Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
186s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
15/01/2023, 18:57 UTC
General
-
Target
OBS/Configuration/About/da-DK/WWAHost.exe.dll
-
Size
20KB
-
MD5
daf094a75e2a69f02bd7b1763654932c
-
SHA1
03e789ff7c1d16c060e1a578b7060790e984063e
-
SHA256
bafeceec460bf582db34e081b10eb9bb6d72bb4ab8f21b0b3308abd685da3660
-
SHA512
21ad4093b55d1ad76c68e86f8b90f38320eb2aa7076ef3a157997c0b505a2d0857f5fd737b513eb2a906ebab1a4ca89e87ebdba22ed826e4f1917aec4ffec940
-
SSDEEP
192:LZKApzPQ/n+GjY+1WGMMJ++GXYhn4+eeDGryI8SWt2gDcVW5+AWSUNwJWQ:9KOE/tsMVnfg8SWpDcVWYAWSUNwJWQ
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\OBS\Configuration\About\da-DK\WWAHost.exe.dll,#11⤵
Network
-
DNS151.122.125.40.in-addr.arpaRemote address:8.8.8.8:53Request151.122.125.40.in-addr.arpaIN PTRResponse -
DNS151.122.125.40.in-addr.arpaRemote address:8.8.8.8:53Request151.122.125.40.in-addr.arpaIN PTR
-
DNS106.89.54.20.in-addr.arpaRemote address:8.8.8.8:53Request106.89.54.20.in-addr.arpaIN PTRResponse
-
DNSa.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpaRemote address:8.8.8.8:53Requesta.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpaIN PTRResponse
-
209.197.3.8:80
-
96.16.53.148:80
-
96.16.53.148:80
-
104.208.16.90:443
-
96.16.53.148:80
-
96.16.53.148:80
-
96.16.53.148:80
-
104.80.225.205:443
-
8.8.8.8:53151.122.125.40.in-addr.arpadns
DNS Request
151.122.125.40.in-addr.arpa
DNS Request
151.122.125.40.in-addr.arpa
-
8.8.8.8:53106.89.54.20.in-addr.arpadns
DNS Request
106.89.54.20.in-addr.arpa
-
8.8.8.8:53a.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpadns
DNS Request
a.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa