Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

MerekV3.08_Lite.rar

windows7-x64

4

MerekV3.08_Lite.rar

windows10-2004-x64

7

MerekV3.08...DME.md

windows7-x64

3

MerekV3.08...DME.md

windows10-2004-x64

3

MerekV3.08...10.pyc

windows7-x64

3

MerekV3.08...10.pyc

windows10-2004-x64

3

MerekV3.08...ts.bat

windows7-x64

1

MerekV3.08...ts.bat

windows10-2004-x64

1

MerekV3.08...10.pyc

windows7-x64

3

MerekV3.08...10.pyc

windows10-2004-x64

3

MerekV3.08...bot.py

windows7-x64

3

MerekV3.08...bot.py

windows10-2004-x64

3

MerekV3.08...st.zip

windows7-x64

1

MerekV3.08...st.zip

windows10-2004-x64

1

best/.data...ion_id

windows7-x64

1

best/.data...ion_id

windows10-2004-x64

1

best/byteorder

windows7-x64

1

best/byteorder

windows10-2004-x64

1

best/data.pkl

windows7-x64

3

best/data.pkl

windows10-2004-x64

3

best/data/0

windows7-x64

1

best/data/0

windows10-2004-x64

1

best/data/1

windows7-x64

1

best/data/1

windows10-2004-x64

1

best/data/10

windows7-x64

1

best/data/10

windows10-2004-x64

1

best/data/100

windows7-x64

1

best/data/100

windows10-2004-x64

1

best/data/101

windows7-x64

1

best/data/101

windows10-2004-x64

1

best/data/102

windows7-x64

1

best/data/102

windows10-2004-x64

1

Analysis

  • max time kernel
    148s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/04/2024, 14:41 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    best/data/100

  • Size

    128B

  • MD5

    9f90f59e6a99e24b49d79507067f77f7

  • SHA1

    d618acd7bc41bfd13fec2efa2a962c11ddc577f3

  • SHA256

    64a3c1d59053fee43a797bba5b47f41417762affa0c9adbe22f97b8701453726

  • SHA512

    5fc1d3c4953a68fb1f5946084538daf60e1f4f8062b29e5d56dcb1443cbc7b3991174bd2183d15af46619c1170643afd0941fc0740d5d5da1b384b7e4f6fb27a

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\best\data\100
    1⤵
      PID:4688

    Network

    • flag-us
      DNS
      172.210.232.199.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      172.210.232.199.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      241.150.49.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      241.150.49.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      0.159.190.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      0.159.190.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      154.239.44.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      154.239.44.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      157.123.68.40.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      157.123.68.40.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      171.39.242.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      171.39.242.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      249.197.17.2.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      249.197.17.2.in-addr.arpa
      IN PTR
      Response
      249.197.17.2.in-addr.arpa
      IN PTR
      a2-17-197-249deploystaticakamaitechnologiescom
    • flag-us
      DNS
      240.221.184.93.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      240.221.184.93.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      13.227.111.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      13.227.111.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      89.16.208.104.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      89.16.208.104.in-addr.arpa
      IN PTR
      Response
    No results found
    • 8.8.8.8:53
      172.210.232.199.in-addr.arpa
      dns
      74 B
       128 B
       1
      1

      DNS Request

      172.210.232.199.in-addr.arpa

    • 8.8.8.8:53
      241.150.49.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      241.150.49.20.in-addr.arpa

    • 8.8.8.8:53
      0.159.190.20.in-addr.arpa
      dns
      71 B
       157 B
       1
      1

      DNS Request

      0.159.190.20.in-addr.arpa

    • 8.8.8.8:53
      154.239.44.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      154.239.44.20.in-addr.arpa

    • 8.8.8.8:53
      157.123.68.40.in-addr.arpa
      dns
      72 B
       146 B
       1
      1

      DNS Request

      157.123.68.40.in-addr.arpa

    • 8.8.8.8:53
      171.39.242.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      171.39.242.20.in-addr.arpa

    • 8.8.8.8:53
      249.197.17.2.in-addr.arpa
      dns
      71 B
       135 B
       1
      1

      DNS Request

      249.197.17.2.in-addr.arpa

    • 8.8.8.8:53
      240.221.184.93.in-addr.arpa
      dns
      73 B
       144 B
       1
      1

      DNS Request

      240.221.184.93.in-addr.arpa

    • 8.8.8.8:53
      13.227.111.52.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      13.227.111.52.in-addr.arpa

    • 8.8.8.8:53
      89.16.208.104.in-addr.arpa
      dns
      72 B
       146 B
       1
      1

      DNS Request

      89.16.208.104.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.