Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    139s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/01/2023, 07:12 UTC

General

  • Target

    670df2c99944b08dfbe501219514a521b3f4b96d.dll

  • Size

    6.2MB

  • MD5

    2eb2ba9f0760c10703de1f1ad18cda02

  • SHA1

    670df2c99944b08dfbe501219514a521b3f4b96d

  • SHA256

    79d356cd49a20a22626e21939563b21814f196fb4bff33001ac235bef181a2ed

  • SHA512

    245596b2d2232040c38beda562193d5d404f023e6e7297226475633e289f5935e00c9b85a3546d85644418d439120f8b3abfa57e3ac7cc522a05f4e063cfbe7f

  • SSDEEP

    98304:Cvz7G4dWVEAR/0O76nIEB7Dx9ciwcdouYaszYbZe5lJKnU7p3OwHa9YP+djtNrb1:C7a0W5RM2SI6Vuiw9uYsbM9fmPRDnyQ

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\670df2c99944b08dfbe501219514a521b3f4b96d.dll,#1
    1⤵
      PID:3820

    Network

    • flag-unknown
      DNS
      164.2.77.40.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      164.2.77.40.in-addr.arpa
      IN PTR
      Response
    • flag-unknown
      DNS
      14.110.152.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      14.110.152.52.in-addr.arpa
      IN PTR
      Response
    • 93.184.220.29:80
      322 B
      7
    • 93.184.221.240:80
      322 B
      7
    • 20.189.173.13:443
      322 B
      7
    • 87.248.202.1:80
      322 B
      7
    • 87.248.202.1:80
      322 B
      7
    • 87.248.202.1:80
      322 B
      7
    • 40.126.31.69:443
      260 B
      5
    • 8.8.8.8:53
      164.2.77.40.in-addr.arpa
      dns
      70 B
      144 B
      1
      1

      DNS Request

      164.2.77.40.in-addr.arpa

    • 8.8.8.8:53
      14.110.152.52.in-addr.arpa
      dns
      72 B
      146 B
      1
      1

      DNS Request

      14.110.152.52.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.