Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

RMLLauncher (1).exe

windows10-1703-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RMLLauncher (1).exe

  • Size

    507KB

  • Sample

    230517-npr1jaeh34

  • MD5

    a1887288be1d739385b74a9b1e4ec776

  • SHA1

    b4f9f7569b4eb9c01a964ea3e7bd58d4c2e3c5a1

  • SHA256

    c1ec9ff1824ba53874ab1cb0f1e64c86ab84cfebc09434e33adaeea065211de1

  • SHA512

    72a74af82bd764521d1c117145640d1e9974190350377e5776acb5797a8d4ab37263c8f8621af76899a50f4d7d586f75e47a7194cf43e93b30d0400ae2dab36b

  • SSDEEP

    6144:9ZiiMGbeHPZKpGtpuW4gvbRuaBqwzGIWEj9O3whKqWeuW4gvbeuaBXVBE56w93we:7/gZpGW4SRuUqwtRwAhWW4SeuUjP

Score
8/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      RMLLauncher (1).exe

    • Size

      507KB

    • MD5

      a1887288be1d739385b74a9b1e4ec776

    • SHA1

      b4f9f7569b4eb9c01a964ea3e7bd58d4c2e3c5a1

    • SHA256

      c1ec9ff1824ba53874ab1cb0f1e64c86ab84cfebc09434e33adaeea065211de1

    • SHA512

      72a74af82bd764521d1c117145640d1e9974190350377e5776acb5797a8d4ab37263c8f8621af76899a50f4d7d586f75e47a7194cf43e93b30d0400ae2dab36b

    • SSDEEP

      6144:9ZiiMGbeHPZKpGtpuW4gvbRuaBqwzGIWEj9O3whKqWeuW4gvbeuaBXVBE56w93we:7/gZpGW4SRuUqwtRwAhWW4SeuUjP

    Score
    8/10
    discoveryevasionpersistence

    • Creates new service(s)

      persistence

    • Downloads MZ/PE file

    • Drops file in Drivers directory

    • Modifies Windows Firewall

      evasion

    • Stops running service(s)

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks