Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

Nezur (1).zip

windows7-x64

1

Nezur (1).zip

windows10-2004-x64

1

Nezur.exe

windows7-x64

1

Nezur.exe

windows10-2004-x64

1

README.txt

windows7-x64

1

README.txt

windows10-2004-x64

1

auto_load.txt

windows7-x64

1

auto_load.txt

windows10-2004-x64

1

configs/autosave.cfg

windows7-x64

3

configs/autosave.cfg

windows10-2004-x64

3

lua51.dll

windows7-x64

3

lua51.dll

windows10-2004-x64

3

start.bat

windows7-x64

6

start.bat

windows10-2004-x64

6

Resubmissions

14/02/2024, 03:14

240214-drczaafe3s 6

13/02/2024, 22:25

240213-2b1bmsbg82 6

Analysis

  • max time kernel
    144s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/02/2024, 22:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    README.txt

  • Size

    928B

  • MD5

    4a696fefeef0bae73a3358e7bba47413

  • SHA1

    da4ba272db35131c93af20d019d10502c80485a5

  • SHA256

    dc45080b1009ad874227ef73d1cadfc8ee13eb9778d49830da102af248b6f067

  • SHA512

    5be178f006d42816b2c5ef237bdc117058d624561318393e4e75ec36e12c2349e8fb8f3c0a9bcefd78891b0cbb4e57a8e27542b79af6af474b40a5a2b1c06382

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\README.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:4996

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads