Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    195s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/12/2022, 20:18 UTC

General

  • Target

    ef470ce1c83971567ff24d512b68b134d75a95ef5d37f194ee1a65a260c5c0c9.exe

  • Size

    40KB

  • MD5

    d751992334515c12d9c8991ea3319208

  • SHA1

    328d4b6abedd743183dded94690e8d806e768a89

  • SHA256

    ef470ce1c83971567ff24d512b68b134d75a95ef5d37f194ee1a65a260c5c0c9

  • SHA512

    31c9f1c1c14f9883b1237be49d5f2dcd25672d35f1521bc494cfc5a3cd0fb111f768fc874f479b9bfaec292b4e0875aae014d5760161d06056daf81dc19bdb41

  • SSDEEP

    384:tAslydJZEt2Og617lSNcIorsR50beoS1AdZCb1unDqz1mUWdWKBqW:trlydwgiyxMAeixCDqQUW3

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ef470ce1c83971567ff24d512b68b134d75a95ef5d37f194ee1a65a260c5c0c9.exe
    "C:\Users\Admin\AppData\Local\Temp\ef470ce1c83971567ff24d512b68b134d75a95ef5d37f194ee1a65a260c5c0c9.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1668

Network

  • flag-unknown
    DNS
    96.108.152.52.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    96.108.152.52.in-addr.arpa
    IN PTR
    Response
  • flag-unknown
    DNS
    d.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa
    Remote address:
    8.8.8.8:53
    Request
    d.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa
    IN PTR
    Response
  • 72.21.91.29:80
    322 B
    7
  • 84.53.175.11:80
    322 B
    7
  • 20.189.173.3:443
    322 B
    7
  • 104.80.225.205:443
    322 B
    7
  • 96.16.53.137:80
    322 B
    7
  • 96.16.53.137:80
    322 B
    7
  • 96.16.53.137:80
    322 B
    7
  • 40.126.32.136:443
    260 B
    5
  • 8.8.8.8:53
    96.108.152.52.in-addr.arpa
    dns
    72 B
    146 B
    1
    1

    DNS Request

    96.108.152.52.in-addr.arpa

  • 8.8.8.8:53
    d.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa
    dns
    118 B
    204 B
    1
    1

    DNS Request

    d.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.