Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
https://github.com/XPower7125/memz/archive/refs/heads/main.zip
-
Sample
230628-tsrf3abc5s
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://github.com/XPower7125/memz/archive/refs/heads/main.zip
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
https://github.com/XPower7125/memz/archive/refs/heads/main.zip
Resource
win10v2004-20230621-en
Behavioral task
behavioral3
Sample
https://github.com/XPower7125/memz/archive/refs/heads/main.zip
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral4
Sample
https://github.com/XPower7125/memz/archive/refs/heads/main.zip
Resource
android-x64-20230621-en
Behavioral task
behavioral5
Sample
https://github.com/XPower7125/memz/archive/refs/heads/main.zip
Resource
android-x64-arm64-20230621-en
Malware Config
Targets
-
-
Target
https://github.com/XPower7125/memz/archive/refs/heads/main.zip
Score9/10-
Renames multiple (62) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Drops desktop.ini file(s)
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Removes a system notification.
-