Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
13/02/2024, 03:14 UTC
Static task
static1
Behavioral task
behavioral1
Sample
8af7c3f82ad26852a76b872771b62edb87eaf52d3f38332daa06f577a2122850.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8af7c3f82ad26852a76b872771b62edb87eaf52d3f38332daa06f577a2122850.exe
Resource
win10v2004-20231215-en
General
-
Target
8af7c3f82ad26852a76b872771b62edb87eaf52d3f38332daa06f577a2122850.exe
-
Size
202KB
-
MD5
09badb8acf8fe1c8d35791aa2593c118
-
SHA1
9c22f98c4d578b3f593b160362b10beb1a1ca901
-
SHA256
8af7c3f82ad26852a76b872771b62edb87eaf52d3f38332daa06f577a2122850
-
SHA512
9ace0b41912cc8b848fc619157423eb7ff118121202357c0831dbd7513a372e1c71ccb1ff8751ecb55709ed45fcec1c54583924d2555467c99823f2cbeffe955
-
SSDEEP
1536:d4Nn++cDme06rAzdtxF0dhkDgpqPh8Wiim5oQ:d4cmh/0bIgGh+oQ
Malware Config
Signatures
Processes
Network
-
Remote address:8.8.8.8:53Request28.118.140.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request178.223.142.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request23.159.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request95.221.229.192.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request228.249.119.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request50.23.12.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request198.187.3.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request18.134.221.88.in-addr.arpaIN PTRResponse18.134.221.88.in-addr.arpaIN PTRa88-221-134-18deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request19.229.111.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request209.80.50.20.in-addr.arpaIN PTRResponse
-
72 B 158 B 1 1
DNS Request
28.118.140.52.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
178.223.142.52.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
23.159.190.20.in-addr.arpa
-
73 B 144 B 1 1
DNS Request
95.221.229.192.in-addr.arpa
-
73 B 159 B 1 1
DNS Request
228.249.119.40.in-addr.arpa
-
70 B 156 B 1 1
DNS Request
50.23.12.20.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
198.187.3.20.in-addr.arpa
-
72 B 137 B 1 1
DNS Request
18.134.221.88.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
19.229.111.52.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
209.80.50.20.in-addr.arpa