Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
13/10/2023, 23:02 UTC
Static task
static1
Behavioral task
behavioral1
Sample
883e52f9227a27cde9dd0212269b5e4a0dd3a0dc849e889fc5c0c7b2719d63ce.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
883e52f9227a27cde9dd0212269b5e4a0dd3a0dc849e889fc5c0c7b2719d63ce.exe
Resource
win10v2004-20230915-en
General
-
Target
883e52f9227a27cde9dd0212269b5e4a0dd3a0dc849e889fc5c0c7b2719d63ce.exe
-
Size
819KB
-
MD5
34b3a68927ea29512eba1da7e7ceedc7
-
SHA1
e2b95c91e5a89f59ac78900e56742b82f53ba107
-
SHA256
883e52f9227a27cde9dd0212269b5e4a0dd3a0dc849e889fc5c0c7b2719d63ce
-
SHA512
00a205c5d727029a201f3e474c2895b4d78ce2c10fe43f2017bf86f6b05968728f8d03e3e4b583f11771a566ac82ef3a23a52cffd0cd3d7b38fa1117d3917250
-
SSDEEP
12288:FLL1xDRqBhO59MnLjq3hEh0aW6pcKQEga9Pq6UJYqCj3mMrxP6l4+Ye7M5CCp3ZT:FLQOaLjq3hElLptLfGzQTSn5L7gA4tb
Malware Config
Signatures
Processes
Network
-
Remote address:8.8.8.8:53Request59.128.231.4.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request64.159.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request95.221.229.192.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request241.154.82.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request29.81.57.23.in-addr.arpaIN PTRResponse29.81.57.23.in-addr.arpaIN PTRa23-57-81-29deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request2.136.104.51.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request103.169.127.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request126.179.238.8.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request18.31.95.13.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request1.173.189.20.in-addr.arpaIN PTRResponse
-
71 B 157 B 1 1
DNS Request
59.128.231.4.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
64.159.190.20.in-addr.arpa
-
73 B 144 B 1 1
DNS Request
95.221.229.192.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
241.154.82.20.in-addr.arpa
-
70 B 133 B 1 1
DNS Request
29.81.57.23.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
2.136.104.51.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
103.169.127.40.in-addr.arpa
-
72 B 126 B 1 1
DNS Request
126.179.238.8.in-addr.arpa
-
70 B 144 B 1 1
DNS Request
18.31.95.13.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
1.173.189.20.in-addr.arpa