Overview
overview
8Static
static
1rage newest.rar
windows10-2004-x64
1rage newest.rar
windows11-ltsc_2024-x64
1rage/depen...pe.obj
windows10-2004-x64
7rage/depen...pe.obj
windows11-ltsc_2024-x64
8rage/depen...11.obj
windows10-2004-x64
7rage/depen...11.obj
windows11-ltsc_2024-x64
3rage/depen...32.obj
windows10-2004-x64
7rage/depen...32.obj
windows11-ltsc_2024-x64
3rage/depen...es.obj
windows10-2004-x64
7rage/depen...es.obj
windows11-ltsc_2024-x64
3rage/depen...ts.obj
windows10-2004-x64
3rage/depen...ts.obj
windows11-ltsc_2024-x64
3rage/depen...in.obj
windows10-2004-x64
7rage/depen...in.obj
windows11-ltsc_2024-x64
3rage/depen...te.obj
windows10-2004-x64
7rage/depen...te.obj
windows11-ltsc_2024-x64
3rage/depen...le.obj
windows10-2004-x64
7rage/depen...le.obj
windows11-ltsc_2024-x64
3rage/depen...43.pdb
windows10-2004-x64
3rage/depen...43.pdb
windows11-ltsc_2024-x64
3rage/depen...al.log
windows10-2004-x64
1rage/depen...al.log
windows11-ltsc_2024-x64
1rage/depen...ts.obj
windows10-2004-x64
7rage/depen...ts.obj
windows11-ltsc_2024-x64
3rage/depen...ns.hpp
windows10-2004-x64
3rage/depen...ns.hpp
windows11-ltsc_2024-x64
3rage/depen...nfig.h
windows10-2004-x64
3rage/depen...nfig.h
windows11-ltsc_2024-x64
3rage/depen...ader.h
windows10-2004-x64
3rage/depen...ader.h
windows11-ltsc_2024-x64
3rage/depen...dule.h
windows10-2004-x64
3rage/depen...dule.h
windows11-ltsc_2024-x64
3Analysis
- user interaction
yes - max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
29/06/2026, 04:27
Static task
static1
Behavioral task
behavioral1
Sample
rage newest.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
rage newest.rar
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
rage/dependenices/imgui/slate/x64/Release/imgui_freetype.obj
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
rage/dependenices/imgui/slate/x64/Release/imgui_freetype.obj
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral5
Sample
rage/dependenices/imgui/slate/x64/Release/imgui_impl_dx11.obj
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
rage/dependenices/imgui/slate/x64/Release/imgui_impl_dx11.obj
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral7
Sample
rage/dependenices/imgui/slate/x64/Release/imgui_impl_win32.obj
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
rage/dependenices/imgui/slate/x64/Release/imgui_impl_win32.obj
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral9
Sample
rage/dependenices/imgui/slate/x64/Release/imgui_tables.obj
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
rage/dependenices/imgui/slate/x64/Release/imgui_tables.obj
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral11
Sample
rage/dependenices/imgui/slate/x64/Release/imgui_widgets.obj
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
rage/dependenices/imgui/slate/x64/Release/imgui_widgets.obj
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral13
Sample
rage/dependenices/imgui/slate/x64/Release/main.obj
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
rage/dependenices/imgui/slate/x64/Release/main.obj
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral15
Sample
rage/dependenices/imgui/slate/x64/Release/slate.obj
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
rage/dependenices/imgui/slate/x64/Release/slate.obj
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral17
Sample
rage/dependenices/imgui/slate/x64/Release/style.obj
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
rage/dependenices/imgui/slate/x64/Release/style.obj
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral19
Sample
rage/dependenices/imgui/slate/x64/Release/vc143.pdb
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
rage/dependenices/imgui/slate/x64/Release/vc143.pdb
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral21
Sample
rage/dependenices/imgui/slate/x64/Release/vcpkg.applocal.log
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
rage/dependenices/imgui/slate/x64/Release/vcpkg.applocal.log
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral23
Sample
rage/dependenices/imgui/slate/x64/Release/widgets.obj
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
rage/dependenices/imgui/slate/x64/Release/widgets.obj
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral25
Sample
rage/dependenices/imgui/thirdparty/include/animations.hpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
rage/dependenices/imgui/thirdparty/include/animations.hpp
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral27
Sample
rage/dependenices/imgui/thirdparty/include/freetype/config/ftconfig.h
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
rage/dependenices/imgui/thirdparty/include/freetype/config/ftconfig.h
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral29
Sample
rage/dependenices/imgui/thirdparty/include/freetype/config/ftheader.h
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
rage/dependenices/imgui/thirdparty/include/freetype/config/ftheader.h
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral31
Sample
rage/dependenices/imgui/thirdparty/include/freetype/config/ftmodule.h
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
rage/dependenices/imgui/thirdparty/include/freetype/config/ftmodule.h
Resource
win11ltsc2024-20260618-en
General
- Target rage newest.rar
- Size 15.0MB
- Sample260629-e23hcscz91
- SHA256 7589676c8c31f9b79278c2f164ad77b270e883fc52dacd14add1449d4a0a7f09
- MD5 7ba1ce0358c9618d2620942cebbbf908
- SHA1 89f662c6fcb98ef8ffd75518a30a3ce42178fe62
- SHA512 4e6f9a1442da9c97cfd3a99bd8f165be97b4385f5457fac5b8193b1b6514c692785a6bae5afdc1a85cc2c274040fe18857d29cdf09e8225080e45a7765290ac0
- SSDEEP 393216:5galo7AKHTtNKG9R16PcJaEXp7+CFneIXHvyKIS:5gaa7ttNh9G+pK8PyKIS
- TLSH T1AAF633A03A14F863CCD9A9C66632C661080D742CB76DD52057B26CBFE0EF55424FBF6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 4 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings OpenWith.exe Key created \REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings OpenWith.exe Key created \REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings 7zFM.exe Key created \REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings OpenWith.exe - Suspicious behavior: GetForegroundWindowSpam 2 IoCs
pid Process 3412 7zFM.exe 4084 OpenWith.exe - Suspicious use of AdjustPrivilegeToken 6 IoCs
description pid Process Token: SeRestorePrivilege 3412 7zFM.exe Token: 35 3412 7zFM.exe Token: SeSecurityPrivilege 3412 7zFM.exe Token: SeSecurityPrivilege 3412 7zFM.exe Token: SeSecurityPrivilege 3412 7zFM.exe Token: SeSecurityPrivilege 3412 7zFM.exe - Suspicious use of FindShellTrayWindow 7 IoCs
pid Process 3412 7zFM.exe 3412 7zFM.exe 3412 7zFM.exe 3412 7zFM.exe 3412 7zFM.exe 3412 7zFM.exe 3412 7zFM.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2140 OpenWith.exe 4768 OpenWith.exe 4084 OpenWith.exe
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\rage newest.rar"1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:3412
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2140
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4768
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4084
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\rage.slnx
- Size 206B
- SHA256 23093f7f2c792dcebdb8f09421332fdd27872b93e0d774fa301cac3ae7e06847
- MD5 f6757abd73d08aa7f5b79a5b24f9a829
- SHA1 c31f32fef4d1aef4e378ae32772fb59d7dc09ce4
- SHA512 76c3d6d517e35474b3cfb11165d53ddd0a8e8a7f4c0b6ec86b0c7c359edc458278971e81524e1e4bccb70f97e040513bc05a57b591a549679e3ed9a4b21787a4
- TLSH T1E4D012A2A8A48E6166774723B8C20D1CFD31C292C81E9A2DF49D732B36AE4294143137
- MD5 SHA1 SHA512 TLSH