Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

explorer.exe

windows7-x64

10

explorer.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    explorer.exe

  • Size

    133KB

  • Sample

    231012-qj7j5sbe6x

  • MD5

    6d78acbcbb8d77547e8956bdd6b19e0e

  • SHA1

    ff5baeccc5b4fe4ebbbe6b156ff20ba1e794627c

  • SHA256

    bff2704e9379a61eae54b65d1f815dacf0ceae99f140a1eafcc94b020abbf9a3

  • SHA512

    0903e02f7d0b964d66bfecde0763a7d604b256c84d7fed04e675366953a6f81b5b8fd9ac47538baf6e5df90a2f3f178d7ff1cfab41c22cc896b42f3bbf607118

  • SSDEEP

    3072:l5CdDQ+OvxqeJ333N7PabPucUSakfu3cbbH0hLNi:XYOoevCbPXUrkfu3kUT

Score
10/10
revengeratpersistencestealertrojan

Malware Config

Targets

    • Target

      explorer.exe

    • Size

      133KB

    • MD5

      6d78acbcbb8d77547e8956bdd6b19e0e

    • SHA1

      ff5baeccc5b4fe4ebbbe6b156ff20ba1e794627c

    • SHA256

      bff2704e9379a61eae54b65d1f815dacf0ceae99f140a1eafcc94b020abbf9a3

    • SHA512

      0903e02f7d0b964d66bfecde0763a7d604b256c84d7fed04e675366953a6f81b5b8fd9ac47538baf6e5df90a2f3f178d7ff1cfab41c22cc896b42f3bbf607118

    • SSDEEP

      3072:l5CdDQ+OvxqeJ333N7PabPucUSakfu3cbbH0hLNi:XYOoevCbPXUrkfu3kUT

    Score
    10/10
    revengeratpersistencestealertrojan

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • RevengeRat Executable

      stealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks