Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
132s -
max time network
137s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
20/05/2024, 05:00 UTC
General
-
Target
overrides/config/aether/aether_customizations.txt
-
Size
84B
-
MD5
cbb7dadd96742517600bf029d14ce08f
-
SHA1
b9f71c03578eef752fe3c401112845574529aef1
-
SHA256
113f7dfc56b7b2efdc782e45356c87c47174bb76dc34dcef24ca2ec32c7908e1
-
SHA512
baa71c60b5428daaadbc3a3e71853d981ac6db397a4c5e3cb16f8c9bfbea36c0a20bcf126887fe633ad74b28b540fa81deeeaddafd56adae624354d3771f24a8
Score
1/10
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
Processes
-
C:\Windows\system32\NOTEPAD.EXEC:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\overrides\config\aether\aether_customizations.txt1⤵
- Opens file in notepad (likely ransom note)
Network
-
DNS23.236.111.52.in-addr.arpaRemote address:8.8.8.8:53Request23.236.111.52.in-addr.arpaIN PTRResponse -
DNS77.190.18.2.in-addr.arpaRemote address:8.8.8.8:53Request77.190.18.2.in-addr.arpaIN PTRResponse77.190.18.2.in-addr.arpaIN PTRa2-18-190-77deploystaticakamaitechnologiescom
-
DNS233.17.178.52.in-addr.arpaRemote address:8.8.8.8:53Request233.17.178.52.in-addr.arpaIN PTRResponse
No results found
-
8.8.8.8:5323.236.111.52.in-addr.arpadns
DNS Request
23.236.111.52.in-addr.arpa
-
8.8.8.8:5377.190.18.2.in-addr.arpadns
DNS Request
77.190.18.2.in-addr.arpa
-
8.8.8.8:53233.17.178.52.in-addr.arpadns
DNS Request
233.17.178.52.in-addr.arpa