faa62297a098197a2704da8e60897f317c9e02e7dd2b7c1ff4399789c7f75bfd | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

Shrek-Tools-main.zip

windows10-2004-x64

8

LICENSE

windows10-2004-x64

1

Menu.py

windows10-2004-x64

3

README.md

windows10-2004-x64

3

Setup.bat

windows10-2004-x64

7

chromedriver.exe

windows10-2004-x64

1

data/Member_id.txt

windows10-2004-x64

1

data/channels.txt

windows10-2004-x64

1

data/groups.txt

windows10-2004-x64

1

data/roles.txt

windows10-2004-x64

1

utilities/...gin.py

windows10-2004-x64

3

utilities/...ker.py

windows10-2004-x64

3

utilities/...ber.py

windows10-2004-x64

3

utilities/...ort.py

windows10-2004-x64

3

utilities/...nfo.py

windows10-2004-x64

3

utilities/...mon.py

windows10-2004-x64

3

utilities/...on2.py

windows10-2004-x64

3

utilities/...rys.py

windows10-2004-x64

3

utilities/...ate.py

windows10-2004-x64

3

utilities/Start.bat

windows10-2004-x64

1

utilities/...er.exe

windows10-2004-x64

7

X�p~�p<.pyc

windows10-2004-x64

Analysis

max time kernel
595s
max time network
605s
platform
windows10-2004_x64
resource
win10v2004-20240319-en
resource tags

arch:x64arch:x86image:win10v2004-20240319-enlocale:en-usos:windows10-2004-x64system
submitted
24/03/2024, 15:40

Sharing

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

Shrek-Tools-main.zip

Resource

win10v2004-20240226-en

discovery persistence upx

windows10-2004-x64

24 signatures

600 seconds

Behavioral task

behavioral2

Sample

LICENSE

Resource

win10v2004-20240319-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral3

Sample

Menu.py

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral4

Sample

README.md

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral5

Sample

Setup.bat

Resource

win10v2004-20240226-en

windows10-2004-x64

6 signatures

600 seconds

Behavioral task

behavioral6

Sample

chromedriver.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral7

Sample

data/Member_id.txt

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

600 seconds

Behavioral task

behavioral8

Sample

data/channels.txt

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

600 seconds

Behavioral task

behavioral9

Sample

data/groups.txt

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

600 seconds

Behavioral task

behavioral10

Sample

data/roles.txt

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

600 seconds

Behavioral task

behavioral11

Sample

utilities/Plugins/AutoLogin.py

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral12

Sample

utilities/Plugins/DdosAttacker.py

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral13

Sample

utilities/Plugins/QR_grabber.py

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral14

Sample

utilities/Plugins/massreport.py

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral15

Sample

utilities/Plugins/tokeninfo.py

Resource

win10v2004-20240319-en

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral16

Sample

utilities/Settings/common.py

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral17

Sample

utilities/Settings/common2.py

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral18

Sample

utilities/Settings/libarys.py

Resource

win10v2004-20231215-en

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral19

Sample

utilities/Settings/update.py

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral20

Sample

utilities/Start.bat

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

600 seconds

Behavioral task

behavioral21

Sample

utilities/assets/Pyinstaller.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

6 signatures

600 seconds

Behavioral task

behavioral22

Sample

X�p~�p<.pyc

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

600 seconds

Report Analysis Logs

General

Target

LICENSE
Size

34KB
MD5

1ebbd3e34237af26da5dc08a4e440464
SHA1

31a3d460bb3c7d98845187c716a30db81c44b615
SHA256

3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986
SHA512

d361e5e8201481c6346ee6a886592c51265112be550d5224f1a7a6e116255c2f1ab8788df579d9b8372ed7bfd19bac4b6e70e00b472642966ab5b319b99a2686
SSDEEP

768:Fo1acy3LTB2VsrHG/OfvMmnBCtLmJ9A7J:Fhcycsrfrnoum

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\LICENSE
1⤵
PID:2748

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1780 --field-trial-handle=2000,i,9877262470271371196,11878025205711850266,262144 --variations-seed-version /prefetch:8
1⤵
PID:5064

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3644 --field-trial-handle=2000,i,9877262470271371196,11878025205711850266,262144 --variations-seed-version /prefetch:8
1⤵
PID:4672

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy