Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

4

Static

static

4

Denetty_Dr...ne.dll

windows11-21h2-x64

1

Denetty_Dr...sg.dll

windows11-21h2-x64

1

Denetty_Dr...sg.dll

windows11-21h2-x64

1

Denetty_Dr...ce.exe

windows11-21h2-x64

1

Denetty_Dr...fs.sys

windows11-21h2-x64

1

Denetty_Dr...ce.exe

windows11-21h2-x64

4

Denetty_Dr...VD.sys

windows11-21h2-x64

1

Denetty_Dr...ce.exe

windows11-21h2-x64

1

Denetty_Dr...ne.dll

windows11-21h2-x64

1

Denetty_Dr...sg.dll

windows11-21h2-x64

1

Denetty_Dr...sg.dll

windows11-21h2-x64

1

Denetty_Dr...ce.exe

windows11-21h2-x64

1

Denetty_Dr...AC.sys

windows11-21h2-x64

1

Denetty_Dr...fs.sys

windows11-21h2-x64

1

Denetty_Dr...ce.exe

windows11-21h2-x64

4

Denetty_Dr...ne.dll

windows11-21h2-x64

1

Denetty_Dr...sg.dll

windows11-21h2-x64

1

Denetty_Dr...sg.dll

windows11-21h2-x64

1

Denetty_Dr...fs.sys

windows11-21h2-x64

1

Denetty_Dr...ne.dll

windows11-21h2-x64

1

Denetty_Dr...sg.dll

windows11-21h2-x64

1

Denetty_Dr...fs.sys

windows11-21h2-x64

1

Denetty_Dr...cs.sys

windows11-21h2-x64

1

Denetty_Dr...cs.sys

windows11-21h2-x64

1

Denetty_Dr...ub.sys

windows11-21h2-x64

1

Denetty_Dr...hc.sys

windows11-21h2-x64

1

Denetty_Dr...ub.sys

windows11-21h2-x64

1

Denetty_Dr...hc.sys

windows11-21h2-x64

1

Denetty_Dr...xe.dll

windows11-21h2-x64

1

Denetty_Dr...xe.dll

windows11-21h2-x64

1

Denetty_Dr...xe.dll

windows11-21h2-x64

1

Denetty_Dr...xe.dll

windows11-21h2-x64

1

Resubmissions

22/05/2024, 01:04 UTC

240522-be1hpsff2v 4

21/05/2024, 23:24 UTC

240521-3dwxnsde6v 4

Analysis

  • max time kernel
    446s
  • max time network
    451s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240508-en
  • resource tags

    arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    21/05/2024, 23:24 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Denetty_Driver PCIe NVMe/Intel(R)_USB_3.0_eXtensible_Host_Controller_Driver_5.0.4.43_v2/Lang/da-DK/Setup.exe.dll

  • Size

    27KB

  • MD5

    23c200b489e30ea00d6170fd490902e9

  • SHA1

    45e9d4595e9d2c13021fe2b3521ca1b0742935f8

  • SHA256

    ec04b17ce96c93a9ccada3d08f536890ab6e0da5b1665187edaaaad800882205

  • SHA512

    5780d41edd906508f7fbabc10b9d7e71005c617db6e454faa8d1eb7844d1543293c7b2568493633deddbeb2a70cfc74a6faeb3e8396e6ee9b1240b826a9d0347

  • SSDEEP

    192:pXX/+Pzsyrqoprcl5tFmFQUSMXydJ4unK:pn/+P4yil5tFbUSMXydiuK

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Denetty_Driver PCIe NVMe\Intel(R)_USB_3.0_eXtensible_Host_Controller_Driver_5.0.4.43_v2\Lang\da-DK\Setup.exe.dll",#1
    1⤵
      PID:2988

    Network

    • flag-us
      DNS
      14.160.190.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      14.160.190.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      0.204.248.87.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      0.204.248.87.in-addr.arpa
      IN PTR
      Response
      0.204.248.87.in-addr.arpa
      IN PTR
      https-87-248-204-0lhrllnwnet
    • flag-us
      DNS
      arc.msn.com
      Remote address:
      8.8.8.8:53
      Request
      arc.msn.com
      IN A
      Response
      arc.msn.com
      IN CNAME
      arc.trafficmanager.net
      arc.trafficmanager.net
      IN CNAME
      iris-de-prod-azsc-v2-neu.northeurope.cloudapp.azure.com
      iris-de-prod-azsc-v2-neu.northeurope.cloudapp.azure.com
      IN A
      20.223.35.26
    • flag-us
      DNS
      200.197.79.204.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      200.197.79.204.in-addr.arpa
      IN PTR
      Response
      200.197.79.204.in-addr.arpa
      IN PTR
      a-0001a-msedgenet
    • flag-us
      DNS
      82.90.14.23.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      82.90.14.23.in-addr.arpa
      IN PTR
      Response
      82.90.14.23.in-addr.arpa
      IN PTR
      a23-14-90-82deploystaticakamaitechnologiescom
    • flag-us
      DNS
      nexusrules.officeapps.live.com
      Remote address:
      8.8.8.8:53
      Request
      nexusrules.officeapps.live.com
      IN A
      Response
      nexusrules.officeapps.live.com
      IN CNAME
      prod.nexusrules.live.com.akadns.net
      prod.nexusrules.live.com.akadns.net
      IN A
      52.111.227.11
    • flag-us
      DNS
      self.events.data.microsoft.com
      Remote address:
      8.8.8.8:53
      Request
      self.events.data.microsoft.com
      IN A
      Response
      self.events.data.microsoft.com
      IN CNAME
      self-events-data.trafficmanager.net
      self-events-data.trafficmanager.net
      IN CNAME
      onedscolprdwus18.westus.cloudapp.azure.com
      onedscolprdwus18.westus.cloudapp.azure.com
      IN A
      20.189.173.28
    • flag-us
      GET
      https://tse1.mm.bing.net/th?id=OADD2.10239351692118_169KB4Q73DAWIG1FE&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90
      Remote address:
      204.79.197.200:443
      Request
      GET /th?id=OADD2.10239351692118_169KB4Q73DAWIG1FE&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
      host: tse1.mm.bing.net
      accept: */*
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.22000
      Response
      HTTP/2.0 200
      cache-control: public, max-age=2592000
      content-length: 693793
      content-type: image/jpeg
      x-cache: TCP_HIT
      access-control-allow-origin: *
      access-control-allow-headers: *
      access-control-allow-methods: GET, POST, OPTIONS
      timing-allow-origin: *
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: 080DAA35DF0544D2A7730EB3A426E8E9 Ref B: LON04EDGE0710 Ref C: 2024-05-21T23:42:03Z
      date: Tue, 21 May 2024 23:42:02 GMT
    • flag-us
      GET
      https://tse1.mm.bing.net/th?id=OADD2.10239379158245_1XJD8B3ZQMO9V74PS&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90
      Remote address:
      204.79.197.200:443
      Request
      GET /th?id=OADD2.10239379158245_1XJD8B3ZQMO9V74PS&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
      host: tse1.mm.bing.net
      accept: */*
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.22000
      Response
      HTTP/2.0 200
      cache-control: public, max-age=2592000
      content-length: 651263
      content-type: image/jpeg
      x-cache: TCP_HIT
      access-control-allow-origin: *
      access-control-allow-headers: *
      access-control-allow-methods: GET, POST, OPTIONS
      timing-allow-origin: *
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: 97F55858EE1D455D8051D947A8D500FE Ref B: LON04EDGE0710 Ref C: 2024-05-21T23:42:03Z
      date: Tue, 21 May 2024 23:42:02 GMT
    • flag-us
      GET
      https://tse1.mm.bing.net/th?id=OADD2.10239351692149_1BHUYTJ09QH649VM8&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90
      Remote address:
      204.79.197.200:443
      Request
      GET /th?id=OADD2.10239351692149_1BHUYTJ09QH649VM8&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
      host: tse1.mm.bing.net
      accept: */*
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.22000
      Response
      HTTP/2.0 200
      cache-control: public, max-age=2592000
      content-length: 227022
      content-type: image/jpeg
      x-cache: TCP_HIT
      access-control-allow-origin: *
      access-control-allow-headers: *
      access-control-allow-methods: GET, POST, OPTIONS
      timing-allow-origin: *
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: 8B89E2F24B2148B9AD8EE1D384C6C7DB Ref B: LON04EDGE0710 Ref C: 2024-05-21T23:42:03Z
      date: Tue, 21 May 2024 23:42:02 GMT
    • flag-us
      GET
      https://tse1.mm.bing.net/th?id=OADD2.10239379158246_10LWZJD253TO0WTB9&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90
      Remote address:
      204.79.197.200:443
      Request
      GET /th?id=OADD2.10239379158246_10LWZJD253TO0WTB9&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
      host: tse1.mm.bing.net
      accept: */*
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.22000
      Response
      HTTP/2.0 200
      cache-control: public, max-age=2592000
      content-length: 462876
      content-type: image/jpeg
      x-cache: TCP_HIT
      access-control-allow-origin: *
      access-control-allow-headers: *
      access-control-allow-methods: GET, POST, OPTIONS
      timing-allow-origin: *
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: A2EB6D87FB344B32815954DA8C6B34C8 Ref B: LON04EDGE0710 Ref C: 2024-05-21T23:42:03Z
      date: Tue, 21 May 2024 23:42:02 GMT
    • flag-us
      GET
      https://tse1.mm.bing.net/th?id=OADD2.10239351692148_18BSZ4LAA3ARS12KX&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90
      Remote address:
      204.79.197.200:443
      Request
      GET /th?id=OADD2.10239351692148_18BSZ4LAA3ARS12KX&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
      host: tse1.mm.bing.net
      accept: */*
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.22000
      Response
      HTTP/2.0 200
      cache-control: public, max-age=2592000
      content-length: 477447
      content-type: image/jpeg
      x-cache: TCP_HIT
      access-control-allow-origin: *
      access-control-allow-headers: *
      access-control-allow-methods: GET, POST, OPTIONS
      timing-allow-origin: *
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: F29E1CBB9B314056AA4A944703630422 Ref B: LON04EDGE0710 Ref C: 2024-05-21T23:42:03Z
      date: Tue, 21 May 2024 23:42:02 GMT
    • flag-us
      GET
      https://tse1.mm.bing.net/th?id=OADD2.10239351692119_1TAMCATST9V8XN68S&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90
      Remote address:
      204.79.197.200:443
      Request
      GET /th?id=OADD2.10239351692119_1TAMCATST9V8XN68S&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
      host: tse1.mm.bing.net
      accept: */*
      accept-encoding: gzip, deflate, br
      user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.22000
      Response
      HTTP/2.0 200
      cache-control: public, max-age=2592000
      content-length: 222644
      content-type: image/jpeg
      x-cache: TCP_HIT
      access-control-allow-origin: *
      access-control-allow-headers: *
      access-control-allow-methods: GET, POST, OPTIONS
      timing-allow-origin: *
      report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
      nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
      accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
      x-msedge-ref: Ref A: 824563443DB7425CA697BDA237A68C8E Ref B: LON04EDGE0710 Ref C: 2024-05-21T23:42:03Z
      date: Tue, 21 May 2024 23:42:02 GMT
    • 204.79.197.200:443
      tse1.mm.bing.net
      tls, http2
      1.3kB
       8.1kB
       16
      14
    • 204.79.197.200:443
      tse1.mm.bing.net
      tls, http2
      1.3kB
       8.1kB
       16
      14
    • 204.79.197.200:443
      tse1.mm.bing.net
      tls, http2
      1.3kB
       8.1kB
       16
      14
    • 204.79.197.200:443
      tse1.mm.bing.net
      tls, http2
      1.3kB
       8.1kB
       16
      14
    • 204.79.197.200:443
      https://tse1.mm.bing.net/th?id=OADD2.10239351692119_1TAMCATST9V8XN68S&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90
      tls, http2
      97.4kB
       2.8MB
       2065
      2060

