Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    167s
  • max time network
    205s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/11/2022, 04:19 UTC

General

  • Target

    dd02b4bc3afc9c2136ed6326dcb7501f4a00462ad586b4d576d7893ca13bfa16.exe

  • Size

    58KB

  • MD5

    c666911f6e7571ba8e1d89a0b9a3d4d3

  • SHA1

    8c2e43141b07063024bf4c0b044d1f0c7352301b

  • SHA256

    dd02b4bc3afc9c2136ed6326dcb7501f4a00462ad586b4d576d7893ca13bfa16

  • SHA512

    69b2103bea479e612e645c181fffa038faaf5e0d7d43b75a3819f17da4f6d2a30bc5bde3b3e3224385fe60ae3d97c4e7bdabdcf3a65b72a6d97c8790a20fee6c

  • SSDEEP

    768:Aq392mPh204bfp6eaPWxCb8LdfUZdLuL3hQWEFZurPQ7ZyVhyQtLrZu3S9u/Bf40:Aqt2mQBcZoRbwkrS9QtLaFNuJ+Z8E

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\dd02b4bc3afc9c2136ed6326dcb7501f4a00462ad586b4d576d7893ca13bfa16.exe
    "C:\Users\Admin\AppData\Local\Temp\dd02b4bc3afc9c2136ed6326dcb7501f4a00462ad586b4d576d7893ca13bfa16.exe"
    1⤵
      PID:2096

    Network

    • flag-unknown
      DNS
      96.108.152.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      96.108.152.52.in-addr.arpa
      IN PTR
      Response
    • flag-unknown
      DNS
      2.8.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.4.0.c.0.0.3.0.1.3.0.6.2.ip6.arpa
      Remote address:
      8.8.8.8:53
      Request
      2.8.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.4.0.c.0.0.3.0.1.3.0.6.2.ip6.arpa
      IN PTR
      Response
    • 93.184.221.240:80
      260 B
      5
    • 93.184.221.240:80
      260 B
      5
    • 93.184.221.240:80
      260 B
      5
    • 20.50.73.10:443
      322 B
      7
    • 104.80.225.205:443
      322 B
      7
    • 93.184.221.240:80
      260 B
      5
    • 93.184.221.240:80
      260 B
      5
    • 93.184.221.240:80
      260 B
      5
    • 93.184.221.240:80
      260 B
      5
    • 93.184.221.240:80
      260 B
      5
    • 93.184.221.240:80
      260 B
      5
    • 8.8.8.8:53
      96.108.152.52.in-addr.arpa
      dns
      72 B
      146 B
      1
      1

      DNS Request

      96.108.152.52.in-addr.arpa

    • 8.8.8.8:53
      2.8.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.4.0.c.0.0.3.0.1.3.0.6.2.ip6.arpa
      dns
      118 B
      204 B
      1
      1

      DNS Request

      2.8.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.4.0.c.0.0.3.0.1.3.0.6.2.ip6.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2096-132-0x0000000000400000-0x0000000000431000-memory.dmp

      Filesize

      196KB

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.