Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

5j1yFYZ7wftOfBeB

windows7-x64

1

5j1yFYZ7wftOfBeB

windows10-2004-x64

1

6ulq7PkQ4jMa3CG3

windows7-x64

1

6ulq7PkQ4jMa3CG3

windows10-2004-x64

1

7UKgaRjbLtj7Nmd3

windows7-x64

1

7UKgaRjbLtj7Nmd3

windows10-2004-x64

1

EUlp3EBVoZzDusIE

windows7-x64

1

EUlp3EBVoZzDusIE

windows10-2004-x64

1

FwNX79XwxL713ubH

windows7-x64

1

FwNX79XwxL713ubH

windows10-2004-x64

1

IgXYrHdIyByyYZ23

windows7-x64

1

IgXYrHdIyByyYZ23

windows10-2004-x64

1

IxpMALudDFwYVaf5

windows7-x64

1

IxpMALudDFwYVaf5

windows10-2004-x64

1

JqEzfGnwc8hnAIwY

windows7-x64

1

JqEzfGnwc8hnAIwY

windows10-2004-x64

1

LEMqqtVPF49FmZ7W

windows7-x64

1

LEMqqtVPF49FmZ7W

windows10-2004-x64

1

RuntimeIni...s.json

windows7-x64

3

RuntimeIni...s.json

windows10-2004-x64

3

ScriptingA...s.json

windows7-x64

3

ScriptingA...s.json

windows10-2004-x64

3

System.Dat...es.dat

windows7-x64

3

System.Dat...es.dat

windows10-2004-x64

3

URodfDhi1apVS2I5

windows7-x64

1

URodfDhi1apVS2I5

windows10-2004-x64

1

UnityServi...n.json

windows7-x64

3

UnityServi...n.json

windows10-2004-x64

3

V21k9r3Ax9VAZivr

windows7-x64

1

V21k9r3Ax9VAZivr

windows10-2004-x64

1

VBpk2rQvTZJtfs5Y

windows7-x64

1

VBpk2rQvTZJtfs5Y

windows10-2004-x64

1

Analysis

  • max time kernel
    128s
  • max time network
    165s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/09/2023, 09:53 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    VBpk2rQvTZJtfs5Y

  • Size

    30KB

  • MD5

    583e1b7c59b0e57f2a88c367ffcbe2e0

  • SHA1

    ca43b8c4a1019c90ff769fbbd59b73218513b99c

  • SHA256

    141b9b3b0e260126519086a16fa61a1e0ea6917194ce982f087895e16641f6a9

  • SHA512

    73868cf22220f492f3c9405040e7d3db5062f23a7d60a2c1e5fcb5633da67367b858b60e0eae761a29d778a5febf306fefe97c695ca7f528f509bd0bada3fd6a

  • SSDEEP

    768:ykWfwZcazxFu5iBFWnwvNy0Pj5lxXznuIH3Xoug0CY/c3uPJL2:CfwZJzxEEBNv71lxXzuIH3Xfgb3uE

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\VBpk2rQvTZJtfs5Y
    1⤵
      PID:1280

    Network

    • flag-us
      DNS
      140.32.126.40.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      140.32.126.40.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      241.154.82.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      241.154.82.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      43.58.199.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      43.58.199.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      41.110.16.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      41.110.16.96.in-addr.arpa
      IN PTR
      Response
      41.110.16.96.in-addr.arpa
      IN PTR
      a96-16-110-41deploystaticakamaitechnologiescom
    • flag-us
      DNS
      95.221.229.192.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      95.221.229.192.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      50.23.12.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      50.23.12.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      198.187.3.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      198.187.3.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      8.3.197.209.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      8.3.197.209.in-addr.arpa
      IN PTR
      Response
      8.3.197.209.in-addr.arpa
      IN PTR
      vip0x008map2sslhwcdnnet
    • flag-us
      DNS
      240.81.21.72.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      240.81.21.72.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      48.229.111.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      48.229.111.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      254.211.247.8.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      254.211.247.8.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      10.173.189.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      10.173.189.20.in-addr.arpa
      IN PTR
      Response
    No results found
    • 8.8.8.8:53
      140.32.126.40.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      140.32.126.40.in-addr.arpa

    • 8.8.8.8:53
      241.154.82.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      241.154.82.20.in-addr.arpa

    • 8.8.8.8:53
      43.58.199.20.in-addr.arpa
      dns
      71 B
       157 B
       1
      1

      DNS Request

      43.58.199.20.in-addr.arpa

    • 8.8.8.8:53
      41.110.16.96.in-addr.arpa
      dns
      71 B
       135 B
       1
      1

      DNS Request

      41.110.16.96.in-addr.arpa

    • 8.8.8.8:53
      95.221.229.192.in-addr.arpa
      dns
      73 B
       144 B
       1
      1

      DNS Request

      95.221.229.192.in-addr.arpa

    • 8.8.8.8:53
      50.23.12.20.in-addr.arpa
      dns
      70 B
       156 B
       1
      1

      DNS Request

      50.23.12.20.in-addr.arpa

    • 8.8.8.8:53
      198.187.3.20.in-addr.arpa
      dns
      71 B
       157 B
       1
      1

      DNS Request

      198.187.3.20.in-addr.arpa

    • 8.8.8.8:53
      8.3.197.209.in-addr.arpa
      dns
      70 B
       111 B
       1
      1

      DNS Request

      8.3.197.209.in-addr.arpa

    • 8.8.8.8:53
      240.81.21.72.in-addr.arpa
      dns
      71 B
       142 B
       1
      1

      DNS Request

      240.81.21.72.in-addr.arpa

    • 8.8.8.8:53
      48.229.111.52.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      48.229.111.52.in-addr.arpa

    • 8.8.8.8:53
      254.211.247.8.in-addr.arpa
      dns
      72 B
       126 B
       1
      1

      DNS Request

      254.211.247.8.in-addr.arpa

    • 8.8.8.8:53
      10.173.189.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      10.173.189.20.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.