Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
135s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
12/10/2023, 13:18
General
-
Target
explorer.exe
-
Size
133KB
-
MD5
6d78acbcbb8d77547e8956bdd6b19e0e
-
SHA1
ff5baeccc5b4fe4ebbbe6b156ff20ba1e794627c
-
SHA256
bff2704e9379a61eae54b65d1f815dacf0ceae99f140a1eafcc94b020abbf9a3
-
SHA512
0903e02f7d0b964d66bfecde0763a7d604b256c84d7fed04e675366953a6f81b5b8fd9ac47538baf6e5df90a2f3f178d7ff1cfab41c22cc896b42f3bbf607118
-
SSDEEP
3072:l5CdDQ+OvxqeJ333N7PabPucUSakfu3cbbH0hLNi:XYOoevCbPXUrkfu3kUT
Score
10/10
Malware Config
Signatures
-
RevengeRAT
Remote-access trojan with a wide range of capabilities.
-
RevengeRat Executable 1 IoCs
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\explorer.exe"C:\Users\Admin\AppData\Local\Temp\explorer.exe"1⤵
- Adds Run key to start application
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
160KB
-
Filesize
512KB
-
Filesize
9.9MB
-
Filesize
56KB
-
Filesize
48KB
-
Filesize
9.9MB
-
Filesize
512KB