Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
132s -
max time network
137s -
platform
windows10-1703_x64 -
resource
win10-20240221-en -
resource tags
-
submitted
26/02/2024, 07:18 UTC
General
-
Target
Ransomware-Samples-main/Rex/Ransomware.Rex.zip
-
Size
2.7MB
-
MD5
50188823168525455c273c07d8457b87
-
SHA1
0d549631690ea297c25b2a4e133cacb8a87b97c6
-
SHA256
32856e998ff1a8b89e30c9658721595d403ff0eece70dc803a36d1939e429f8d
-
SHA512
b1a58ebcc48142fa4f79c600ea70921f883f2f23185a3a60059cb2238ed1a06049e701ccdab6e4ea0662d2d98a73f477f791aa1eec1e046b74dc1ce0a9680f70
-
SSDEEP
49152:vWKde2aWpNtWWKPqd0c1OWfD6vAcxntjWPNeJ5Rf/coFN0LZkyIEsNdd:eKI2FpNtfaqGc1EAczjk41EuN0LZky9y
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Ransomware-Samples-main\Rex\Ransomware.Rex.zip1⤵
Network
-
DNS19.229.111.52.in-addr.arpaRemote address:8.8.8.8:53Request19.229.111.52.in-addr.arpaIN PTRResponse -
DNS26.178.89.13.in-addr.arpaRemote address:8.8.8.8:53Request26.178.89.13.in-addr.arpaIN PTRResponse
No results found
-
8.8.8.8:5319.229.111.52.in-addr.arpadns
DNS Request
19.229.111.52.in-addr.arpa
-
8.8.8.8:5326.178.89.13.in-addr.arpadns
DNS Request
26.178.89.13.in-addr.arpa