Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

8

0f3dd41eeb...d4.exe

windows7-x64

8

0f3dd41eeb...d4.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    96s
  • max time network
    138s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/10/2022, 18:51 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0f3dd41eebb81d8e2ec7ff66a4f26deb9ae46543f21b0c8e5678fdd45fbb55d4.exe

  • Size

    66KB

  • MD5

    a11057ce2a6827c35315072f1b541750

  • SHA1

    56e4f31c10d9f3672c02ad8b722865cc7c292ee7

  • SHA256

    0f3dd41eebb81d8e2ec7ff66a4f26deb9ae46543f21b0c8e5678fdd45fbb55d4

  • SHA512

    a59c8051e48566938ebbabded39f7185123fa534e55862054bfc25e5802e86365a636140beb0c0781dce104fe4b33c5b4950fed70473b9eca481f6881d4ab705

  • SSDEEP

    1536:tHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVtWc++u79:tHoLde/OgV432UcP39hXJZnWcPc

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0f3dd41eebb81d8e2ec7ff66a4f26deb9ae46543f21b0c8e5678fdd45fbb55d4.exe
    "C:\Users\Admin\AppData\Local\Temp\0f3dd41eebb81d8e2ec7ff66a4f26deb9ae46543f21b0c8e5678fdd45fbb55d4.exe"
    1⤵
    • Drops file in Windows directory
    PID:5000

Network

  • flag-us
    DNS
    176.122.125.40.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    176.122.125.40.in-addr.arpa
    IN PTR
    Response
  • 93.184.220.29:80
    322 B
     7
  • 93.184.220.29:80
    322 B
     7
  • 13.69.239.73:443
    322 B
     7
  • 8.8.8.8:53
    176.122.125.40.in-addr.arpa
    dns
    73 B
     159 B
     1
    1

    DNS Request

    176.122.125.40.in-addr.arpa

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/5000-132-0x0000000000400000-0x0000000000428000-memory.dmp

    Filesize

    160KB

    Download

  • memory/5000-133-0x0000000000400000-0x0000000000428000-memory.dmp

    Filesize

    160KB

    Download

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.