Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

HorrorTubbies 1.0.exe

windows10-1703-x64

HorrorTubbies 1.0.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    HorrorTubbies 1.0.exe

  • Size

    11.5MB

  • Sample

    240716-llbg9swclk

  • MD5

    cbefa3dd01682c7ae01476a35c069ca8

  • SHA1

    0a7fde7402d314993d0b77b87b796f480c8bbec4

  • SHA256

    9a8a71e84dbbcea6ca2286d811db5d2df586d01e13654b034f77ffd6dbed599a

  • SHA512

    41a1dff4610230d1cf72c0c42b6c7eef8a12c991cb42ed28cd2268f20f1978b14fba9e17081cdbe411963bc7dcd3273046d1ddc7427f6d9cc117ea592833ed8d

  • SSDEEP

    196608:knW3NrRSIGB4e6rVwKQ8QNeL8W6sXh9rcWdTXfxo5FKKxuAUKPZ7CwI7qMh:kn/r6CKENjsXr9TX5rKRCwI7

Score
10/10
evasionpersistenceransomwaretrojanupx

Malware Config

Targets

    • Target

      HorrorTubbies 1.0.exe

    • Size

      11.5MB

    • MD5

      cbefa3dd01682c7ae01476a35c069ca8

    • SHA1

      0a7fde7402d314993d0b77b87b796f480c8bbec4

    • SHA256

      9a8a71e84dbbcea6ca2286d811db5d2df586d01e13654b034f77ffd6dbed599a

    • SHA512

      41a1dff4610230d1cf72c0c42b6c7eef8a12c991cb42ed28cd2268f20f1978b14fba9e17081cdbe411963bc7dcd3273046d1ddc7427f6d9cc117ea592833ed8d

    • SSDEEP

      196608:knW3NrRSIGB4e6rVwKQ8QNeL8W6sXh9rcWdTXfxo5FKKxuAUKPZ7CwI7qMh:kn/r6CKENjsXr9TX5rKRCwI7

    Score
    10/10
    evasionpersistenceransomwaretrojanupx

    • UAC bypass

      evasiontrojan

    • Disables Task Manager via registry modification

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks