Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
135s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
22/11/2022, 05:51 UTC
General
-
Target
c925c43d7c2550dd7887e2f61139fa77ca81316aa51e2c8f3a4b1c0fdfdf88d9.exe
-
Size
1.3MB
-
MD5
db2c81f38a0bb9053c8dd69bba8714e9
-
SHA1
6ddd379c4a1103662c85887752fcf8cf4120e05f
-
SHA256
c925c43d7c2550dd7887e2f61139fa77ca81316aa51e2c8f3a4b1c0fdfdf88d9
-
SHA512
6db4dbf3045fa4b537d80a5cdb2593fa778be74796868f592db367f4278ea509a197931327942cf85c2c34430c1eb431ccddb6caf6cfe8c4c22f105f0b0aa906
-
SSDEEP
24576:zrKqlGCPcJKwybUDwEZZODYmR9G+gnbkk6XRJfe3DqYO/KpLwFfngWX4VmJPakC:zrKo4ZwCOnYjVmJPax
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
-
Suspicious use of WriteProcessMemory 10 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c925c43d7c2550dd7887e2f61139fa77ca81316aa51e2c8f3a4b1c0fdfdf88d9.exe"C:\Users\Admin\AppData\Local\Temp\c925c43d7c2550dd7887e2f61139fa77ca81316aa51e2c8f3a4b1c0fdfdf88d9.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\c925c43d7c2550dd7887e2f61139fa77ca81316aa51e2c8f3a4b1c0fdfdf88d9.exe2⤵
- Suspicious use of SetWindowsHookEx
-
Network
-
DNSagqeb37hywu.zpti3tyb7h.comRemote address:8.8.8.8:53Requestagqeb37hywu.zpti3tyb7h.comIN A -
DNSagqeb37hywu.zpti3tyb7h.comRemote address:8.8.8.8:53Requestagqeb37hywu.zpti3tyb7h.comIN A
-
DNSagqeb37hywu.zpti3tyb7h.comRemote address:8.8.8.8:53Requestagqeb37hywu.zpti3tyb7h.comIN A
-
DNSagqeb37hywu.zpti3tyb7h.comRemote address:8.8.8.8:53Requestagqeb37hywu.zpti3tyb7h.comIN A
-
DNSagqeb37hywu.zpti3tyb7h.comRemote address:8.8.8.8:53Requestagqeb37hywu.zpti3tyb7h.comIN A
-
DNSagqeb37hywu.zpti3tyb7h.comRemote address:8.8.8.8:53Requestagqeb37hywu.zpti3tyb7h.comIN A
-
DNSagqeb37hywu.zpti3tyb7h.comRemote address:8.8.8.8:53Requestagqeb37hywu.zpti3tyb7h.comIN A
-
DNSagqeb37hywu.zpti3tyb7h.comRemote address:8.8.8.8:53Requestagqeb37hywu.zpti3tyb7h.comIN A
-
DNSagqeb37hywu.zpti3tyb7h.comRemote address:8.8.8.8:53Requestagqeb37hywu.zpti3tyb7h.comIN A
-
DNSagqeb37hywu.zpti3tyb7h.comRemote address:8.8.8.8:53Requestagqeb37hywu.zpti3tyb7h.comIN A
-
DNSagqeb37hywu.zpti3tyb7h.comRemote address:8.8.8.8:53Requestagqeb37hywu.zpti3tyb7h.comIN A
-
DNSagqeb37hywu.zpti3tyb7h.comRemote address:8.8.8.8:53Requestagqeb37hywu.zpti3tyb7h.comIN A
-
DNSagqeb37hywu.zpti3tyb7h.comRemote address:8.8.8.8:53Requestagqeb37hywu.zpti3tyb7h.comIN A
-
DNSagqeb37hywu.zpti3tyb7h.comRemote address:8.8.8.8:53Requestagqeb37hywu.zpti3tyb7h.comIN A
-
DNSagqeb37hywu.zpti3tyb7h.comRemote address:8.8.8.8:53Requestagqeb37hywu.zpti3tyb7h.comIN A
-
20.190.160.22:443
-
20.190.160.22:443
-
20.190.160.22:443
-
40.126.32.138:443
-
40.126.32.138:443
-
40.126.32.138:443
-
52.152.110.14:443
-
72.21.91.29:80
-
84.53.175.11:80
-
20.189.173.3:443
-
40.126.32.136:443
-
40.126.32.136:443
-
40.126.32.136:443
-
96.16.53.137:80
-
96.16.53.137:80
-
52.152.110.14:443
-
104.80.225.205:443
-
40.126.32.76:443
-
40.126.32.76:443
-
40.126.32.76:443
-
52.152.110.14:443
-
40.126.32.74:443
-
40.126.32.74:443
-
40.126.32.74:443
-
52.152.110.14:443
-
96.16.53.137:80
-
20.190.160.14:443
-
20.190.160.14:443
-
20.190.160.14:443
-
52.152.110.14:443
-
52.152.110.14:443
-
8.8.8.8:53agqeb37hywu.zpti3tyb7h.comdns
DNS Request
agqeb37hywu.zpti3tyb7h.com
DNS Request
agqeb37hywu.zpti3tyb7h.com
DNS Request
agqeb37hywu.zpti3tyb7h.com
DNS Request
agqeb37hywu.zpti3tyb7h.com
DNS Request
agqeb37hywu.zpti3tyb7h.com
-
8.8.8.8:53agqeb37hywu.zpti3tyb7h.comdns
DNS Request
agqeb37hywu.zpti3tyb7h.com
DNS Request
agqeb37hywu.zpti3tyb7h.com
DNS Request
agqeb37hywu.zpti3tyb7h.com
DNS Request
agqeb37hywu.zpti3tyb7h.com
DNS Request
agqeb37hywu.zpti3tyb7h.com
-
8.8.8.8:53agqeb37hywu.zpti3tyb7h.comdns
DNS Request
agqeb37hywu.zpti3tyb7h.com
DNS Request
agqeb37hywu.zpti3tyb7h.com
DNS Request
agqeb37hywu.zpti3tyb7h.com
DNS Request
agqeb37hywu.zpti3tyb7h.com
DNS Request
agqeb37hywu.zpti3tyb7h.com
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
868KB
-
Filesize
868KB
-
Filesize
868KB
-
Filesize
868KB
-
Filesize
868KB
-
Filesize
868KB