Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

RLOrbital....ry.exe

windows10-2004-x64

7

RLOrbital....al.exe

windows10-2004-x64

1

RLOrbital....al.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RLOrbital.V1.1.0.rar

  • Size

    8.0MB

  • Sample

    240821-ns37zazemq

  • MD5

    56d4344b7bb1d8c2eb39843e1435cac4

  • SHA1

    d5786813ca127054fdcc77a54cc379e4f22d5f1c

  • SHA256

    e88ad95edb4f66df40c264f717114ae535c3d7eb7a9abf96c48ee01a8333081b

  • SHA512

    7d6c56ae9ee094a3ada63f9ba04495fc00da372b6c566314d3d3eea966162c5920985829219292d28e84171b2483cc298b2a3f104ec0195bdb81706a38e9521c

  • SSDEEP

    196608:YXXCrBGUlk2aHNZ6Rh+JVXvOaVua8wrw7rO1+cXw20sW5c7v4cr:kyrBGUlRh+JVXGaVH8WBrg2R6cbz

Score
7/10
pyinstaller

Malware Config

Targets

    • Target

      RLOrbital.V1.1.0/Legendary.exe

    • Size

      8.1MB

    • MD5

      756371a5e646e52ec556fe5c869c5558

    • SHA1

      11c5a92bc2dc56a07c807c7bca788ba3bc04936a

    • SHA256

      01ea22ea51749f46a0019657f64fc0d34429fb7cbf9b590c0848c0e0bd9c1f07

    • SHA512

      f74f1b4e91fdbfa6f2a899158c6efffd85181f578f5b46f9b1e07497a9ca990accc5f27e3320e864aad2f003f74804facb78adf3b310fa38da0efbbef8d4617b

    • SSDEEP

      196608:b5QaoaQQgSfeaICteEroXx7IP0oTcMsABqb6delGEwVS6g3u:9QaoaQQReaInEroXOMogFABqbwe4fVSu

    Score
    7/10

    • Loads dropped DLL

    behavioral1

    • Target

      RLOrbital.V1.1.0/RLOrbital.dll

    • Size

      33KB

    • MD5

      1f750ef871e9cebca71e5b63443d5d5b

    • SHA1

      2dc6efb0fb27f085ab774137336dcacfac095a3c

    • SHA256

      26bec29c9abcc4c11b6e899a3daafc121f5a6b9ef55eee74612e982fdb3db55e

    • SHA512

      e053513678731c7c472f29f1520a715adefa96234b65038af835d8e34b4bd4d06aa74a596d8c880dedcfc384cfd5b102b36eb3d82f62d22c63283b78c462ec45

    • SSDEEP

      384:UllN4umJklY89etN8EfjU6VINPCEXlfNCrISxDR0AFayuXdubqFBTCx8D5Uvddft:U6ufJ9h6S59AFaLEb0MRx

    Score
    1/10
    behavioral2

    • Target

      RLOrbital.V1.1.0/RLOrbital.exe

    • Size

      139KB

    • MD5

      7ed11dfb26a1b361051a1def982859fa

    • SHA1

      cad0800f823d866cdd1a6d48594d263a85dc349c

    • SHA256

      6d3f700bfce77e82e8d2ad9f6851772cb28a46c3a452d161246bf5772ad76629

    • SHA512

      8cd6621824b38676660ccc4059e46e6bafe1277b802d31bf2640f3b0e0e46df6ef144294344e85b7e61136a4583ad673907a81fa63161821c25b03b421c17d19

    • SSDEEP

      3072:CiS4omp03WQthI/9S3BZi08iRQ1G78IVn28bSQcJL8ltL:CiS4ompB9S3BZi0a1G78IVjcVct

    Score
    6/10

    • Legitimate hosting services abused for malware hosting/C2

    behavioral3

MITRE ATT&CK Enterprise v15

Tasks