Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

Rune Launcher.bat

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Rune Launcher.bat

  • Size

    12.5MB

  • Sample

    231112-zvs1kacd25

  • MD5

    7bc400c287e863d093e099a2a3d86d0a

  • SHA1

    0c53d559fa4f3e58241f67986fe7c0d342671e20

  • SHA256

    420fb1238dd57cc2166770c49d1577eedc64ace3c130e5b10871b2e9b71f4c04

  • SHA512

    f028e1b6fff4b0ef0711f94e7fe0a0ba4a55e7ba4028a13db38ea2c1680510dfa7219d43231c8c2d9c53b6fd879f53f391170415717093a6b554912a326b08dc

  • SSDEEP

    49152:uTP+Ip2MMykXMHOh7Ufks1muCwKWPM7J6QlHiVH7BRDS83Tm+fn907TA1HimUEQf:r

Score
10/10

Malware Config

Targets

    • Target

      Rune Launcher.bat

    • Size

      12.5MB

    • MD5

      7bc400c287e863d093e099a2a3d86d0a

    • SHA1

      0c53d559fa4f3e58241f67986fe7c0d342671e20

    • SHA256

      420fb1238dd57cc2166770c49d1577eedc64ace3c130e5b10871b2e9b71f4c04

    • SHA512

      f028e1b6fff4b0ef0711f94e7fe0a0ba4a55e7ba4028a13db38ea2c1680510dfa7219d43231c8c2d9c53b6fd879f53f391170415717093a6b554912a326b08dc

    • SSDEEP

      49152:uTP+Ip2MMykXMHOh7Ufks1muCwKWPM7J6QlHiVH7BRDS83Tm+fn907TA1HimUEQf:r

    Score
    10/10

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks