Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
136s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
29/08/2024, 19:51
Static task
static1
Behavioral task
behavioral1
Sample
Unlock_Tool.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
Defender_Settings.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Password.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
Unlock_Tool_4.9.rar
Resource
win10v2004-20240802-en
General
-
Target
Password.txt
-
Size
95B
-
MD5
f246bf2465b177d492506954be377c3f
-
SHA1
6feaf291a50c33203d6e98356d47758158bbaa1f
-
SHA256
5cb592843421ba6fda5fd5cc143b214b94d402c2d23a025dfb872e98a755278b
-
SHA512
3eed854638582c981ce746a5b68d7f81d2faee38942811486ca5bb228d649bef6c0fdb9d1524c3495d62748b13d17e652d82587282bb5be069bc5ac899851214
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 3580 NOTEPAD.EXE