Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
22/08/2023, 02:18
230822-crmytabb7y 822/08/2023, 02:17
230822-cqynxshe49 1022/08/2023, 02:12
230822-cm1n4sbb5t 8Analysis
-
max time kernel
142s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
22/08/2023, 02:18
Static task
static1
Behavioral task
behavioral1
Sample
v4cracked.zip
Resource
win10v2004-20230703-en
Behavioral task
behavioral2
Sample
v4cracked/patcher.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
v4cracked/readme.txt
Resource
win10v2004-20230703-en
Behavioral task
behavioral4
Sample
v4cracked/v4cracked by trigga8694.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
loader-o.pyc
Resource
win10v2004-20230703-en
General
-
Target
v4cracked/readme.txt
-
Size
171B
-
MD5
94fb82926a0bc6c56951bee0df57cfd2
-
SHA1
cee1c2aacdb87bfd464e05383c1dd3c772ecfe09
-
SHA256
2a1ba637510b210e588b155e4b12b1c1cb91aa0e2bba279aebd8949204f519bb
-
SHA512
c72769624f0093622b3a737ccaa4209922da41a9bdb063773abe0907ba7ec98bf1c818bb9892fb87841846a7b008d9981ee395f2e4fb3c52f20fb0c45827ff6e
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 740 NOTEPAD.EXE