Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
28/05/2024, 22:28 UTC
Static task
static1
Behavioral task
behavioral1
Sample
97335da6df8ba45babb4fa9fa1cf81afad5eae0bdd5f83ef60622d368692c793.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
97335da6df8ba45babb4fa9fa1cf81afad5eae0bdd5f83ef60622d368692c793.exe
Resource
win10v2004-20240426-en
General
-
Target
97335da6df8ba45babb4fa9fa1cf81afad5eae0bdd5f83ef60622d368692c793.exe
-
Size
14.5MB
-
MD5
deba7797c1eb358689eb09accaf0b857
-
SHA1
4da5adb9c5fd90c89de450409078ed0b385927a0
-
SHA256
97335da6df8ba45babb4fa9fa1cf81afad5eae0bdd5f83ef60622d368692c793
-
SHA512
460589844cf7500ccda19a40d39eaf8ccd91311c9fad9337775ca67aea3f631271c393c8fc8fc29f3c443687fe5ec49fc8d645f8d4903f8439a5144ba860840b
-
SSDEEP
196608:b+jBE0BE3VczUxPBBrxCItCb++Q8ZJrMdGB66aYcBRt3pPmkfdKYdHiAyx4Lh:NzBNlDP8Q16XcXt3puw4YHh
Malware Config
Signatures
Processes
Network
-
Remote address:8.8.8.8:53Request232.168.11.51.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request82.90.14.23.in-addr.arpaIN PTRResponse82.90.14.23.in-addr.arpaIN PTRa23-14-90-82deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request76.32.126.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request154.239.44.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request133.211.185.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request50.23.12.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request206.23.85.13.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request240.221.184.93.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request13.227.111.52.in-addr.arpaIN PTRResponse
-
72 B 158 B 1 1
DNS Request
232.168.11.51.in-addr.arpa
-
70 B 133 B 1 1
DNS Request
82.90.14.23.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
76.32.126.40.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
154.239.44.20.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
133.211.185.52.in-addr.arpa
-
70 B 156 B 1 1
DNS Request
50.23.12.20.in-addr.arpa
-
71 B 145 B 1 1
DNS Request
206.23.85.13.in-addr.arpa
-
73 B 144 B 1 1
DNS Request
240.221.184.93.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
13.227.111.52.in-addr.arpa