Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
3Static
static
1com.termux...gz.tar
windows7-x64
3com.termux...gz.tar
windows10-2004-x64
3com.termux...config
windows7-x64
3com.termux...config
windows10-2004-x64
3com.termux...ibutes
windows7-x64
3com.termux...ibutes
windows10-2004-x64
3com.termux...NG.yml
windows7-x64
3com.termux...NG.yml
windows10-2004-x64
3com.termux...rt.yml
windows7-x64
3com.termux...rt.yml
windows10-2004-x64
3com.termux...st.yml
windows7-x64
3com.termux...st.yml
windows10-2004-x64
3com.termux...ig.yml
windows7-x64
3com.termux...ig.yml
windows10-2004-x64
3com.termux...se.yml
windows7-x64
3com.termux...se.yml
windows10-2004-x64
3com.termux...ld.yml
windows7-x64
3com.termux...ld.yml
windows10-2004-x64
3com.termux...on.yml
windows7-x64
3com.termux...on.yml
windows10-2004-x64
3com.termux...ts.yml
windows7-x64
3com.termux...ts.yml
windows10-2004-x64
3com.termux...ck.yml
windows7-x64
3com.termux...ck.yml
windows10-2004-x64
3com.termux...ignore
windows7-x64
3com.termux...ignore
windows10-2004-x64
3com.termux...NSE.md
windows7-x64
3com.termux...NSE.md
windows10-2004-x64
3com.termux...DME.md
windows7-x64
3com.termux...DME.md
windows10-2004-x64
3com.termux...2.json
windows7-x64
3com.termux...2.json
windows10-2004-x64
3Analysis
-
max time kernel
1155s -
max time network
1163s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
02/08/2023, 04:00
Static task
static1
Behavioral task
behavioral1
Sample
com.termux_118_src.tar.gz.tar
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
com.termux_118_src.tar.gz.tar
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
com.termux_118_src.tar.gz/.editorconfig
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
com.termux_118_src.tar.gz/.editorconfig
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
com.termux_118_src.tar.gz/.gitattributes
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
com.termux_118_src.tar.gz/.gitattributes
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
com.termux_118_src.tar.gz/.github/FUNDING.yml
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
com.termux_118_src.tar.gz/.github/FUNDING.yml
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
com.termux_118_src.tar.gz/.github/ISSUE_TEMPLATE/01-bug-report.yml
Resource
win7-20230712-en
Behavioral task
behavioral10
Sample
com.termux_118_src.tar.gz/.github/ISSUE_TEMPLATE/01-bug-report.yml
Resource
win10v2004-20230703-en
Behavioral task
behavioral11
Sample
com.termux_118_src.tar.gz/.github/ISSUE_TEMPLATE/02-feature-request.yml
Resource
win7-20230712-en
Behavioral task
behavioral12
Sample
com.termux_118_src.tar.gz/.github/ISSUE_TEMPLATE/02-feature-request.yml
Resource
win10v2004-20230703-en
Behavioral task
behavioral13
Sample
com.termux_118_src.tar.gz/.github/ISSUE_TEMPLATE/config.yml
Resource
win7-20230712-en
Behavioral task
behavioral14
Sample
com.termux_118_src.tar.gz/.github/ISSUE_TEMPLATE/config.yml
Resource
win10v2004-20230703-en
Behavioral task
behavioral15
Sample
com.termux_118_src.tar.gz/.github/workflows/attach_debug_apks_to_release.yml
Resource
win7-20230712-en
Behavioral task
behavioral16
Sample
com.termux_118_src.tar.gz/.github/workflows/attach_debug_apks_to_release.yml
Resource
win10v2004-20230703-en
Behavioral task
behavioral17
Sample
com.termux_118_src.tar.gz/.github/workflows/debug_build.yml
Resource
win7-20230712-en
Behavioral task
behavioral18
Sample
com.termux_118_src.tar.gz/.github/workflows/debug_build.yml
Resource
win10v2004-20230703-en
Behavioral task
behavioral19
Sample
com.termux_118_src.tar.gz/.github/workflows/gradle-wrapper-validation.yml
Resource
win7-20230712-en
Behavioral task
behavioral20
Sample
com.termux_118_src.tar.gz/.github/workflows/gradle-wrapper-validation.yml
Resource
win10v2004-20230703-en
Behavioral task
behavioral21
Sample
com.termux_118_src.tar.gz/.github/workflows/run_tests.yml
Resource
win7-20230712-en
Behavioral task
behavioral22
Sample
com.termux_118_src.tar.gz/.github/workflows/run_tests.yml
Resource
win10v2004-20230703-en
Behavioral task
behavioral23
Sample
com.termux_118_src.tar.gz/.github/workflows/trigger_library_builds_on_jitpack.yml
Resource
win7-20230712-en
Behavioral task
behavioral24
Sample
com.termux_118_src.tar.gz/.github/workflows/trigger_library_builds_on_jitpack.yml
Resource
win10v2004-20230703-en
Behavioral task
behavioral25
Sample
com.termux_118_src.tar.gz/.gitignore
Resource
win7-20230712-en
Behavioral task
behavioral26
Sample
com.termux_118_src.tar.gz/.gitignore
Resource
win10v2004-20230703-en
Behavioral task
behavioral27
Sample
com.termux_118_src.tar.gz/LICENSE.md
Resource
win7-20230712-en
Behavioral task
behavioral28
Sample
com.termux_118_src.tar.gz/LICENSE.md
Resource
win10v2004-20230703-en
Behavioral task
behavioral29
Sample
com.termux_118_src.tar.gz/README.md
Resource
win7-20230712-en
Behavioral task
behavioral30
Sample
com.termux_118_src.tar.gz/README.md
Resource
win10v2004-20230703-en
Behavioral task
behavioral31
Sample
com.termux_118_src.tar.gz/app/.cxx/abi_configuration_15p1x572.json
Resource
win7-20230712-en
Behavioral task
behavioral32
Sample
com.termux_118_src.tar.gz/app/.cxx/abi_configuration_15p1x572.json
Resource
win10v2004-20230703-en
General
-
Target
com.termux_118_src.tar.gz/.github/FUNDING.yml
-
Size
51B
-
MD5
3ce4cc0bbd9ae9dc31b6c10c9439862b
-
SHA1
f73aa5a56b9ab2b909718a42be6198e2381b72aa
-
SHA256
a61831870ec9134f6dc387ad423499eef34386c35aa586ae78d6f37e50ae4bb1
-
SHA512
b40f9b5bd6f6baf410695a4f963e60c74df79b6a8d1c9cc657e56ff748766281906cbfc5862faceeaaf570b6200af01abddcad97d82c7f668772440108411372
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3011986978-2180659500-3669311805-1000_Classes\Local Settings OpenWith.exe Key created \REGISTRY\USER\S-1-5-21-3011986978-2180659500-3669311805-1000_Classes\Local Settings cmd.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4232 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\com.termux_118_src.tar.gz\.github\FUNDING.yml1⤵
- Modifies registry class
PID:1816
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4232