Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    29s
  • max time network
    20s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    01/05/2024, 21:31

General

  • Target

    Rage.exe

  • Size

    956KB

  • MD5

    9330128f60a4bfcedb81c0f2e5b9cefb

  • SHA1

    ec5961ac3ecc979482bf6e122525df2dfa07a8a8

  • SHA256

    be16ffebe2e7b4b3ee274998206c1b31e8947a138d7c19098af2fb93fb8f2b90

  • SHA512

    900aa96592606a59d4a7d2a0cc4a8a0bb0abfc988d9cff785238280a36b8e1c3b0860dace3f69377dda34a62ea4d788ae393f16e7e05b81941e03bb567eeea7a

  • SSDEEP

    24576:sU+9XNrenyktDLdYNtcdvQNC9wHAP5c1gf6Mr:a5OVeyffl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Rage.exe
    "C:\Users\Admin\AppData\Local\Temp\Rage.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:3272
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x3e4
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3272-0-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-1-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-2-0x00000000057C0000-0x00000000057D0000-memory.dmp

    Filesize

    64KB

  • memory/3272-4-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-3-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-5-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-6-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-7-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-8-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-11-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-12-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-13-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-15-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-14-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-16-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-17-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-18-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-19-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-20-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-21-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-23-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-24-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-22-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-25-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-26-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-27-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-28-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-29-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-31-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-30-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-32-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-33-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-34-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-35-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-36-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-37-0x0000000005800000-0x0000000005810000-memory.dmp

    Filesize

    64KB

  • memory/3272-41-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-40-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-39-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-38-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-42-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-43-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-44-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-45-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-46-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-47-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-49-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-48-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-50-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-51-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-52-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-55-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-59-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-56-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-58-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-57-0x0000000005800000-0x0000000005810000-memory.dmp

    Filesize

    64KB

  • memory/3272-53-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-54-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-60-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-61-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-62-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-63-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-64-0x0000000005800000-0x0000000005810000-memory.dmp

    Filesize

    64KB

  • memory/3272-65-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-67-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-69-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-68-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-66-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-70-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB

  • memory/3272-71-0x00000000057B0000-0x00000000057C0000-memory.dmp

    Filesize

    64KB