Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
131s -
max time network
136s -
platform
windows10-1703_x64 -
resource
win10-20240221-en -
resource tags
-
submitted
26/02/2024, 07:18 UTC
General
-
Target
Ransomware-Samples-main/Cerber/Ransomware.Cerber.zip
-
Size
215KB
-
MD5
5c571c69dd75c30f95fe280ca6c624e9
-
SHA1
b0610fc5d35478c4b95c450b66d2305155776b56
-
SHA256
416774bf62d9612d11d561d7e13203a3cbc352382a8e382ade3332e3077e096c
-
SHA512
8e7b9a4a514506d9b8e0f50cc521f82b5816d4d9c27da65e4245e925ec74ac8f93f8fe006acbab5fcfd4970573b11d7ea049cc79fb14ad12a3ab6383a1c200b2
-
SSDEEP
3072:EJk9kcytz1Qg4kViSMoq9OsLvz8L5HINY8lYdeIX8woWJQHr6LqK2fU0MwL0b06R:EUkcyVlDq8rIblYomoWnvfp0g
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Ransomware-Samples-main\Cerber\Ransomware.Cerber.zip1⤵
Network
-
DNS11.227.111.52.in-addr.arpaRemote address:8.8.8.8:53Request11.227.111.52.in-addr.arpaIN PTRResponse -
DNS23.173.189.20.in-addr.arpaRemote address:8.8.8.8:53Request23.173.189.20.in-addr.arpaIN PTRResponse
-
DNS180.178.17.96.in-addr.arpaRemote address:8.8.8.8:53Request180.178.17.96.in-addr.arpaIN PTRResponse180.178.17.96.in-addr.arpaIN PTRa96-17-178-180deploystaticakamaitechnologiescom
No results found
-
8.8.8.8:5311.227.111.52.in-addr.arpadns
DNS Request
11.227.111.52.in-addr.arpa
-
8.8.8.8:5323.173.189.20.in-addr.arpadns
DNS Request
23.173.189.20.in-addr.arpa
-
8.8.8.8:53180.178.17.96.in-addr.arpadns
DNS Request
180.178.17.96.in-addr.arpa