Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

24/05/2023, 12:03 UTC

230524-n8dbgscd25 7

Analysis

  • max time kernel
    46s
  • max time network
    147s
  • platform
    windows10-1703_x64
  • resource
    win10-20230220-en
  • resource tags

    arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
  • submitted
    24/05/2023, 12:03 UTC

General

  • Target

    CraxRat V4 CRACK/MetroSet UI.dll

  • Size

    444KB

  • MD5

    d99a97de55b2561e57135433b44bb786

  • SHA1

    ab588b8d36683b52adcb32c03a9859b884838f29

  • SHA256

    6288e559b0f34d56ab4601ffb2ba2289001c77cf7351d135dd93915034c56bba

  • SHA512

    7ef95cb161265fcf110ba843fe3af5e6cf6d47465e17a10c742256bebd91c128df2cfa7d21696d716bfa861c952d6fad445912f8cca9da9cb03d780211b0545c

  • SSDEEP

    6144:PTJ1DwrSfCmrB0O1SIai39IkRetlJT4ihPrsAgbP2UiuE2Bnw7M:rJSpmaxIephPrYDK

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\CraxRat V4 CRACK\MetroSet UI.dll",#1
    1⤵
      PID:5080

    Network

    • flag-us
      DNS
      64.13.109.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      64.13.109.52.in-addr.arpa
      IN PTR
      Response
    • 52.168.112.66:443
      322 B
      7
    • 87.248.202.1:80
      322 B
      7
    • 8.8.8.8:53
      64.13.109.52.in-addr.arpa
      dns
      71 B
      145 B
      1
      1

      DNS Request

      64.13.109.52.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.