      HTTP Request

      GET https://tse1.mm.bing.net/th?id=OADD2.10239351692118_169KB4Q73DAWIG1FE&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

      HTTP Request

      GET https://tse1.mm.bing.net/th?id=OADD2.10239379158245_1XJD8B3ZQMO9V74PS&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

      HTTP Request

      GET https://tse1.mm.bing.net/th?id=OADD2.10239351692149_1BHUYTJ09QH649VM8&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

      HTTP Request

      GET https://tse1.mm.bing.net/th?id=OADD2.10239379158246_10LWZJD253TO0WTB9&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

      HTTP Request

      GET https://tse1.mm.bing.net/th?id=OADD2.10239351692148_18BSZ4LAA3ARS12KX&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

      HTTP Response

      200

      HTTP Response

      200

      HTTP Response

      200

      HTTP Response

      200

      HTTP Response

      200

      HTTP Request

      GET https://tse1.mm.bing.net/th?id=OADD2.10239351692119_1TAMCATST9V8XN68S&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

      HTTP Response

      200
    • 8.8.8.8:53
      14.160.190.20.in-addr.arpa
      dns
      495 B
       1.0kB
       7
      7

      DNS Request

      14.160.190.20.in-addr.arpa

      DNS Request

      0.204.248.87.in-addr.arpa

      DNS Request

      arc.msn.com

      DNS Response

      20.223.35.26

      DNS Request

      200.197.79.204.in-addr.arpa

      DNS Request

      82.90.14.23.in-addr.arpa

      DNS Request

      nexusrules.officeapps.live.com

      DNS Response

      52.111.227.11

      DNS Request

      self.events.data.microsoft.com

      DNS Response

      20.189.173.28

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.