Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1s
  • max time network
    7s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/03/2024, 00:46 UTC

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\280-100-0x0000000000400000-0x000000000155A000-memory.exe command="C:\Users\Admin\AppData\Local\Temp\280-100-0x0000000000400000-0x000000000155A000-memory.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: Invalid access to memory location.

General

  • Target

    280-100-0x0000000000400000-0x000000000155A000-memory.exe

  • Size

    17.4MB

  • MD5

    38396805290001b31cc2aa11b5d39e36

  • SHA1

    8260e7aa5f5c7d192fada1b342db4164971af723

  • SHA256

    76af240ba5db78f8bbe51492a1ef0440edc9edde11810906c368376eafe5fb74

  • SHA512

    ae036bd8ed1284f0d2e9d1d4367fcbb082c195ef11f043130be55b85f7b5f9a8a3b17226d90bb53f2941c1aa94236011d5e862bd4329d6442334e37e8dea6496

  • SSDEEP

    12288:msYSsp5R3j0Tj4XaW4I7NM0B9a09yGLOSfmiXG:S3JNBeNSOB

Score
1/10

Malware Config

Signatures

Processes

Network

  • flag-us
    DNS
    79.121.231.20.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    79.121.231.20.in-addr.arpa
    IN PTR
    Response
No results found
  • 8.8.8.8:53
    79.121.231.20.in-addr.arpa
    dns
    72 B
    158 B
    1
    1

    DNS Request

    79.121.231.20.in-addr.arpa

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.