Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
316s -
max time network
875s -
platform
windows10-1703_x64 -
resource
win10-20231220-en -
resource tags
-
submitted
02/02/2024, 15:54 UTC
General
-
Target
SMS sender 2023/SMS sender 2023/dnlib.dll
-
Size
1.2MB
-
MD5
a35b13c0996f83ab97a83205a3653cf4
-
SHA1
97bd8754e4baca421fcf5d9b42ec759b13f2afb3
-
SHA256
81567965f22b9065d9e41f3c6cd75855b360c2b5e74d4a149c9e049f56782f5b
-
SHA512
5570a899d87768f9088810790a5962bb4875f08eba94d7e7f7f1b245dbfd22d121f81163db5d2b00b3a26720ba6ae4b52873391cab18b4ccacb86cb55fdb971c
-
SSDEEP
12288:4ztF8lIxmFE8Ae2wx4i77vZHfLDAeBopgVU732A5HxUPwxTjMD4CITBC5v7f79nW:4OIYCDvw6iNAekgglRTBh1C5v7fUhb
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\SMS sender 2023\SMS sender 2023\dnlib.dll",#11⤵
Network
-
DNS57.110.18.2.in-addr.arpaRemote address:8.8.8.8:53Request57.110.18.2.in-addr.arpaIN PTRResponse57.110.18.2.in-addr.arpaIN PTRa2-18-110-57deploystaticakamaitechnologiescom -
DNS74.239.69.13.in-addr.arpaRemote address:8.8.8.8:53Request74.239.69.13.in-addr.arpaIN PTRResponse
-
DNS79.121.231.20.in-addr.arpaRemote address:8.8.8.8:53Request79.121.231.20.in-addr.arpaIN PTRResponse
-
DNS201.178.17.96.in-addr.arpaRemote address:8.8.8.8:53Request201.178.17.96.in-addr.arpaIN PTRResponse201.178.17.96.in-addr.arpaIN PTRa96-17-178-201deploystaticakamaitechnologiescom
No results found
-
8.8.8.8:5357.110.18.2.in-addr.arpadns
DNS Request
57.110.18.2.in-addr.arpa
-
8.8.8.8:5374.239.69.13.in-addr.arpadns
DNS Request
74.239.69.13.in-addr.arpa
-
8.8.8.8:5379.121.231.20.in-addr.arpadns
DNS Request
79.121.231.20.in-addr.arpa
-
8.8.8.8:53201.178.17.96.in-addr.arpadns
DNS Request
201.178.17.96.in-addr.arpa