Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

eclipse.zip

windows10-2004-x64

1

colors/Ars...en.txt

windows10-2004-x64

1

colors/Ars...nk.txt

windows10-2004-x64

1

colors/Ars...le.txt

windows10-2004-x64

1

colors/Ars...ow.txt

windows10-2004-x64

1

colors/Blu...al.txt

windows10-2004-x64

1

colors/Cou...ox.txt

windows10-2004-x64

1

colors/Da ...ay.txt

windows10-2004-x64

1

colors/Da ...ag.txt

windows10-2004-x64

1

colors/DaDuels.txt

windows10-2004-x64

1

colors/HSV...ag.txt

windows10-2004-x64

1

colors/Nam...V2.txt

windows10-2004-x64

1

colors/Pis...ot.txt

windows10-2004-x64

1

colors/Pix...le.txt

windows10-2004-x64

1

colors/Reflex.txt

windows10-2004-x64

1

colors/Uni...V2.txt

windows10-2004-x64

1

colors/da ...el.txt

windows10-2004-x64

1

colors/no ...ng.txt

windows10-2004-x64

1

colors/strucid v2.txt

windows10-2004-x64

1

colors/strucid.txt

windows10-2004-x64

1

colors/test.txt

windows10-2004-x64

1

main.exe

windows10-2004-x64

7

main.pyc

windows10-2004-x64

3

settings/ReadMe.txt

windows10-2004-x64

1

settings/Settings.txt

windows10-2004-x64

1

settings/i...et.png

windows10-2004-x64

3

settings/i...ma.png

windows10-2004-x64

3

storage/Font.otf

windows10-2004-x64

7

storage/Watermark.otf

windows10-2004-x64

7

storage/Wa...on.png

windows10-2004-x64

3

storage/th...nd.png

windows10-2004-x64

3

Analysis

  • max time kernel
    133s
  • max time network
    162s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/02/2024, 03:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    colors/Reflex.txt

  • Size

    40B

  • MD5

    d0aee06dfed045ade87f2b5c11ec4885

  • SHA1

    dac7d5a25555f1376b4b93a470bf4553b117475e

  • SHA256

    5fc0147c7569a032a042041c475b56919a1871cd6d8ac807af7f20adbb16dfb9

  • SHA512

    a8983f753003e66438b85c30af0cb4bd1259f66bb73202f193a576d5255fdb9d1c6d5f0bc0d8c238f12fa076eed37d57cb3c4d95ee3d9d69304b97fdb59b3edb

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\colors\Reflex.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:4252

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads