Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Ransomware...st.png

windows10-2004-x64

Ransomware...st.png

windows7-x64

Ransomware...st.png

windows10-2004-x64

Ransomware...st.png

windows10-ltsc_2021-x64

Ransomware...st.png

windows11-21h2-x64

0xfff.pyc

windows10-2004-x64

0xfff.pyc

windows7-x64

0xfff.pyc

windows10-2004-x64

0xfff.pyc

windows10-ltsc_2021-x64

0xfff.pyc

windows11-21h2-x64

out.exe

windows11-21h2-x64

3

out.exe

windows7-x64

3

out.exe

windows10-2004-x64

3

out.exe

windows10-ltsc_2021-x64

3

out.exe

windows11-21h2-x64

3

out.exe

windows10-ltsc_2021-x64

3

out.exe

windows7-x64

3

out.exe

windows10-2004-x64

3

out.exe

windows10-ltsc_2021-x64

3

out.exe

windows11-21h2-x64

3

Ransomware...KB.exe

windows11-21h2-x64

10

Ransomware...KB.exe

windows7-x64

10

Ransomware...KB.exe

windows10-2004-x64

10

Ransomware...KB.exe

windows10-ltsc_2021-x64

10

Ransomware...KB.exe

windows11-21h2-x64

10

Ransomware...KB.exe

windows11-21h2-x64

10

Ransomware...KB.exe

windows7-x64

10

Ransomware...KB.exe

windows10-2004-x64

10

Ransomware...KB.exe

windows10-ltsc_2021-x64

10

Ransomware...KB.exe

windows11-21h2-x64

10

Resubmissions

25/03/2025, 15:11

250325-skmbpsxzaw 10

25/03/2025, 15:06

250325-sg1d6a1px2 10

25/03/2025, 15:01

250325-sd5jpsxyct 10

25/03/2025, 14:56

250325-sbdcfaxxgs 10

25/03/2025, 14:50

250325-r7ve6a1nv3 10

25/03/2025, 14:46

250325-r5ab7sxwhx 10

25/03/2025, 14:40

250325-r2c9paxwe1 10

05/02/2025, 10:25

250205-mgcefaslhw 10

05/02/2025, 10:17

250205-mbs51atmbk 10

05/02/2025, 09:15

250205-k785zs1pfn 10

Analysis

  • max time kernel
    0s
  • platform
    windows11-21h2_x64
  • resource
    win11-20250314-en
  • resource tags

    arch:x64arch:x86image:win11-20250314-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    25/03/2025, 15:06

Sharing

Copy URL
Twitter E-mail

Errors

Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\0xfff.pyc command=C:\Users\Admin\AppData\Local\Temp\0xfff.pyc bcdedit /set shutdown /r /f /t 2 wdir=C:\Users\Admin\AppData\Local\Temp Payload error: %1 is not a valid Win32 application.
Report Analysis Logs

General

  • Target

    0xfff.pyc

  • Size

    12KB

  • MD5

    dc1c93d3cfde7c02945b2fe72b9123ad

  • SHA1

    4593d8a7bdd829ac806f8846c8b39066d23239e1

  • SHA256

    fbc5264b62faf5d27fb962dfbd48ca54f2c7e7a18ca2892e6640030b5388bce3

  • SHA512

    75d38187383bf01fd1d46ea8e7072c66f9989de1c157f27a79aba2f9c8a5c550e4c429734dc9608c556bd8836c75448977186b3255c8da416a760f21f1e06bc8

  • SSDEEP

    192:32V5gAnV4fmjfj+v7EBzbH0HvoRMbEBjVC+q4rAflYCL81SyGL9mJ3Rk:m/nV4fCYszo2Dk2CL81LGBORk

Score
1/10

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads