Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

MategolBea....3.exe

windows7-x64

7

MategolBea....3.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    MategolBeamer_v1.3.exe

  • Size

    43.7MB

  • Sample

    250318-r41g1ayly9

  • MD5

    95711283dddf320082ee357c6cd6379d

  • SHA1

    68bf89447599a12cbadf80727e2b23233406d2cf

  • SHA256

    067fff7b71648cf6582bf7142b68ccc947a0c4f4f10db20161efc51ff1f30f53

  • SHA512

    77bb193e149cbf70f34c8a04c92b76f8a281b26b5504eb2bd094515f221c6d5f9b195cc20eb15215ceb0691b1e0f55c45ef309307a0e77c80e39b2afa8bc5267

  • SSDEEP

    786432:o3uqLgZ3/66aK8W8Oh12JtEhqKVTa1QtIXO1dyOe4UA1snjyDEZCuA4vKsMrxPZV:oRLg1/QK8WTGPEhqKVTmiIe1QOI8Z4y7

Score
10/10
pysilondefense_evasionexecutionpersistencepyinstaller

Malware Config

Targets

    • Target

      MategolBeamer_v1.3.exe

    • Size

      43.7MB

    • MD5

      95711283dddf320082ee357c6cd6379d

    • SHA1

      68bf89447599a12cbadf80727e2b23233406d2cf

    • SHA256

      067fff7b71648cf6582bf7142b68ccc947a0c4f4f10db20161efc51ff1f30f53

    • SHA512

      77bb193e149cbf70f34c8a04c92b76f8a281b26b5504eb2bd094515f221c6d5f9b195cc20eb15215ceb0691b1e0f55c45ef309307a0e77c80e39b2afa8bc5267

    • SSDEEP

      786432:o3uqLgZ3/66aK8W8Oh12JtEhqKVTa1QtIXO1dyOe4UA1snjyDEZCuA4vKsMrxPZV:oRLg1/QK8WTGPEhqKVTmiIe1QOI8Z4y7

    Score
    9/10
    defense_evasionexecutionpersistencepyinstaller

    • Enumerates VirtualBox DLL files

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      defense_evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks