Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

Ui Mod Install.exe

windows7-x64

10

Ui Mod Install.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e446afec193f4b290e603bed50b8bbbc_JaffaCakes118

  • Size

    348KB

  • Sample

    240916-h89rssvhkq

  • MD5

    e446afec193f4b290e603bed50b8bbbc

  • SHA1

    cc4cfd0eb4424afe07adefa3b9b4acb0a08d8802

  • SHA256

    d9ed429cf353367f42e4e28a8b47a3f75fca9269893431b8ea3fe680488f0c1d

  • SHA512

    1807bca74284409ff901e6dd203aa260bd6dda634d68129cea6cad2092dd642414a1408cd2935eab05a9ac5d8e204da61c8dd5efe08d6f10c71429e1a99ba011

  • SSDEEP

    6144:NFerqVoa2DI2tWrVGnbIuLCBzSXPMTCTmL102l28r0X339Dlc3J2vBwmuxhzRtpE:NFiK2sPrq7L4C0ThjDrU3thcQvBwXxBW

Score
10/10
luminositydiscoverypersistencerat

Malware Config

Targets

    • Target

      Ui Mod Install.exe

    • Size

      371KB

    • MD5

      1bf80c36479ce542dbb7d94e7bdae9a3

    • SHA1

      c8c0ea7ddad3e3b2e73580a87eb545a165469037

    • SHA256

      032401122c0f05e210254c9bd6cf7b7bc099f5921a82908da95640cd119aaacf

    • SHA512

      9d27de4acd04b52f2073de9e5a75084008d3afb81ee4da5cb2c7d2e2c3b8bfcd18d545174bde05bc814bb52c5e33006a5cf736d7c04233753959b592280853da

    • SSDEEP

      6144:9ssH2YqnbIuLaBzSXPITCTmL102ls8r0X739Dlc3J2TBwmuxHZ3j:rS7LwCgTRj1rU7thcQTBwXxFj

    Score
    10/10
    luminositydiscoverypersistencerat

    • Luminosity

      Luminosity is a RAT family that was on sale, while claiming to be a system administration utility.

      ratluminosity

    • Modifies WinLogon for persistence

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks