Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
3Static
static
3Release no...ral.js
windows7-x64
1Release no...ral.js
windows10-2004-x64
1Release no...ex.vbs
windows7-x64
1Release no...ex.vbs
windows10-2004-x64
1Release no...x.html
windows7-x64
1Release no...x.html
windows10-2004-x64
1Release no...pt.exe
windows7-x64
1Release no...pt.exe
windows10-2004-x64
1Analysis
-
max time kernel
142s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
11/05/2023, 16:20
Static task
static1
Behavioral task
behavioral1
Sample
Release no_cpp/Code/general.js
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Release no_cpp/Code/general.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
Release no_cpp/Code/reptilex.vbs
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Release no_cpp/Code/reptilex.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
Release no_cpp/Reptilex.html
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
Release no_cpp/Reptilex.html
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
Release no_cpp/encrypt.exe
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
Release no_cpp/encrypt.exe
Resource
win10v2004-20230220-en
General
-
Target
Release no_cpp/encrypt.exe
-
Size
52KB
-
MD5
7d400a514eebececabc78541fe5cb5e4
-
SHA1
3831b4dd3259ac482d6776c0e22f2fd6c31c8b92
-
SHA256
a0893cfd654623203704514820c48936adbad05ef8ebeafa05a574444580de85
-
SHA512
cb98dd332a842e234fda73b945cd50c9bec1f365541056591ad30a9bb5aebafdd6e85d97e420c6bc57e6564189915f97edd442be3135a0141cfd92929622f06b
-
SSDEEP
768:tG1A+6jAfJWRTZMouj8Poq2DqqqqwkLD3UxmEKX:w1AncfJ8Poq2DqqqqymEw
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3880 encrypt.exe 3880 encrypt.exe