Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    156s
  • max time network
    188s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/12/2022, 16:22 UTC

General

  • Target

    cc811908777ba78c34e5741bfffa061d5d9402df703b2e1f3b19fdac9af2ad14.exe

  • Size

    68KB

  • MD5

    830d23401f335575f5f903579492a758

  • SHA1

    bfc925e00d7f044ae985010f6cd6da7d7b6ee5f1

  • SHA256

    cc811908777ba78c34e5741bfffa061d5d9402df703b2e1f3b19fdac9af2ad14

  • SHA512

    ae4a54b11b7afd36e03c321db78159d52eb4dabfccefd24c6a14bd65f0b8e6353264e3046ab7f5fa96626c1b82f88ab9fa39f5befeb7965a48b07b228d4ba206

  • SSDEEP

    1536:Jc5+hT7pUCORhNiYKimrdTBBRzI0udp3Civ:O5WUjhEYor1ZI0udpSiv

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\cc811908777ba78c34e5741bfffa061d5d9402df703b2e1f3b19fdac9af2ad14.exe
    "C:\Users\Admin\AppData\Local\Temp\cc811908777ba78c34e5741bfffa061d5d9402df703b2e1f3b19fdac9af2ad14.exe"
    1⤵
      PID:4752

    Network

    • flag-unknown
      DNS
      226.101.242.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      226.101.242.52.in-addr.arpa
      IN PTR
      Response
    • flag-unknown
      DNS
      15.89.54.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      15.89.54.20.in-addr.arpa
      IN PTR
    • flag-unknown
      DNS
      15.89.54.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      15.89.54.20.in-addr.arpa
      IN PTR
    • flag-unknown
      DNS
      15.89.54.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      15.89.54.20.in-addr.arpa
      IN PTR
    • flag-unknown
      DNS
      15.89.54.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      15.89.54.20.in-addr.arpa
      IN PTR
    • flag-unknown
      DNS
      15.89.54.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      15.89.54.20.in-addr.arpa
      IN PTR
    • 67.26.111.254:80
      322 B
      7
    • 93.184.220.29:80
      322 B
      7
    • 93.184.220.29:80
      260 B
      5
    • 20.190.159.75:443
      260 B
      5
    • 104.208.16.90:443
      322 B
      7
    • 104.80.225.205:443
      322 B
      7
    • 67.26.111.254:80
      322 B
      7
    • 8.8.8.8:53
      226.101.242.52.in-addr.arpa
      dns
      73 B
      147 B
      1
      1

      DNS Request

      226.101.242.52.in-addr.arpa

    • 8.8.8.8:53
      15.89.54.20.in-addr.arpa
      dns
      350 B
      5

      DNS Request

      15.89.54.20.in-addr.arpa

      DNS Request

      15.89.54.20.in-addr.arpa

      DNS Request

      15.89.54.20.in-addr.arpa

      DNS Request

      15.89.54.20.in-addr.arpa

      DNS Request

      15.89.54.20.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.