Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Crack SoundPad , By Burdix.rar

  • Size

    7.2MB

  • Sample

    241005-zgbt5asarq

  • MD5

    73164c909d0347b14798395ef88ce211

  • SHA1

    6f51c7e4c246982aa8651690678d66fcc2f70520

  • SHA256

    e1f5f78f744ddd0c1d9392ac2f19b1a7077ee27043a09355a60de06980fc4963

  • SHA512

    3c27722ab836291aeac916ae64e42ec74d7d6cb075b2a2d11d7b28cc723853b2b4765c13c2ef662c274636f329e1193945740237b54944e78f33b0eda6642cb9

  • SSDEEP

    196608:ae8fPDao4PcoJDxWeHnCvofD8befhcfEx7CIt3AbY:ae83b4nlCvIeefKsxm83AbY

Malware Config

Targets

    • Target

      Crack SoundPad , By Burdix.rar

    • Size

      7.2MB

    • MD5

      73164c909d0347b14798395ef88ce211

    • SHA1

      6f51c7e4c246982aa8651690678d66fcc2f70520

    • SHA256

      e1f5f78f744ddd0c1d9392ac2f19b1a7077ee27043a09355a60de06980fc4963

    • SHA512

      3c27722ab836291aeac916ae64e42ec74d7d6cb075b2a2d11d7b28cc723853b2b4765c13c2ef662c274636f329e1193945740237b54944e78f33b0eda6642cb9

    • SSDEEP

      196608:ae8fPDao4PcoJDxWeHnCvofD8befhcfEx7CIt3AbY:ae83b4nlCvIeefKsxm83AbY

    Score
    3/10
    • Target

      Crack SoundPad , By Burdix/Profile/CRACKED BY Burdix/SteamUserID.cfg

    • Size

      61B

    • MD5

      f52a171e8ceaf98f510e76d382768182

    • SHA1

      c2e164932223c56143f9b43b7c46795699d3c0a1

    • SHA256

      f36a0aefa2507a43adfcad20a262a7895a17b19565f02430bcc79f48c1b9ea0e

    • SHA512

      03d84f4067da98a06b36eb71e224a09ae890a9c36a580a567c56150135bc457348cdd4acedc0bf9b1a85c18f577fe56c0471b2a7856bded810d9766640b6baf2

    Score
    3/10
    • Target

      Crack SoundPad , By Burdix/Profile/CRACKED BY Ray_Black/SteamUserID.cfg

    • Size

      61B

    • MD5

      eccef3489e9d42b2022c238e3806fb40

    • SHA1

      0818a1ca953ec257cabda784fe6e4202473150b6

    • SHA256

      bce2ac78574807fc55cdba6b339be188e9995b28568fabe2b86d4dbcb36e316a

    • SHA512

      5e8ea3eabac905304e53fc1bbbf979ef9282e6ae21f550bec9e408f351713c57abd6ef0c6e4f2a565b190f1b1b6b63fa11d5bf5aaddfc03c02349591351584d5

    Score
    3/10
    • Target

      Crack SoundPad , By Burdix/Soundpad - Raccourci.lnk

    • Size

      1KB

    • MD5

      428f4ea8cf531b3c3540c90fcc7a27c9

    • SHA1

      fd1c2217d0a6d270d3c3ac460528c3199e7c12dc

    • SHA256

      f89ff09ecad2ef5a98b85ef5b47ac1e3faba33152a02fee4880972858e1e0e1e

    • SHA512

      439886fc561259e6bd3f502c4dc65b99f6aea8604c9e2102110d2f425d6f7ec66a0bd1f51198df7d66a5c3d73d348c831848cf293c1f72733bb18e17043cbdae

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      Crack SoundPad , By Burdix/Soundpad.exe

    • Size

      10.9MB

    • MD5

      0ae4f60d72e0d1c159505500b8a08ebb

    • SHA1

      bb352dafd3c3ebebb4414b799010fe5ebddbef44

    • SHA256

      ed3371229647ef876b45cb5940e48b461df58d4e68ad4932f5877eba90c8d379

    • SHA512

      88495911df544a04a4e09828ae10b57d3d945c41d6e28964c2d4d077afa43fec1c82a8ff6dcce57a3c7b9e5d02d1e47f800f557b022866f5f7be4a2db9b07536

    • SSDEEP

      196608:fDRlger67uOemwy1LR/XU3gmsRM0wWM+wC89ooEvu:UerSwAVE3XsRMiJpsf

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      Crack SoundPad , By Burdix/SteamConfig.ini

    • Size

      135B

    • MD5

      8aaae6e65f734e7f90b2d11966c76a16

    • SHA1

      f910a899891026e6d22305d176a73d2588b99715

    • SHA256

      c2702d244e84cb0abc4f964062b9ecf51b1697712ad4c03b37d345f93d045bba

    • SHA512

      96f0c7cd0b8e2ce8365f907a03c8229ed733fdcd07a826d82aa242c870f5994d04b1987263ba2a8e0a314ab281d5cf9905cc562177e09b499a99fe3e8d3cfb5e

    Score
    1/10
    • Target

      Crack SoundPad , By Burdix/UniteFxControl.dll

    • Size

      1.1MB

    • MD5

      6ac19cffc0c58ce35ae704c381c4f702

    • SHA1

      c43900c5d56d62311a337b04c9489afc1c75c175

    • SHA256

      afe6075ea7dd1bdcbc47b38385216d11cdd5ebc3f82eeedfa6d766e9249d6252

    • SHA512

      61197228b9a1bb9810c68cc04928fd47e2bbe78d36f71c4a2ee498742fea8fd6c950cf43578fa20c6009f1ed6343bf8ca7bfb155512018aac88a4191fad4f939

    • SSDEEP

      24576:XBLW5gqPvbSfiCRcXw0qU6RmWByuAy5a/owH/1:ZqPvbv/Zwm4yi5aQwHN

    Score
    1/10
    • Target

      Crack SoundPad , By Burdix/UniteFxUpdate.dll

    • Size

      442KB

    • MD5

      0ee743073ee6b68f8222be2661d95315

    • SHA1

      2e642772ec19edf73422fe25a8d45db1a006ff85

    • SHA256

      562b17370c7283e92a3353b76ab2aefd301c2e78782fa60ec9ee35676ad44f96

    • SHA512

      c3f2037bd37cef7978187f67f1d0633ee3067b4837e0ad9ae2a5c8efab8ec4ce6a14c1d88e200ffaa8677f74fd5995789297e6a7b5ac18d19dc9d53b4d9170ba

    • SSDEEP

      6144:12UHPCFzuxTmVCp41NpA9+2pVbW+i6kdIkl7haKGrgEOHWeohg6yKJIGFEph:12NzSC1Na42ekuMs2eoqO+Dh

    Score
    1/10
    • Target

      Crack SoundPad , By Burdix/installscript.vdf

    • Size

      631B

    • MD5

      1a792aff29d6f07d1c3381634ba6baff

    • SHA1

      f2c7bb49ccaf63ffcd38d06dd2d51095b08d4344

    • SHA256

      270d2a3eef463b768ca4368e62444a7ccaff4e98c71f2ca05b721bfef2e03e05

    • SHA512

      3971dee038f1cd1aacf9151196a53e2bfbf4bc9a665f60ae79309b5544d81a733e3f7b9db422e17c5a95ba2930248be408e6fbf877f8eb12235277f46af5a4f1

    Score
    3/10
    • Target

      Crack SoundPad , By Burdix/steam_api64.dll

    • Size

      3.4MB

    • MD5

      fde6c8bf079648ef175bfe54a48c33bd

    • SHA1

      86da9176866a1f03ca8ad7fd381c3f2cfc89c6e8

    • SHA256

      0a1e5c53cbad6b21de61e11f023c0d3f11f698164c743bd272741a7ba59ca5d7

    • SHA512

      d750550d1abe01f8b59623e58dd366d3baa6b0a03a48f0c95f381d30481ffd20549801979c3c9d19145521a0f3dd8dbd6397347ec4d3448ab1ef4ad8e781a1ab

    • SSDEEP

      49152:sqg1gpl5AKwKsRtf1Mx5k1aGLCnAWWMWWAwK3TQz4Cq9NVF14ZlEk8gtCbC5qAmk:GUnZ/slM7k/2DaWNcCaEk8oMexLCFJ

    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks