Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
3B3RAP Leec...er.exe
windows7-x64
8B3RAP Leec...er.exe
windows10-2004-x64
7B3RAP Leec...et.dll
windows7-x64
1B3RAP Leec...et.dll
windows10-2004-x64
1NETFLIX Ch...ER.exe
windows7-x64
7NETFLIX Ch...ER.exe
windows10-2004-x64
7NETFLIX Ch...ER.exe
windows7-x64
7NETFLIX Ch...ER.exe
windows10-2004-x64
7NETFLIX Ch...er.dll
windows7-x64
1NETFLIX Ch...er.dll
windows10-2004-x64
1NETFLIX Ch...et.dll
windows7-x64
1NETFLIX Ch...et.dll
windows10-2004-x64
1Proxy Chec...ER.exe
windows7-x64
7Proxy Chec...ER.exe
windows10-2004-x64
7Proxy Chec...ER.exe
windows7-x64
8Proxy Chec...ER.exe
windows10-2004-x64
7Proxy Chec...ck.exe
windows7-x64
10Proxy Chec...ck.exe
windows10-2004-x64
10Proxy Chec...er.dll
windows7-x64
1Proxy Chec...er.dll
windows10-2004-x64
1Proxy Chec...et.dll
windows7-x64
1Proxy Chec...et.dll
windows10-2004-x64
1Analysis
-
max time kernel
90s -
max time network
134s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
19/09/2024, 02:27
Static task
static1
Behavioral task
behavioral1
Sample
B3RAP Leecher v0.5/B3RAP Leecher.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
B3RAP Leecher v0.5/B3RAP Leecher.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
B3RAP Leecher v0.5/Leaf.xNet.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
B3RAP Leecher v0.5/Leaf.xNet.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
NETFLIX Checker Account By X-KILLER/._cache_NETFLIX Checker Account By X-KILLER.exe
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
NETFLIX Checker Account By X-KILLER/._cache_NETFLIX Checker Account By X-KILLER.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
NETFLIX Checker Account By X-KILLER/NETFLIX Checker Account By X-KILLER.exe
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
NETFLIX Checker Account By X-KILLER/NETFLIX Checker Account By X-KILLER.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
NETFLIX Checker Account By X-KILLER/SkinSoft.VisualStyler.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
NETFLIX Checker Account By X-KILLER/SkinSoft.VisualStyler.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
NETFLIX Checker Account By X-KILLER/xNet.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
NETFLIX Checker Account By X-KILLER/xNet.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Proxy Checker v0.2/._cache_Proxy Checker v0.2 By X-SLAYER.exe
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
Proxy Checker v0.2/._cache_Proxy Checker v0.2 By X-SLAYER.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Proxy Checker v0.2/Proxy Checker v0.2 By X-SLAYER.exe
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Proxy Checker v0.2/Proxy Checker v0.2 By X-SLAYER.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Proxy Checker v0.2/Proxy Checker v0.2 Crack.exe
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
Proxy Checker v0.2/Proxy Checker v0.2 Crack.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Proxy Checker v0.2/SkinSoft.VisualStyler.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Proxy Checker v0.2/SkinSoft.VisualStyler.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Proxy Checker v0.2/xNet.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
Proxy Checker v0.2/xNet.dll
Resource
win10v2004-20240802-en
General
-
Target
NETFLIX Checker Account By X-KILLER/._cache_NETFLIX Checker Account By X-KILLER.exe
-
Size
538KB
-
MD5
867f1fbc0a5d89a100d4fe867fa4b34f
-
SHA1
a41eb575ac101f0954d074932eebcd916ce0023b
-
SHA256
e22c7f85f00cc4a5219d23ead9ae28897ebea30d09b39387456c1f4fd4541ce5
-
SHA512
6e71eae56d521d0f62abf605f7181bee429e878aa96853e8e95e0512bb2f5a1c93191ab9afbaf3409d61f78ee4decb6581c7764daaa53bc35ad4c1c77b9ecbfa
-
SSDEEP
12288:dyqVfhoCeZzPde+4ZJwpBeV8Agn+X+n9B5tLA1zXKZrnkRkEp:dyq4CeZTdp4ZJSK2i+n9B5t0Ag
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe -
Suspicious behavior: EnumeratesProcesses 32 IoCs
pid Process 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2332 ._cache_NETFLIX Checker Account By X-KILLER.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\NETFLIX Checker Account By X-KILLER\._cache_NETFLIX Checker Account By X-KILLER.exe"C:\Users\Admin\AppData\Local\Temp\NETFLIX Checker Account By X-KILLER\._cache_NETFLIX Checker Account By X-KILLER.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2332
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
66KB
MD5c74d260d388f5ac3d95d8c1c3a27c989
SHA15da009086036004a7c670d608d5e1e923aead568
SHA256dc1bebb8ce88d59e4b3130c1ff2c4b7f5df2701c7a71b476b8a6f2ed541db628
SHA5126460db8f73806017d267c0e4e112902956a3bc53853c6a893cff66fe44772305b2c158ef8b58e993806d713aceaddcf2efa7ccf625063678444d3fd20b10546a