Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

BoRat Rat.7z

windows10-1703-x64

3

BoratRat_Cracked.exe

windows10-1703-x64

BoratRat_C...xe.xml

windows10-1703-x64

1

bin/Audio.dll

windows10-1703-x64

1

bin/Discord.dll

windows10-1703-x64

1

bin/Extra.dll

windows10-1703-x64

1

bin/FileManager.dll

windows10-1703-x64

1

bin/FileSearcher.dll

windows10-1703-x64

1

bin/Fun.dll

windows10-1703-x64

1

bin/Information.dll

windows10-1703-x64

1

bin/Keylogger.exe

windows10-1703-x64

1

bin/Logger.dll

windows10-1703-x64

1

bin/Messag...ib.dll

windows10-1703-x64

1

bin/Miscellaneous.dll

windows10-1703-x64

1

bin/Netstat.dll

windows10-1703-x64

1

bin/Options.dll

windows10-1703-x64

1

bin/Proces...er.dll

windows10-1703-x64

1

bin/Ransomware.dll

windows10-1703-x64

1

bin/Recovery.dll

windows10-1703-x64

1

bin/Regedit.dll

windows10-1703-x64

1

bin/RemoteCamera.dll

windows10-1703-x64

1

bin/RemoteDesktop.dll

windows10-1703-x64

1

bin/ReverseProxy.dll

windows10-1703-x64

1

bin/SendFile.dll

windows10-1703-x64

1

bin/SendMemory.dll

windows10-1703-x64

1

bin/ip2region.db

windows10-1703-x64

3

Analysis

  • max time kernel
    194s
  • max time network
    260s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    13/07/2024, 08:14

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bin/Recovery.dll

  • Size

    1.3MB

  • MD5

    ea1ff113b847312d57fa8621f71f460f

  • SHA1

    535a4e525da7e98f4f4f69abc923a1065bd2d3fa

  • SHA256

    58f9e3c90446dfecfec64221eb11167dd41d0e8dedda2ea9f83d9dda2890e6f3

  • SHA512

    1f62a6e83d34ce9445430e756c1aaa6ddabe509c8e5e639145e4bbee8d2ee4ce860cb10571abb538fecefda3ac739b3dc17306d123a1b287f365ea0d5752b542

  • SSDEEP

    24576:ObiHpeKuuOcI8FeZ1H9StDW+gmGIX4exFZJdjT:ObiHAG9cgymGIX4elj

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\bin\Recovery.dll,#1
    1⤵
      PID:3580

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads