Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
135s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
23/05/2023, 18:56 UTC
General
-
Target
c6248803181e4fb5bda083192b4f9939ce7ffc2e7a0c0a16719c8539f6b07e85.exe
-
Size
6.4MB
-
MD5
c00ed53446e0183f5f5838709f302e6b
-
SHA1
d84bc78528d684453afbac7af799582852160c21
-
SHA256
c6248803181e4fb5bda083192b4f9939ce7ffc2e7a0c0a16719c8539f6b07e85
-
SHA512
a1b5901cd1a5590d465247d8a1aa32d1d43abb4c17e39ba926e4617ebc38d808d71011cc8b985a5af0b6bb70604f7ede63e6a8f4ca27496afc34e6ee7e95947a
-
SSDEEP
196608:Dfm1HZBQcpO+hK73RzQTNi2GDdXB0j/lg2o:DfoQcpteeNi2GDdXB06D
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\c6248803181e4fb5bda083192b4f9939ce7ffc2e7a0c0a16719c8539f6b07e85.exe"C:\Users\Admin\AppData\Local\Temp\c6248803181e4fb5bda083192b4f9939ce7ffc2e7a0c0a16719c8539f6b07e85.exe"1⤵
Network
-
DNS232.168.11.51.in-addr.arpaRemote address:8.8.8.8:53Request232.168.11.51.in-addr.arpaIN PTRResponse -
DNS44.8.109.52.in-addr.arpaRemote address:8.8.8.8:53Request44.8.109.52.in-addr.arpaIN PTRResponse
-
117.18.237.29:80
-
40.125.122.176:443
-
20.189.173.1:443
-
8.238.177.126:80 -
173.223.113.164:443
-
173.223.113.131:80
-
40.125.122.176:443
-
8.238.177.126:80
-
40.125.122.176:443
-
40.125.122.176:443
-
40.125.122.176:443
-
40.125.122.176:443
-
8.8.8.8:53232.168.11.51.in-addr.arpadns
DNS Request
232.168.11.51.in-addr.arpa
-
8.8.8.8:5344.8.109.52.in-addr.arpadns
DNS Request
44.8.109.52.in-addr.arpa