Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
514s -
max time network
1608s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
12/10/2024, 11:53
General
-
Target
tool/rap2rifkey.exe
-
Size
114KB
-
MD5
00ef4e5405d3e9e4d727b0eb4b72ceda
-
SHA1
4e857906dc7bb927f30259e74f1cad671d13f9ea
-
SHA256
0de7d23d602970e96f33856c500fe1de0a8c9f85228a787439a61271b8be09df
-
SHA512
44ab62192d9fb49eee7a09849b7dd8aa2eb29d2744da05735cd1c0c10dbf0be9a3e7fdd7fd3e3b701ee264fb70fb7730ccef949f72ce2c17b55f8ffe127889f2
-
SSDEEP
3072:3uL2x6A9aoPOnAIjMdyV5JRTH6jTxsEmt4C+b4yN:3uL2lgnAIjMu6CiN
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\tool\rap2rifkey.exe"C:\Users\Admin\AppData\Local\Temp\tool\rap2rifkey.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.5MB
-
Filesize
136KB
-
Filesize
4.5MB