Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
28/03/2024, 22:19 UTC
Static task
static1
Behavioral task
behavioral1
Sample
7df20a28b55f2ba45d3d77b4855fea5f9f2f84a83f7256a8bb51c7ef2a1ae1b3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7df20a28b55f2ba45d3d77b4855fea5f9f2f84a83f7256a8bb51c7ef2a1ae1b3.exe
Resource
win10v2004-20240226-en
General
-
Target
7df20a28b55f2ba45d3d77b4855fea5f9f2f84a83f7256a8bb51c7ef2a1ae1b3.exe
-
Size
14KB
-
MD5
0a540175ed42a291dbc82790b6f5582e
-
SHA1
ce8174e7d5b09af53bfe364bc45aeafa3566cd4a
-
SHA256
7df20a28b55f2ba45d3d77b4855fea5f9f2f84a83f7256a8bb51c7ef2a1ae1b3
-
SHA512
883b0af33b5f5a5370513eb403b1505546b3f48493373ab0f61d1038c22a8d95d2cbca739afc41314108f2cc01044882fdbca4844e2424fd96ecaab581afb6fc
-
SSDEEP
192:5xzwg5iriNrRY3iGRWYw25Dx6KPOpsktmTQEABKsvmQ6uOtf8TGPqDE045HQkxQJ:HcgY16KPOiam0pBrmQ6QDE045H5CFFF
Malware Config
Signatures
Processes
Network
-
Remote address:8.8.8.8:53Request196.249.167.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request0.205.248.87.in-addr.arpaIN PTRResponse0.205.248.87.in-addr.arpaIN PTRhttps-87-248-205-0lgwllnwnet
-
Remote address:8.8.8.8:53Request74.32.126.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request104.219.191.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request217.106.137.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request28.118.140.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request103.169.127.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request206.23.85.13.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request217.135.221.88.in-addr.arpaIN PTRResponse217.135.221.88.in-addr.arpaIN PTRa88-221-135-217deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request217.135.221.88.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Request218.135.221.88.in-addr.arpaIN PTRResponse218.135.221.88.in-addr.arpaIN PTRa88-221-135-218deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request21.236.111.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request59.134.221.88.in-addr.arpaIN PTRResponse59.134.221.88.in-addr.arpaIN PTRa88-221-134-59deploystaticakamaitechnologiescom
-
73 B 147 B 1 1
DNS Request
196.249.167.52.in-addr.arpa
-
71 B 116 B 1 1
DNS Request
0.205.248.87.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
74.32.126.40.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
104.219.191.52.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
217.106.137.52.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
28.118.140.52.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
103.169.127.40.in-addr.arpa
-
71 B 145 B 1 1
DNS Request
206.23.85.13.in-addr.arpa
-
146 B 139 B 2 1
DNS Request
217.135.221.88.in-addr.arpa
DNS Request
217.135.221.88.in-addr.arpa
-
73 B 139 B 1 1
DNS Request
218.135.221.88.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
21.236.111.52.in-addr.arpa
-
72 B 137 B 1 1
DNS Request
59.134.221.88.in-addr.arpa