Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
10Shrek-Tools-main.zip
windows10-2004-x64
8LICENSE
windows10-2004-x64
1Menu.py
windows10-2004-x64
3README.md
windows10-2004-x64
3Setup.bat
windows10-2004-x64
7chromedriver.exe
windows10-2004-x64
1data/Member_id.txt
windows10-2004-x64
1data/channels.txt
windows10-2004-x64
1data/groups.txt
windows10-2004-x64
1data/roles.txt
windows10-2004-x64
1utilities/...gin.py
windows10-2004-x64
3utilities/...ker.py
windows10-2004-x64
3utilities/...ber.py
windows10-2004-x64
3utilities/...ort.py
windows10-2004-x64
3utilities/...nfo.py
windows10-2004-x64
3utilities/...mon.py
windows10-2004-x64
3utilities/...on2.py
windows10-2004-x64
3utilities/...rys.py
windows10-2004-x64
3utilities/...ate.py
windows10-2004-x64
3utilities/Start.bat
windows10-2004-x64
1utilities/...er.exe
windows10-2004-x64
7X�p~�p<.pyc
windows10-2004-x64
Analysis
-
max time kernel
454s -
max time network
457s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
24/03/2024, 15:40
Behavioral task
behavioral1
Sample
Shrek-Tools-main.zip
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
LICENSE
Resource
win10v2004-20240319-en
Behavioral task
behavioral3
Sample
Menu.py
Resource
win10v2004-20240226-en
Behavioral task
behavioral4
Sample
README.md
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
Setup.bat
Resource
win10v2004-20240226-en
Behavioral task
behavioral6
Sample
chromedriver.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
data/Member_id.txt
Resource
win10v2004-20240226-en
Behavioral task
behavioral8
Sample
data/channels.txt
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
data/groups.txt
Resource
win10v2004-20240226-en
Behavioral task
behavioral10
Sample
data/roles.txt
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
utilities/Plugins/AutoLogin.py
Resource
win10v2004-20240226-en
Behavioral task
behavioral12
Sample
utilities/Plugins/DdosAttacker.py
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
utilities/Plugins/QR_grabber.py
Resource
win10v2004-20240226-en
Behavioral task
behavioral14
Sample
utilities/Plugins/massreport.py
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
utilities/Plugins/tokeninfo.py
Resource
win10v2004-20240319-en
Behavioral task
behavioral16
Sample
utilities/Settings/common.py
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
utilities/Settings/common2.py
Resource
win10v2004-20240226-en
Behavioral task
behavioral18
Sample
utilities/Settings/libarys.py
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
utilities/Settings/update.py
Resource
win10v2004-20240226-en
Behavioral task
behavioral20
Sample
utilities/Start.bat
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
utilities/assets/Pyinstaller.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral22
Sample
X�p~�p<.pyc
Resource
win10v2004-20240226-en
General
-
Target
data/Member_id.txt
-
Size
1B
-
MD5
68b329da9893e34099c7d8ad5cb9c940
-
SHA1
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
-
SHA256
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
-
SHA512
be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 2036 NOTEPAD.EXE