U/I9efW821YBlJe/jeMNCfd/HOKLqxLEOnETW0bgjeU4f988tut2Y2:EU/+GDs/jjGpnXOr4C8tGU

    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks