Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    114s
  • max time network
    145s
  • platform
    windows10-1703_x64
  • resource
    win10-20240221-en
  • resource tags

    arch:x64arch:x86image:win10-20240221-enlocale:en-usos:windows10-1703-x64system
  • submitted
    24/02/2024, 17:30 UTC

General

  • Target

    Astolfo-Beta/assets/objects/0b/0b29f5ce8c4c10fa4184e5d29244f3bc121468a0

  • Size

    12KB

  • MD5

    79047b00ebbfe42e6f2800805d3ec888

  • SHA1

    0b29f5ce8c4c10fa4184e5d29244f3bc121468a0

  • SHA256

    0389ada7c74a150982e4b93b42c413780a672874f407f992bdfb6ffc35281f34

  • SHA512

    70c7b36e86a0cf4764149a4ba004f7e7c0a27aab1687295963b68cc1ee78ca17242973bc5bac71289c1ab476d5644f719ca9b2c52919c55b40c6d23ef25b1f34

  • SSDEEP

    384:9FQlrgTu/JAfEvbwLvD+IQfmP7bdGUi/gZFQLK:9FAoux+EjOiIb8Uie++

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\Astolfo-Beta\assets\objects\0b\0b29f5ce8c4c10fa4184e5d29244f3bc121468a0
    1⤵
      PID:4844

    Network

    • flag-us
      DNS
      13.227.111.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      13.227.111.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      90.65.42.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      90.65.42.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      178.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      178.178.17.96.in-addr.arpa
      IN PTR
      Response
      178.178.17.96.in-addr.arpa
      IN PTR
      a96-17-178-178deploystaticakamaitechnologiescom
    No results found
    • 8.8.8.8:53
      13.227.111.52.in-addr.arpa
      dns
      72 B
      158 B
      1
      1

      DNS Request

      13.227.111.52.in-addr.arpa

    • 8.8.8.8:53
      90.65.42.20.in-addr.arpa
      dns
      70 B
      156 B
      1
      1

      DNS Request

      90.65.42.20.in-addr.arpa

    • 8.8.8.8:53
      178.178.17.96.in-addr.arpa
      dns
      72 B
      137 B
      1
      1

      DNS Request

      178.178.17.96.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.