Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2s -
max time network
11s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
07/11/2023, 13:42 UTC
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\dig.exe
command="C:\Users\Admin\AppData\Local\Temp\dig.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
-
Target
dig.exe
-
Size
148KB
-
MD5
0b412f4fc8f575b0060ea040872a3130
-
SHA1
043472407988544e0ff745b86e5065c1e2f00939
-
SHA256
aaa83a5365faa61c0aa3850c4cc08dd4dc84029c50d9c6d69421409cd508373b
-
SHA512
934dd80dc0953ba3e93e721135fa500ade2a7075e45db3243473e7814d5305240611c332ac296205f156ea28d6d69aaadd261f4c7e45f223c332c96f6412707d
-
SSDEEP
3072:hPevywAZXkx2yO8IUJwlQNuyq1G+R6Pxj2pZmUj:J8I6+QNuywlaj2X
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\dig.exe"C:\Users\Admin\AppData\Local\Temp\dig.exe"1⤵
Network
-
DNS73.159.190.20.in-addr.arpaRemote address:8.8.8.8:53Request73.159.190.20.in-addr.arpaIN PTRResponse -
DNS95.221.229.192.in-addr.arpaRemote address:8.8.8.8:53Request95.221.229.192.in-addr.arpaIN PTRResponse
-
DNS240.221.184.93.in-addr.arpaRemote address:8.8.8.8:53Request240.221.184.93.in-addr.arpaIN PTRResponse
-
DNS9.228.82.20.in-addr.arpaRemote address:8.8.8.8:53Request9.228.82.20.in-addr.arpaIN PTRResponse
-
20.73.194.208:443
-
8.8.8.8:5373.159.190.20.in-addr.arpadns
DNS Request
73.159.190.20.in-addr.arpa
-
8.8.8.8:5395.221.229.192.in-addr.arpadns
DNS Request
95.221.229.192.in-addr.arpa
-
8.8.8.8:53240.221.184.93.in-addr.arpadns
DNS Request
240.221.184.93.in-addr.arpa
-
8.8.8.8:539.228.82.20.in-addr.arpadns
DNS Request
9.228.82.20.in-addr.arpa
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
216KB