Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

BoRat Rat.7z

windows10-1703-x64

3

BoratRat_Cracked.exe

windows10-1703-x64

BoratRat_C...xe.xml

windows10-1703-x64

1

bin/Audio.dll

windows10-1703-x64

1

bin/Discord.dll

windows10-1703-x64

1

bin/Extra.dll

windows10-1703-x64

1

bin/FileManager.dll

windows10-1703-x64

1

bin/FileSearcher.dll

windows10-1703-x64

1

bin/Fun.dll

windows10-1703-x64

1

bin/Information.dll

windows10-1703-x64

1

bin/Keylogger.exe

windows10-1703-x64

1

bin/Logger.dll

windows10-1703-x64

1

bin/Messag...ib.dll

windows10-1703-x64

1

bin/Miscellaneous.dll

windows10-1703-x64

1

bin/Netstat.dll

windows10-1703-x64

1

bin/Options.dll

windows10-1703-x64

1

bin/Proces...er.dll

windows10-1703-x64

1

bin/Ransomware.dll

windows10-1703-x64

1

bin/Recovery.dll

windows10-1703-x64

1

bin/Regedit.dll

windows10-1703-x64

1

bin/RemoteCamera.dll

windows10-1703-x64

1

bin/RemoteDesktop.dll

windows10-1703-x64

1

bin/ReverseProxy.dll

windows10-1703-x64

1

bin/SendFile.dll

windows10-1703-x64

1

bin/SendMemory.dll

windows10-1703-x64

1

bin/ip2region.db

windows10-1703-x64

3

Analysis

  • max time kernel
    193s
  • max time network
    299s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    13/07/2024, 08:14

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bin/ReverseProxy.dll

  • Size

    14KB

  • MD5

    e89a0b897f93d7d5cb433b3fd01764c9

  • SHA1

    9e72e85d13fe70c2518041e30d202f04b14324b6

  • SHA256

    d8a115310142f2e874dc7ea2a393fada679838bddb87f4cfd9aaef631641cb72

  • SHA512

    1ba55b4546cf4e1df9f0f48c7cc2ba55dcc1a6eb837f0678e77f88f37e1e6d3a17d5292cefdb4a063ae5bf31bc3757b07fce790123639d1c8686187dcc664468

  • SSDEEP

    192:CbBTOv+EgIRtac3iIs8YviqeOLUVw1z4ra2ZHouB/By0t/WJIGWr69PuCb:gIvpAcJOLUqFkP/By0Rx69P3b

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\bin\ReverseProxy.dll,#1
    1⤵
      PID:2924

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads