Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

RS.7z

windows7-x64

RS.7z

windows10-2004-x64

RS.7z

android-11-x64

RS.7z

android-13-x64

RS.7z

macos-10.15-amd64

RS.7z

ubuntu-18.04-amd64

RS.7z

debian-9-armhf

RS.7z

debian-9-mips

RS.7z

debian-9-mipsel

Ransomware...KB.exe

windows7-x64

10

Ransomware...KB.exe

windows10-2004-x64

10

Ransomware...KB.exe

android-9-x86

Ransomware...KB.exe

android-13-x64

Ransomware...KB.exe

macos-10.15-amd64

Ransomware...KB.exe

ubuntu-18.04-amd64

Ransomware...KB.exe

debian-9-armhf

Ransomware...KB.exe

debian-9-mips

Ransomware...KB.exe

debian-9-mipsel

$PLUGINSDI...em.dll

windows7-x64

$PLUGINSDI...em.dll

windows10-2004-x64

$PLUGINSDI...em.dll

android-11-x64

$PLUGINSDI...em.dll

android-13-x64

$PLUGINSDI...em.dll

macos-10.15-amd64

$PLUGINSDI...em.dll

ubuntu-18.04-amd64

$PLUGINSDI...em.dll

debian-9-armhf

$PLUGINSDI...em.dll

debian-9-mips

$PLUGINSDI...em.dll

debian-9-mipsel

Ransomware...KB.ps1

windows7-x64

Ransomware...KB.ps1

windows10-2004-x64

Ransomware...KB.ps1

android-11-x64

Ransomware...KB.ps1

android-13-x64

Ransomware...KB.ps1

macos-10.15-amd64

Resubmissions

05/02/2025, 10:25

250205-mgcefaslhw 10

05/02/2025, 10:17

250205-mbs51atmbk 10

05/02/2025, 09:15

250205-k785zs1pfn 10

05/02/2025, 08:48

250205-kqq8vayph1 10

05/02/2025, 06:31

250205-hae5jatqgt 10

05/02/2025, 06:29

250205-g8xlsstqax 10

28/07/2024, 16:38

240728-t5tryssgmm 10

07/07/2024, 14:07

240707-rfgd8atekm 10

07/07/2024, 14:07

240707-re689awdpe 10

13/09/2022, 17:54

220913-wg1lpsgbg7 10

Analysis

  • max time network
    6s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    05/02/2025, 08:48

Sharing

Copy URL
Twitter E-mail

Errors

Reason
Payload did not run: unable to install sample: Error: Unable to open file: RansomwareSamples/Hive_17_07_2021_808KB.exe Consider using a file under /data/local/tmp/ Error: Can't open file: RansomwareSamples/Hive_17_07_2021_808KB.exe Exception occurred while executing: java.lang.IllegalArgumentException: Error: Can't open file: RansomwareSamples/Hive_17_07_2021_808KB.exe at com.android.server.pm.PackageManagerShellCommand.setParamsSize(PackageManagerShellCommand.java:328) at com.android.server.pm.PackageManagerShellCommand.runInstall(PackageManagerShellCommand.java:906) at com.android.server.pm.PackageManagerShellCommand.onCommand(PackageManagerShellCommand.java:158) at android.os.ShellCommand.exec(ShellCommand.java:103) at com.android.server.pm.PackageManagerService.onShellCommand(PackageManagerService.java:21328) at android.os.Binder.shellCommand(Binder.java:634) at android.os.Binder.onTransact(Binder.java:532) at android.content.pm.IPackageManager$Stub.onTransact(IPackageManager.java:2821) at com.android.server.pm.PackageManagerService.onTransact(PackageManagerService.java:3856) at android.os.Binder.execTransact(Binder.java:731)
Report Analysis Logs

General

  • Target

    RansomwareSamples/Hive_17_07_2021_808KB.exe

  • Size

    808KB

  • MD5

    504bd1695de326bc533fde29b8a69319

  • SHA1

    67f0c8d81aefcfc5943b31d695972194ac15e9f2

  • SHA256

    a0b4e3d7e4cd20d25ad2f92be954b95eea44f8f1944118a3194295c5677db749

  • SHA512

    18c5b28bafb13edf47f6a2b803d9d9a914945f037b266a765f2a324842c5ef04ebda27eba31851d2d63e00779a42900e0edfe4ad5bd817eb4f43fa4d4e3a4767

  • SSDEEP

    24576:lafTGwLNdRk4RBtr/ioF4/I+CMx3cMt3/4KFG8Qz4YwY:IT7dRFr/ioFjicMtvV4z

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads