Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

Raptor-Mul...in.zip

windows7-x64

1

Raptor-Mul...in.zip

windows10-2004-x64

1

Raptor-Mul...ICENSE

windows7-x64

1

Raptor-Mul...ICENSE

windows10-2004-x64

1

Raptor-Mul...er.bat

windows7-x64

1

Raptor-Mul...er.bat

windows10-2004-x64

1

Raptor-Mul...DME.md

windows7-x64

3

Raptor-Mul...DME.md

windows10-2004-x64

3

Raptor-Mul...tor.py

windows7-x64

3

Raptor-Mul...tor.py

windows10-2004-x64

3

Raptor-Mul...er.exe

windows7-x64

1

Raptor-Mul...er.exe

windows10-2004-x64

1

Raptor-Mul...id.txt

windows7-x64

1

Raptor-Mul...id.txt

windows10-2004-x64

1

Raptor-Mul...ls.txt

windows7-x64

1

Raptor-Mul...ls.txt

windows10-2004-x64

1

Raptor-Mul...es.txt

windows7-x64

1

Raptor-Mul...es.txt

windows10-2004-x64

1

Raptor-Mul...ns.txt

windows7-x64

1

Raptor-Mul...ns.txt

windows10-2004-x64

1

Raptor-Mul...nt.txt

windows7-x64

1

Raptor-Mul...nt.txt

windows10-2004-x64

1

Analysis

  • max time kernel
    137s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    11/09/2024, 22:31

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Raptor-Multi-Tool-main/PackageInstaller.bat

  • Size

    285B

  • MD5

    9c2ee579f359da27ded92dbec3e1f5a3

  • SHA1

    e9f8baa1cd011d0088629f5ad7cc6f54da46d302

  • SHA256

    869b059ff9549619c56cdca0d54bf7ba59e2ed04830effb23e047025d20a3ad8

  • SHA512

    38faebab083ef29436bca8c4194e544c5bef7a5b7e9a5b207dd4c05b494a28b6539d9c7659ae9238cab3c9e816163eb29ce84798a8c40e31d4567ea79acffc76

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 4 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c "C:\Users\Admin\AppData\Local\Temp\Raptor-Multi-Tool-main\PackageInstaller.bat"
    1⤵
      PID:2648
    • C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      1⤵
        PID:2148
      • C:\Windows\system32\AUDIODG.EXE
        C:\Windows\system32\AUDIODG.EXE 0x544
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:2036

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads