Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

MTA Spoofer V3.rar

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    MTA Spoofer V3.rar

  • Size

    5.8MB

  • Sample

    250326-py158sxks6

  • MD5

    6f7f87d9b76e4617aed33a93270f7c60

  • SHA1

    aeef909785b303858cdc5f071a592788f078d4e2

  • SHA256

    483a69ebf588c7a0a40cb90e4c2b11263e8844fc490cbd3fd3a0191344f72e9a

  • SHA512

    e43d75e2cb5f8ee259616a79daa9b09fe5bc8bcd5c43851f271b3101cfb3ac427b759191d7e84bf24b05ba1268b9ebb6ac4391ef6eb1cbec54520d82d452b11d

  • SSDEEP

    98304:art8BuzySBkhVgYJlXSYRGa7//0H5Wd0A+RKQzJwKSyUA4O1+vhx/m:arqBuzulIaj0Zk+RdzOyUY10hI

Score
10/10
blankgrabberdiscoveryexecutionpersistenceupx

Malware Config

Targets

    • Target

      MTA Spoofer V3.rar

    • Size

      5.8MB

    • MD5

      6f7f87d9b76e4617aed33a93270f7c60

    • SHA1

      aeef909785b303858cdc5f071a592788f078d4e2

    • SHA256

      483a69ebf588c7a0a40cb90e4c2b11263e8844fc490cbd3fd3a0191344f72e9a

    • SHA512

      e43d75e2cb5f8ee259616a79daa9b09fe5bc8bcd5c43851f271b3101cfb3ac427b759191d7e84bf24b05ba1268b9ebb6ac4391ef6eb1cbec54520d82d452b11d

    • SSDEEP

      98304:art8BuzySBkhVgYJlXSYRGa7//0H5Wd0A+RKQzJwKSyUA4O1+vhx/m:arqBuzulIaj0Zk+RdzOyUY10hI

    Score
    8/10
    discoveryexecutionpersistenceupx

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

      execution

    • Sets service image path in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Enumerates processes with tasklist

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks