Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3zunamiiii.zip
windows7-x64
1zunamiiii.zip
windows10-2004-x64
1ReBomb2-ma...DME.md
windows7-x64
3ReBomb2-ma...DME.md
windows10-2004-x64
3ReBomb2-ma...b2.exe
windows7-x64
7ReBomb2-ma...b2.exe
windows10-2004-x64
7ReBomb2-ma...mb2.py
windows7-x64
3ReBomb2-ma...mb2.py
windows10-2004-x64
3ReBomb2-ma...YOP.py
windows7-x64
3ReBomb2-ma...YOP.py
windows10-2004-x64
3ReBomb2-ma...OP.zip
windows7-x64
1ReBomb2-ma...OP.zip
windows10-2004-x64
1Rebomb2AYO...App.py
windows7-x64
3Rebomb2AYO...App.py
windows10-2004-x64
3Rebomb2AYO...pp.exe
windows7-x64
7Rebomb2AYO...pp.exe
windows10-2004-x64
7Rebomb2AYO...pp.pkg
macos-10.15-amd64
Rebomb2AYO...t__.py
windows7-x64
3Rebomb2AYO...t__.py
windows10-2004-x64
3Rebomb2AYO...11.pyc
windows7-x64
3Rebomb2AYO...11.pyc
windows10-2004-x64
3ReBomb2-ma...es.zip
windows7-x64
1ReBomb2-ma...es.zip
windows10-2004-x64
1ReBomb2App...to.vbs
windows7-x64
1ReBomb2App...to.vbs
windows10-2004-x64
1ReBomb2App...ck.vbs
windows7-x64
1ReBomb2App...ck.vbs
windows10-2004-x64
1ReBomb2App...tp.ps1
windows7-x64
1ReBomb2App...tp.ps1
windows10-2004-x64
1ReBomb2App...it.vbs
windows7-x64
1ReBomb2App...it.vbs
windows10-2004-x64
1ReBomb2App...ox.vbs
windows7-x64
1Analysis
-
max time kernel
118s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
28/04/2024, 15:51
Behavioral task
behavioral1
Sample
zunamiiii.zip
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
zunamiiii.zip
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
ReBomb2-main/README.md
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
ReBomb2-main/README.md
Resource
win10v2004-20240419-en
Behavioral task
behavioral5
Sample
ReBomb2-main/ReBomb2.exe
Resource
win7-20240215-en
Behavioral task
behavioral6
Sample
ReBomb2-main/ReBomb2.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
ReBomb2-main/ReBomb2.py
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
ReBomb2-main/ReBomb2.py
Resource
win10v2004-20240419-en
Behavioral task
behavioral9
Sample
ReBomb2-main/ReBomb2AppAYOP.py
Resource
win7-20240419-en
Behavioral task
behavioral10
Sample
ReBomb2-main/ReBomb2AppAYOP.py
Resource
win10v2004-20240419-en
Behavioral task
behavioral11
Sample
ReBomb2-main/Rebomb2AYOP.zip
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
ReBomb2-main/Rebomb2AYOP.zip
Resource
win10v2004-20240419-en
Behavioral task
behavioral13
Sample
Rebomb2AYOP/ReBomb2App.py
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
Rebomb2AYOP/ReBomb2App.py
Resource
win10v2004-20240419-en
Behavioral task
behavioral15
Sample
Rebomb2AYOP/ReBomb2App/ReBomb2App.exe
Resource
win7-20240419-en
Behavioral task
behavioral16
Sample
Rebomb2AYOP/ReBomb2App/ReBomb2App.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral17
Sample
Rebomb2AYOP/ReBomb2App/ReBomb2App.pkg
Resource
macos-20240410-en
Behavioral task
behavioral18
Sample
Rebomb2AYOP/ReBomb2App/fonts/__init__.py
Resource
win7-20240221-en
Behavioral task
behavioral19
Sample
Rebomb2AYOP/ReBomb2App/fonts/__init__.py
Resource
win10v2004-20240426-en
Behavioral task
behavioral20
Sample
Rebomb2AYOP/ReBomb2App/fonts/__pycache__/__init__.cpython-311.pyc
Resource
win7-20240215-en
Behavioral task
behavioral21
Sample
Rebomb2AYOP/ReBomb2App/fonts/__pycache__/__init__.cpython-311.pyc
Resource
win10v2004-20240419-en
Behavioral task
behavioral22
Sample
ReBomb2-main/Rebomb2AppWithProxies.zip
Resource
win7-20240221-en
Behavioral task
behavioral23
Sample
ReBomb2-main/Rebomb2AppWithProxies.zip
Resource
win10v2004-20240426-en
Behavioral task
behavioral24
Sample
ReBomb2AppFinal/tcl/auto.vbs
Resource
win7-20240221-en
Behavioral task
behavioral25
Sample
ReBomb2AppFinal/tcl/auto.vbs
Resource
win10v2004-20240419-en
Behavioral task
behavioral26
Sample
ReBomb2AppFinal/tcl/clock.vbs
Resource
win7-20240220-en
Behavioral task
behavioral27
Sample
ReBomb2AppFinal/tcl/clock.vbs
Resource
win10v2004-20240419-en
Behavioral task
behavioral28
Sample
ReBomb2AppFinal/tcl/http1.0/http.ps1
Resource
win7-20240419-en
Behavioral task
behavioral29
Sample
ReBomb2AppFinal/tcl/http1.0/http.ps1
Resource
win10v2004-20240419-en
Behavioral task
behavioral30
Sample
ReBomb2AppFinal/tcl/init.vbs
Resource
win7-20240221-en
Behavioral task
behavioral31
Sample
ReBomb2AppFinal/tcl/init.vbs
Resource
win10v2004-20240419-en
Behavioral task
behavioral32
Sample
ReBomb2AppFinal/tk/listbox.vbs
Resource
win7-20240221-en
General
-
Target
ReBomb2AppFinal/tcl/http1.0/http.ps1
-
Size
9KB
-
MD5
c2092f8ca2d761dfa8c461076d956374
-
SHA1
90b4648b3bc81c30465b0be83a5db4127a1392fb
-
SHA256
8c474095a3aba7df5b488f3d35240d6de729e57153980c2a898728b8c407a727
-
SHA512
09ce408886e2ceaddf70786a15d63af9a930e70cac4286ac9ddd2094c8edcf97a2adc2d3d2659b123f88719340d3b00d9f96e9bc7c8b55192735c290e7d24683
-
SSDEEP
192:kipkqA3KsZMAikGJ4kIWPa95KTBoF7dg/8YNkgQ4id:TkqWKsZ8kGJ4kIWPaDFzTd
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2392 powershell.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2392 powershell.exe