Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

Incognito-main.zip

windows7-x64

1

Incognito-main.zip

windows10-2004-x64

1

Incognito-...au.dll

windows7-x64

1

Incognito-...au.dll

windows10-2004-x64

1

Incognito-...nit.py

windows7-x64

3

Incognito-...nit.py

windows10-2004-x64

3

Incognito-...api.py

windows7-x64

3

Incognito-...api.py

windows10-2004-x64

3

Incognito-...der.js

windows7-x64

3

Incognito-...der.js

windows10-2004-x64

3

Incognito-...dge.js

windows7-x64

3

Incognito-...dge.js

windows10-2004-x64

3

Incognito-...ypt.js

windows7-x64

3

Incognito-...ypt.js

windows10-2004-x64

3

Incognito-...bug.js

windows7-x64

3

Incognito-...bug.js

windows10-2004-x64

3

Incognito-...ing.js

windows7-x64

3

Incognito-...ing.js

windows10-2004-x64

3

Incognito-...tem.js

windows7-x64

3

Incognito-...tem.js

windows10-2004-x64

3

Incognito-...put.js

windows7-x64

3

Incognito-...put.js

windows10-2004-x64

3

Incognito-...s.luau

windows7-x64

3

Incognito-...s.luau

windows10-2004-x64

3

Incognito-...isc.js

windows7-x64

3

Incognito-...isc.js

windows10-2004-x64

3

Incognito-...s.luau

windows7-x64

3

Incognito-...s.luau

windows10-2004-x64

3

Incognito-...t.luau

windows7-x64

3

Incognito-...t.luau

windows10-2004-x64

3

Incognito-...aes.js

windows7-x64

3

Incognito-...aes.js

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Incognito-main.zip

  • Size

    1.2MB

  • Sample

    240715-qaq6ssselr

  • MD5

    fb4ee8d73d738e21014cba35271c6b50

  • SHA1

    96805007e30e4ca623331598298fa346d4870292

  • SHA256

    36ea1834880711141b9c8774af22b77b7da92b5e71699cd8e0d330862b4b7a05

  • SHA512

    b602c20dd3c93ae8817ed9ea34cd6ed9fa0a79dc82f3c41aeb55fe90e7e572a8c5d7de701ff519c54df58a266c0b741638e4f32a125281fb59643196b4a89ee3

  • SSDEEP

    24576:HNQPHFD71LqvKWbbfDlmMnxEJygxTHBjHr42WX8o0ZcHJed:HNWHl1LqyWPfxmFxTHBrsxidd

Score
3/10
execution

Malware Config

Targets

    • Target

      Incognito-main.zip

    • Size

      1.2MB

    • MD5

      fb4ee8d73d738e21014cba35271c6b50

    • SHA1

      96805007e30e4ca623331598298fa346d4870292

    • SHA256

      36ea1834880711141b9c8774af22b77b7da92b5e71699cd8e0d330862b4b7a05

    • SHA512

      b602c20dd3c93ae8817ed9ea34cd6ed9fa0a79dc82f3c41aeb55fe90e7e572a8c5d7de701ff519c54df58a266c0b741638e4f32a125281fb59643196b4a89ee3

    • SSDEEP

      24576:HNQPHFD71LqvKWbbfDlmMnxEJygxTHBjHr42WX8o0ZcHJed:HNWHl1LqyWPfxmFxTHBrsxidd

    Score
    1/10
    behavioral1behavioral2

    • Target

      Incognito-main/bin/incognito-luau.dll

    • Size

      1.3MB

    • MD5

      157fd035b2a344a94166d7db3756df0e

    • SHA1

      f221d28c1deb80b4e8d9201226435aefce6b0f75

    • SHA256

      8716c75aff75941711aff8770836f47eb9a254416089ef3571c6fc9a338b3009

    • SHA512

      fad0174fbd22f58dd4fcdaad8378c214270b4faeaca64d9cb306f50e9316072a4c417c5723c4123b8bf94a3dba6ef4e3303ec60f4a2cf0c3a54d8ab375ea717d

    • SSDEEP

      24576:ZqBSLRktEBl6blwTUMD4zB1VU2bFjYWR0pMQUAqLRAovh4bSAXVVRNRfMXZO:ZqBSLRkt8l6blSU//+2bFfvA1SQVVRNk

    Score
    1/10
    behavioral3behavioral4

    • Target

      Incognito-main/build-init.py

    • Size

      2KB

    • MD5

      34435259ba9cbdec6000aaa7d0b9222e

    • SHA1

      1f660d3adfc0050d9b35f444310de3017e942913

    • SHA256

      fdf0a93360aeac10baa6b26a23e051314b65c10b6272303c74ac2ae8942eeae6

    • SHA512

      67056bc6a4cbb8fb577d9616ac036d9041c25bed94c720ab2ccc14dca911264622aa06d772cf04591be4a5f605d8cc94825e6c8457594633b343ebae19badcba

    Score
    3/10
    behavioral5behavioral6

    • Target

      Incognito-main/exploit/api.py

    • Size

      6KB

    • MD5

      c32ad8b21e1190e4d7df9d87ce90ee1c

    • SHA1

      26761dc550b5ef11665a746c5cf12cff2682eff0

    • SHA256

      0065acc1a113e1582b050a8e9fb05a1e9f6bfa52a5657e806a35c0894a7c6aff

    • SHA512

      6805121a126862261e509545775e89e5bc90a4823220a7cfbbbaa8f757b61127e1c2c132e76e35acc7503246a4d48256d01478e01f0749478dfbd68609a9c9b0

    • SSDEEP

      96:yV7XxhJxmXK01xEYR8DvbE4Axbl7bTVjTm3dhA15:yBxhyZ1xEYSvC5l7bTtTgdh65

    Score
    3/10
    behavioral7behavioral8

    • Target

      Incognito-main/init_script/loader.lua

    • Size

      2KB

    • MD5

      2b959590e44a48ef394c72b0d72014f6

    • SHA1

      624da0bf71874ea5c4c7a2048b4c73683b09f4c7

    • SHA256

      431e83cac622397d6882df07e3184c688246a5d3f8df8c9d94709e89632fac73

    • SHA512

      f666a0a839f880fec6bd7367ca4e9befa653d698b400c93257cebfcacd6b6cd2f69b7e3bc5e58dedc6b513ed83ae420544da5db3264eb26a814dc2506e9b7c7d

    Score
    3/10
    execution
    behavioral10behavioral9

    • Target

      Incognito-main/init_script/modules/bridge.luau

    • Size

      9KB

    • MD5

      0a12edd55eded4dedb002d456123d7c5

    • SHA1

      abb666202f58892fece69e263bc8d2db3e07366f

    • SHA256

      5017da517b931977c3392591538433a74d55f8739a3893ab49a7d87d1c34cf5a

    • SHA512

      0973a920a554f44ba6ab7a23067cd606c2aab9613406dfd97c3babac7055874fc1886c6b13e258404ee3230635e468a6dadb365e554f1e1b5190591ac51cabf4

    • SSDEEP

      192:g/AK4M7Xei2Ki/Q5lb8hX9b+TiWeT3pSv2HHtzOBxMOk/AD/7hQVwh:goDM7Xei2Ki/QjlTYjpSQHt6fPk9q

    Score
    3/10
    execution
    behavioral11behavioral12

    • Target

      Incognito-main/init_script/modules/environment/crypt.luau

    • Size

      5KB

    • MD5

      684b36827c429bf87372f0141c464f10

    • SHA1

      1284e720ea997dab48998be1d68d7268934649bd

    • SHA256

      13db093875ce7dceb2798d4766d0c5f89a0deb36b965674b77c552eaa243a670

    • SHA512

      dddf6c85384ff2ad3c0399a36dfa41d29b38273254034ece8eec482f113df504759b4ec776a3015a422d737be10a8f0f9df1c2a809d84ccd023df1c535da3c25

