Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

rauoya.exe

windows7-x64

10

rauoya.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    rauoya.exe

  • Size

    56KB

  • Sample

    240903-pyay2syanb

  • MD5

    fcebd0a5c2a5b2cef46d4a79ae744a2c

  • SHA1

    fea86e8604a35f0cc57cddc78b9fab7118d11045

  • SHA256

    82dc4786dd9bbb6021a3d1e53819e21ffb2563e79d82e39ee75d57d39f4cd5cc

  • SHA512

    9b7def904b15ecc0f6d53f18e382a458efac403e7fa3c48602fd5bd2c6694184e70398cca8127472b611f8c3c5723de2bae4972b6b817e63cc028604f8e79b1a

  • SSDEEP

    768:BFHdPxexY2oeDf0mq/6/Q/9NF0+LEc8af3ts0E99:Ble4cq2oS+Ljb3ts0E99

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      rauoya.exe

    • Size

      56KB

    • MD5

      fcebd0a5c2a5b2cef46d4a79ae744a2c

    • SHA1

      fea86e8604a35f0cc57cddc78b9fab7118d11045

    • SHA256

      82dc4786dd9bbb6021a3d1e53819e21ffb2563e79d82e39ee75d57d39f4cd5cc

    • SHA512

      9b7def904b15ecc0f6d53f18e382a458efac403e7fa3c48602fd5bd2c6694184e70398cca8127472b611f8c3c5723de2bae4972b6b817e63cc028604f8e79b1a

    • SSDEEP

      768:BFHdPxexY2oeDf0mq/6/Q/9NF0+LEc8af3ts0E99:Ble4cq2oS+Ljb3ts0E99

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks