Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

free_rbx.bat

windows11-21h2-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    free_rbx.bat

  • Size

    668B

  • Sample

    240809-xw1qpavbrk

  • MD5

    c19cbfd860f2c06e984b9f4e9642876d

  • SHA1

    77bbd3c0d8555ef59db1b4905a234e3a67c68b22

  • SHA256

    d604573afb96b556da9f2588c3b13e80a85eb9d5f52cc27d5e4572e612808081

  • SHA512

    fad69d32715ddd8ae705ba006534c5466ba8323234ce752a118f17ddf65843c0090491653059d0000646720a9265ed207c3741ae4ff894f33c0c1e5e3e4e5434

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      free_rbx.bat

    • Size

      668B

    • MD5

      c19cbfd860f2c06e984b9f4e9642876d

    • SHA1

      77bbd3c0d8555ef59db1b4905a234e3a67c68b22

    • SHA256

      d604573afb96b556da9f2588c3b13e80a85eb9d5f52cc27d5e4572e612808081

    • SHA512

      fad69d32715ddd8ae705ba006534c5466ba8323234ce752a118f17ddf65843c0090491653059d0000646720a9265ed207c3741ae4ff894f33c0c1e5e3e4e5434

    Score
    8/10
    discoverypersistence

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Drops startup file

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks