Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

02/02/2024, 15:59 UTC

240202-te4t8scbdp 10

02/02/2024, 15:54 UTC

240202-tcesbscahk 10

Analysis

  • max time kernel
    1081s
  • max time network
    1170s
  • platform
    windows10-1703_x64
  • resource
    win10-20231215-en
  • resource tags

    arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system
  • submitted
    02/02/2024, 15:54 UTC

General

  • Target

    SMS sender 2023.zip

  • Size

    6.7MB

  • MD5

    80f5628447dc7fcba82df2d1b0a4b46e

  • SHA1

    bc8d7dd669bf73f0dca515056aa207aa3ac8386a

  • SHA256

    920ee4d6e16da14af70de3df554004024590cd31ac4b57c5338761b7838b3291

  • SHA512

    f70d01ec564e6cfecf011e5097712197d8e60405d9a123aa7a3ebecb17a3171a822aea090c79850c0ef750b568a7ff2f5cedb911b56db789f4293c98ac04389a

  • SSDEEP

    98304:6nU5cAAMcMaidXUyN48SvdAbjy5Eybnb0glIEaBaevVBHFyi07PAfbvYlRGiprNb:BaMDPkAMFOcEyvhGbvHFyBP+bkpA+8EP

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\SMS sender 2023.zip"
    1⤵
      PID:2596

    Network

    • flag-us
      DNS
      43.229.111.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      43.229.111.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      210.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      210.178.17.96.in-addr.arpa
      IN PTR
      Response
      210.178.17.96.in-addr.arpa
      IN PTR
      a96-17-178-210deploystaticakamaitechnologiescom
    • flag-us
      DNS
      23.173.189.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      23.173.189.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      57.110.18.2.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      57.110.18.2.in-addr.arpa
      IN PTR
      Response
      57.110.18.2.in-addr.arpa
      IN PTR
      a2-18-110-57deploystaticakamaitechnologiescom
    • flag-us
      DNS
      198.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      198.178.17.96.in-addr.arpa
      IN PTR
      Response
      198.178.17.96.in-addr.arpa
      IN PTR
      a96-17-178-198deploystaticakamaitechnologiescom
    • flag-us
      DNS
      81.171.91.138.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      81.171.91.138.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      79.121.231.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      79.121.231.20.in-addr.arpa
      IN PTR
      Response
    No results found
    • 8.8.8.8:53
      43.229.111.52.in-addr.arpa
      dns
      72 B
      158 B
      1
      1

      DNS Request

      43.229.111.52.in-addr.arpa

    • 8.8.8.8:53
      210.178.17.96.in-addr.arpa
      dns
      72 B
      137 B
      1
      1

      DNS Request

      210.178.17.96.in-addr.arpa

    • 8.8.8.8:53
      23.173.189.20.in-addr.arpa
      dns
      72 B
      158 B
      1
      1

      DNS Request

      23.173.189.20.in-addr.arpa

    • 8.8.8.8:53
      57.110.18.2.in-addr.arpa
      dns
      70 B
      133 B
      1
      1

      DNS Request

      57.110.18.2.in-addr.arpa

    • 8.8.8.8:53
      198.178.17.96.in-addr.arpa
      dns
      72 B
      137 B
      1
      1

      DNS Request

      198.178.17.96.in-addr.arpa

    • 8.8.8.8:53
      81.171.91.138.in-addr.arpa
      dns
      72 B
      146 B
      1
      1

      DNS Request

      81.171.91.138.in-addr.arpa

    • 8.8.8.8:53
      79.121.231.20.in-addr.arpa
      dns
      72 B
      158 B
      1
      1

      DNS Request

      79.121.231.20.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.