Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

RIOT BRUTE v.0.7.exe

windows7-x64

7

RIOT BRUTE v.0.7.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    29s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    15/04/2023, 15:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    RIOT BRUTE v.0.7.exe

  • Size

    41.4MB

  • MD5

    78dd0c1b766ac88a465b462969e1e7c1

  • SHA1

    5dca6845eabdbd89bb7cfe30dab8e59b909274b1

  • SHA256

    e755ee8301b3bc79e0aef9dad46b17f5ed7aff12a23986702c53dac1592d0669

  • SHA512

    d6e7563c106f1355389b31ac84697c2926fd43f173f027fa30dec5dca4cd4cee9470e559c2ed34dc47f30809c8ce91ec98b40f05724070eab54d8a3f300cd53f

  • SSDEEP

    786432:EHf+YFT57yO5I27EImKCD0S+F22DPToF/e6Gj4XN4Kzgk3WDsFBhnaHABaUI7d48:EHf+YFMO5tnowBDEF/y4NbBhnFBC3ok

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\RIOT BRUTE v.0.7.exe
    "C:\Users\Admin\AppData\Local\Temp\RIOT BRUTE v.0.7.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:848
    • C:\Users\Admin\AppData\Local\Temp\RIOT BRUTE v.0.7.exe
      "C:\Users\Admin\AppData\Local\Temp\RIOT BRUTE v.0.7.exe"
      2⤵
      • Loads dropped DLL
      PID:1748

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\_MEI8482\python311.dll
    Filesize

    5.5MB

    MD5

    1fe47c83669491bf38a949253d7d960f

    SHA1

    de5cc181c0e26cbcb31309fe00d9f2f5264d2b25

    SHA256

    0a9f2c98f36ba8974a944127b5b7e90e638010e472f2eb6598fc55b1bda9e7ae

    SHA512

    05cc6f00db128fbca02a14f60f86c049855f429013f65d91e14ea292d468bf9bfdeebc00ec2d54a9fb5715743a57ae3ab48a95037016240c02aabe4bfa1a2ff4

    Download Submit

  • \Users\Admin\AppData\Local\Temp\_MEI8482\python311.dll
    Filesize

    5.5MB

    MD5

    1fe47c83669491bf38a949253d7d960f

    SHA1

    de5cc181c0e26cbcb31309fe00d9f2f5264d2b25

    SHA256

    0a9f2c98f36ba8974a944127b5b7e90e638010e472f2eb6598fc55b1bda9e7ae

    SHA512

    05cc6f00db128fbca02a14f60f86c049855f429013f65d91e14ea292d468bf9bfdeebc00ec2d54a9fb5715743a57ae3ab48a95037016240c02aabe4bfa1a2ff4

    Download Submit