Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    167s
  • max time network
    171s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/12/2022, 18:50 UTC

General

  • Target

    dda265f64d56f74e382c419da01e69fc848338d71ee552dd47d8e613cea12f10.exe

  • Size

    103KB

  • MD5

    b37c3345580384f88ccbc7b45eeeebbe

  • SHA1

    56d1cd71b86dda901204da1c36a06f01bc7c9c01

  • SHA256

    dda265f64d56f74e382c419da01e69fc848338d71ee552dd47d8e613cea12f10

  • SHA512

    6521277e8ca72fe1141fcad314cc77d8e9a7f4d26d2199b88ca58a15f7781b6435eea6417b581a2ddb93545c5cbd6cb864dc76a05df0553e1983b18a5897ca5d

  • SSDEEP

    1536:AfnsxxtQSABtD+UJc+kmhyX+BYaBqJJc5qyqH0oVmZ6NoYwSY:A0xxUDnJc+kYyX+z5qyQE8Np+

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\dda265f64d56f74e382c419da01e69fc848338d71ee552dd47d8e613cea12f10.exe
    "C:\Users\Admin\AppData\Local\Temp\dda265f64d56f74e382c419da01e69fc848338d71ee552dd47d8e613cea12f10.exe"
    1⤵
      PID:532

    Network

    • flag-unknown
      DNS
      15.89.54.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      15.89.54.20.in-addr.arpa
      IN PTR
      Response
    • flag-unknown
      DNS
      d.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa
      Remote address:
      8.8.8.8:53
      Request
      d.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa
      IN PTR
      Response
    • 52.109.13.63:443
      40 B
      1
    • 93.184.220.29:80
      322 B
      7
    • 93.184.221.240:80
      322 B
      7
    • 93.184.221.240:80
      322 B
      7
    • 93.184.221.240:80
      322 B
      7
    • 104.80.225.205:443
      322 B
      7
    • 93.184.220.29:80
      260 B
      5
    • 40.125.122.176:443
      260 B
      5
    • 93.184.221.240:80
      322 B
      7
    • 40.125.122.176:443
      260 B
      5
    • 93.184.221.240:80
      260 B
      5
    • 20.189.173.2:443
      276 B
      6
    • 8.8.8.8:53
      15.89.54.20.in-addr.arpa
      dns
      70 B
      156 B
      1
      1

      DNS Request

      15.89.54.20.in-addr.arpa

    • 8.8.8.8:53
      d.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa
      dns
      118 B
      204 B
      1
      1

      DNS Request

      d.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/532-132-0x0000000002170000-0x0000000002174000-memory.dmp

      Filesize

      16KB

    • memory/532-133-0x0000000002170000-0x0000000002174000-memory.dmp

      Filesize

      16KB

    • memory/532-134-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.