Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    162s
  • max time network
    170s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/12/2022, 02:45 UTC

General

  • Target

    51ed93b08c4f633c701680589d5a3f6d53b6f7f612d83e9e1f959721e24cd742.exe

  • Size

    480KB

  • MD5

    04c8126ffaf0c546d26a4242ce01d6e0

  • SHA1

    122212a778a65c658eec0a82588dc18663cc4922

  • SHA256

    51ed93b08c4f633c701680589d5a3f6d53b6f7f612d83e9e1f959721e24cd742

  • SHA512

    c3ec7db89b26a9d23fa30ddc910e9323e6e62dcf5f4876074d3bee74b166c8a0c3394e62ffdaa5a7ea3f8609757a9f56e4dc91571c9a7d72343008051836f7ae

  • SSDEEP

    6144:tjkeob8EICf56TJXxsiJM5SfY9PiPMWUcecLJyQjOZypq5XgcinOyfwm4sdy4GVd:tiXfaJsSfYd3TcFy4o5XBU4b6UtR

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\51ed93b08c4f633c701680589d5a3f6d53b6f7f612d83e9e1f959721e24cd742.exe
    "C:\Users\Admin\AppData\Local\Temp\51ed93b08c4f633c701680589d5a3f6d53b6f7f612d83e9e1f959721e24cd742.exe"
    1⤵
      PID:5016

    Network

    • flag-unknown
      DNS
      176.122.125.40.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      176.122.125.40.in-addr.arpa
      IN PTR
      Response
    • 93.184.221.240:80
      260 B
      5
    • 93.184.221.240:80
      260 B
      5
    • 93.184.220.29:80
      322 B
      7
    • 93.184.220.29:80
      322 B
      7
    • 93.184.221.240:80
      322 B
      7
    • 93.184.221.240:80
      322 B
      7
    • 20.189.173.10:443
      322 B
      7
    • 93.184.221.240:80
      260 B
      5
    • 93.184.221.240:80
      260 B
      5
    • 93.184.221.240:80
      260 B
      5
    • 8.8.8.8:53
      176.122.125.40.in-addr.arpa
      dns
      73 B
      159 B
      1
      1

      DNS Request

      176.122.125.40.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/5016-132-0x0000000001000000-0x00000000010B6000-memory.dmp

      Filesize

      728KB

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.