    • SSDEEP

      96:nV9Zu/HudVrWfpYCV6yfBbWUc5Fb5tpF1/f8IGOOTmhyW9UPHsPH2nVJZ:nV9ZuWdVrWRv6yQU8Fb5tpF1/jGOOylg

    Score
    3/10
    execution
    behavioral13behavioral14

    • Target

      Incognito-main/init_script/modules/environment/debug.luau

    • Size

      6KB

    • MD5

      0fdd502456811b3ef08982af2877c0b3

    • SHA1

      bbc5a0dc49180360e4465a561a72d1e3cf8edf73

    • SHA256

      5943cacfeb7aa6e953e54b466ca5c0759061e310343995a4bd497ee0b22b195a

    • SHA512

      223faa2699eaead341c13b8ccd254e61f7abec0b53d7c1fdaa74ecd413e06aaf04a4f5ff9e78507f737a4b8bbf7708a2d44e806ef841ef7f07e221327e7a3a66

    • SSDEEP

      96:l8poL55RFGPa/TFG4CklHn70Ore/vVibwgkSxHfDbTUegT+3OWTdFKW:UoL3RdluXe33OKFKW

    Score
    3/10
    execution
    behavioral15behavioral16

    • Target

      Incognito-main/init_script/modules/environment/drawing.luau

    • Size

      31KB

    • MD5

      4c39d5eb1e37ef9689cb04b027dc63bc

    • SHA1

      7368baef7d83a2174b801d84e3d124c2ce314f04

    • SHA256

      0d41233eb4ab5001c8d3390be2f852886fbadf019dd688eb1639eb3bac3a811f

    • SHA512

      2450c0a39ab729f024e35ffd1be147fa1aff9e2ba4b9fc960c5601052aeb5d440ce0f167f29fe11ffe458cd87d80eee42c955026e577a727017a600625c116ae

    • SSDEEP

      768:4+jJRZh1y0Ri2AtTqjIoj4jjojTdSk5XOL6HgZ:9Sk5tgZ

    Score
    3/10
    execution
    behavioral17behavioral18

    • Target

      Incognito-main/init_script/modules/environment/filesystem.luau

    • Size

      9KB

    • MD5

      e9639876d5303c3ed844d4acc24d7cb7

    • SHA1

      f0eb2f010d2e217d814a844daab98c03e02cc6f9

    • SHA256

      774d3a6b98396d7665e95b2328c9c0fb56d31153ffb94c6703b3905c85ff7498

    • SHA512

      eddff7c328b8f7a2bf2a183bd7e5775a25a5e6133ce245df552b305833d544c64d14111065154b19075959ca5e9208ee749231ea86649e60ce86e0ed9cdfaf13

    • SSDEEP

      192:nHmMawScvXHceIW9XSgZM/ZTg0Tf5RzpbsJyzmNY/XgZXZkpZFlOgx4iNWiyhTH/:GMawVv8S9tMhTVXr/UpLtZ

    Score
    3/10
    execution
    behavioral19behavioral20

    • Target

      Incognito-main/init_script/modules/environment/input.luau

    • Size

      7KB

    • MD5

      c79990778bb3fca1402588784304f87f

    • SHA1

      7fc9fbe2e8aca459359c622eb583f8f44ce80b9c

    • SHA256

      fdd6c2747f23dd2204644398b2d33884d660311cfb9b3105cbf2356bcb516fd8

    • SHA512

      4eef869757e3f45e55610423a2cdc0f914298a958c35c5637324cf8981f0cbc8bc0756410d561556c3d843ef4b27c86c0ffffbac05da1a7c4c365665f0faa0ff

    • SSDEEP

      192:r2M/rXN+DN/+zeWpNIVqT7Pe+Wh9DsLv/:p/rd+IzeF+De+Wh9K

    Score
    3/10
    execution
    behavioral21behavioral22

    • Target

      Incognito-main/init_script/modules/environment/instances.luau

    • Size

      10KB

    • MD5

      de035f5400c73b965e6900893ac312f9

    • SHA1

      6325f430ad6d0607f182e106b34d7c37d75abf3f

    • SHA256

      96f853c6e2fe1d9402c25ee1b1850d3fedb1933a780a5b0c4dc857b11c06a2c1

    • SHA512

      2e05f063aa6ac0541c9bc22b8961aedbc76fc82a5b434b2dc8222a43c1c1a97a222d9dcd9bf8dc9a71188d153cb40b61b1b3265791d705b7828dfe0feb948468

    • SSDEEP

      192:DCUIRV9AkVN+1f49mkh8bIozWWi/mmRXSIwbNjM8HI:DCUIbT9mkO7W/msXd

    Score
    3/10
    behavioral23behavioral24

    • Target

      Incognito-main/init_script/modules/environment/misc.luau

    • Size

      16KB

    • MD5

      fe6ce7742b9b6f29fec3c699ee41ba69

    • SHA1

      2807a8ade902e6188b195c430c71c9de13033880

    • SHA256

      887b485b48b559c3957727f13d9330338653e20c8b5d89a37b8dee627be2a07a

    • SHA512

      1baddaa0a73c157558ee60bc2b72278177dc5a7f4587140fe5a267d58495325ca0750d0b3dcafe982f25cc5f8b00fd3257ab0dc86e851562c8eb46218f6f4de0

    • SSDEEP

      384:p7eGp29xDNYcpLtez7hetatcPvao2/2s53SCfT:oGp29xDN3cQvao2/2s53SC7

    Score
    3/10
    execution
    behavioral25behavioral26

    • Target

      Incognito-main/init_script/modules/environment/scripts.luau

    • Size

      3KB

    • MD5

      e30df1e907265882cd9e475e68c16c6b

    • SHA1

      02cef47fc43d78f86e7654550b6188353c653438

    • SHA256

      0e16f5b010a9b4d74e999436cec181527d50240cc4112ee8368df19e27ffcf38

    • SHA512

      70a1d8065f39b56a7d0ffb5156a8ebf9a031747d08ff43941c200ed4099e60c659509fce9b2b83082816b5dbeb52ac318ed7656684f26843f587e1187851f056

    Score
    3/10
    behavioral27behavioral28

    • Target

      Incognito-main/init_script/modules/init.luau

    • Size

      968B

    • MD5

      ccaaeb8931a5dd28d83af0e82b9c5f3c

    • SHA1

      8b577f4a421d41200754c3829c327fc82e42b90a

    • SHA256

      4a0f693ccc7edb76c7e944a98c40359f0e54bd899127872672ac6828624244a6

    • SHA512

      b9a2986b26e4d7c7b26b361714c3b65a2a60471387bb445880a41a2a1d80573945deff7ae5beeab43668e38d77e43bf1c51b69e25320dc04336eb9e07b87576a

    Score
    3/10
    behavioral29behavioral30

    • Target

      Incognito-main/init_script/modules/lib/aes.luau

    • Size

      15KB

    • MD5

      82fae925fdfc5277c100165f668a30c0

    • SHA1

      730cda6f5ae53fd4e1764d5b8242eada8eeea220

    • SHA256

      f45bf8899843593d00f929da13a55ca8a23f0ddf63aad3edbb82eb28b0d2e934

    • SHA512

      731ca4417aa71fab0d6e23b2f882504affd08f6850a449cb3bb66be1831c2a183f281611016141ee5d91128b5461c07dd22558ad1d776a0934163f0f37de40ea

    • SSDEEP

      384:tEkD7WVgj4JenADMIMYToxiQX6335/snpUqY5H:RvRjgenADMIDTo4m6Hr

    Score
    3/10
    execution
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
3/10

behavioral6

Score
3/10

behavioral7

Score
3/10

behavioral8

Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

Score
3/10

behavioral24

Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

Score
3/10

behavioral28

Score
3/10

behavioral29

Score
3/10

behavioral30

Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10