Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    179s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/11/2022, 08:13 UTC

General

  • Target

    e840dd99aad75ebf2068eaf152dcec6520a9ac8bfeb236d3e63484c994ccf00c.exe

  • Size

    427KB

  • MD5

    09a2a12c614c7bc8eeb1ba7bac565fa0

  • SHA1

    17e7e2fb6bfe0ca530bca67d7d4ac5aabee4ee20

  • SHA256

    e840dd99aad75ebf2068eaf152dcec6520a9ac8bfeb236d3e63484c994ccf00c

  • SHA512

    bb8e21d7c9996c455ff3ea3d0068eb856f8f7b3b00ca3eb52c5d6e4848cdd30e387ed3d213d4da5f763cf70a46e4da9b369071902ad71652623b7730ab432804

  • SSDEEP

    6144:LrCim/u/rjz9tCF47srcEZ95Wrs8xzdbMq+4eVciQTo/N4:LmTWDjz9QO8x7Wr5bra+E/N

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\e840dd99aad75ebf2068eaf152dcec6520a9ac8bfeb236d3e63484c994ccf00c.exe
    "C:\Users\Admin\AppData\Local\Temp\e840dd99aad75ebf2068eaf152dcec6520a9ac8bfeb236d3e63484c994ccf00c.exe"
    1⤵
      PID:1304

    Network

    • flag-unknown
      DNS
      96.108.152.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      96.108.152.52.in-addr.arpa
      IN PTR
      Response
    • flag-unknown
      DNS
      7.6.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.2.0.0.0.0.2.0.1.3.0.6.2.ip6.arpa
      Remote address:
      8.8.8.8:53
      Request
      7.6.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.2.0.0.0.0.2.0.1.3.0.6.2.ip6.arpa
      IN PTR
      Response
    • 8.238.21.254:80
      46 B
      40 B
      1
      1
    • 8.238.21.254:80
      46 B
      40 B
      1
      1
    • 93.184.220.29:80
      322 B
      7
    • 8.247.211.254:80
      322 B
      7
    • 93.184.220.29:80
      260 B
      5
    • 20.42.73.24:443
      322 B
      7
    • 8.248.5.254:80
      46 B
      40 B
      1
      1
    • 178.79.208.1:80
      322 B
      7
    • 8.248.5.254:80
      46 B
      40 B
      1
      1
    • 104.80.225.205:443
      322 B
      7
    • 8.8.8.8:53
      96.108.152.52.in-addr.arpa
      dns
      72 B
      146 B
      1
      1

      DNS Request

      96.108.152.52.in-addr.arpa

    • 8.8.8.8:53
      7.6.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.2.0.0.0.0.2.0.1.3.0.6.2.ip6.arpa
      dns
      118 B
      204 B
      1
      1

      DNS Request

      7.6.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.2.0.0.0.0.2.0.1.3.0.6.2.ip6.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1304-132-0x0000000001000000-0x00000000010AA000-memory.dmp

      Filesize

      680KB

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.