Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

4

RevoUninst...nt.txt

windows10-2004-x64

4

RevoUninst...lp.pdf

windows10-2004-x64

3

RevoUninst...rt.exe

windows10-2004-x64

3

RevoUninst...rs.dat

windows10-2004-x64

3

RevoUninst...ch.ini

windows10-2004-x64

1

RevoUninst...sh.ini

windows10-2004-x64

1

RevoUninst...gs.ini

windows10-2004-x64

1

RevoUninst...rt.dat

windows10-2004-x64

3

RevoUninst...Un.exe

windows10-2004-x64

6

RevoUninst...on.bmp

windows10-2004-x64

7

RevoUninst...Un.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    98s
  • max time network
    110s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/08/2024, 13:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    RevoUninstaller_Portable/lang/english.ini

  • Size

    102KB

  • MD5

    5f57e969cb8f3ad0bbd859207a283bd5

  • SHA1

    5a232b0eed2d7437513010c7a0af05cc4de3d90f

  • SHA256

    f2e8f9e5cf4f057e3399ff66485a485cba419881aeeac997049941396bdf63d8

  • SHA512

    c48ec65d7dc7f1ef77bc708cdb6f49106651fb6d715450168f4d5fa8105c24dfb43d7378d8b0ceba567942fd73fc95f7d41fd75c0824e619609981710b504cd0

  • SSDEEP

    768:Qo3oi7/ETiuWD6V5yBxzqp+iImPXhF9cie9MzJs5IzSRGYeop6w/lB69YK3zgiv0:KO6ryBxzqp+iImcV8op1lB69YK3zS

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\RevoUninstaller_Portable\lang\english.ini
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:5076

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads