Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

Riot_Client.exe

windows7-x64

9

Riot_Client.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Riot_Client.exe

  • Size

    6.7MB

  • Sample

    230518-nv7m6she9y

  • MD5

    0f9657a59961a52c08cdac8e54459756

  • SHA1

    c41ad7c7073516650b3f47a439fd8c237092fdce

  • SHA256

    023e1fcd8659fc92f4db9ce75b60ec2ddae9a8b919b74102333212f3baaca19a

  • SHA512

    4f352d3d595925b989302bbd34e00ab3b55732817447703adcd1a7a0fe1816fcad1b255839f9362181271c8d1516ef9a2144843325b56a7c79c64f59987845ca

  • SSDEEP

    196608:E1jd/KJ/1Vj6PNTjoBuwaZU/IEZL8p83:EY1V6PNTjoBuwuU/IEZLD3

Score
9/10
evasion

Malware Config

Targets

    • Target

      Riot_Client.exe

    • Size

      6.7MB

    • MD5

      0f9657a59961a52c08cdac8e54459756

    • SHA1

      c41ad7c7073516650b3f47a439fd8c237092fdce

    • SHA256

      023e1fcd8659fc92f4db9ce75b60ec2ddae9a8b919b74102333212f3baaca19a

    • SHA512

      4f352d3d595925b989302bbd34e00ab3b55732817447703adcd1a7a0fe1816fcad1b255839f9362181271c8d1516ef9a2144843325b56a7c79c64f59987845ca

    • SSDEEP

      196608:E1jd/KJ/1Vj6PNTjoBuwaZU/IEZL8p83:EY1V6PNTjoBuwuU/IEZLD3

    Score
    9/10
    evasion

    • Looks for VirtualBox Guest Additions in registry

      evasion

    • Looks for VMWare Tools registry key

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks