Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    151s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/10/2023, 23:02 UTC

General

  • Target

    883e52f9227a27cde9dd0212269b5e4a0dd3a0dc849e889fc5c0c7b2719d63ce.exe

  • Size

    819KB

  • MD5

    34b3a68927ea29512eba1da7e7ceedc7

  • SHA1

    e2b95c91e5a89f59ac78900e56742b82f53ba107

  • SHA256

    883e52f9227a27cde9dd0212269b5e4a0dd3a0dc849e889fc5c0c7b2719d63ce

  • SHA512

    00a205c5d727029a201f3e474c2895b4d78ce2c10fe43f2017bf86f6b05968728f8d03e3e4b583f11771a566ac82ef3a23a52cffd0cd3d7b38fa1117d3917250

  • SSDEEP

    12288:FLL1xDRqBhO59MnLjq3hEh0aW6pcKQEga9Pq6UJYqCj3mMrxP6l4+Ye7M5CCp3ZT:FLQOaLjq3hElLptLfGzQTSn5L7gA4tb

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\883e52f9227a27cde9dd0212269b5e4a0dd3a0dc849e889fc5c0c7b2719d63ce.exe
    "C:\Users\Admin\AppData\Local\Temp\883e52f9227a27cde9dd0212269b5e4a0dd3a0dc849e889fc5c0c7b2719d63ce.exe"
    1⤵
      PID:4892

    Network

    • flag-us
      DNS
      59.128.231.4.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      59.128.231.4.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      64.159.190.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      64.159.190.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      95.221.229.192.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      95.221.229.192.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      241.154.82.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      241.154.82.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      29.81.57.23.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      29.81.57.23.in-addr.arpa
      IN PTR
      Response
      29.81.57.23.in-addr.arpa
      IN PTR
      a23-57-81-29deploystaticakamaitechnologiescom
    • flag-us
      DNS
      2.136.104.51.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      2.136.104.51.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      103.169.127.40.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      103.169.127.40.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      126.179.238.8.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      126.179.238.8.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      18.31.95.13.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      18.31.95.13.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      1.173.189.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      1.173.189.20.in-addr.arpa
      IN PTR
      Response
    No results found
    • 8.8.8.8:53
      59.128.231.4.in-addr.arpa
      dns
      71 B
      157 B
      1
      1

      DNS Request

      59.128.231.4.in-addr.arpa

    • 8.8.8.8:53
      64.159.190.20.in-addr.arpa
      dns
      72 B
      158 B
      1
      1

      DNS Request

      64.159.190.20.in-addr.arpa

    • 8.8.8.8:53
      95.221.229.192.in-addr.arpa
      dns
      73 B
      144 B
      1
      1

      DNS Request

      95.221.229.192.in-addr.arpa

    • 8.8.8.8:53
      241.154.82.20.in-addr.arpa
      dns
      72 B
      158 B
      1
      1

      DNS Request

      241.154.82.20.in-addr.arpa

    • 8.8.8.8:53
      29.81.57.23.in-addr.arpa
      dns
      70 B
      133 B
      1
      1

      DNS Request

      29.81.57.23.in-addr.arpa

    • 8.8.8.8:53
      2.136.104.51.in-addr.arpa
      dns
      71 B
      157 B
      1
      1

      DNS Request

      2.136.104.51.in-addr.arpa

    • 8.8.8.8:53
      103.169.127.40.in-addr.arpa
      dns
      73 B
      147 B
      1
      1

      DNS Request

      103.169.127.40.in-addr.arpa

    • 8.8.8.8:53
      126.179.238.8.in-addr.arpa
      dns
      72 B
      126 B
      1
      1

      DNS Request

      126.179.238.8.in-addr.arpa

    • 8.8.8.8:53
      18.31.95.13.in-addr.arpa
      dns
      70 B
      144 B
      1
      1

      DNS Request

      18.31.95.13.in-addr.arpa

    • 8.8.8.8:53
      1.173.189.20.in-addr.arpa
      dns
      71 B
      157 B
      1
      1

      DNS Request

      1.173.189.20.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.