Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
106s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
07/06/2024, 01:47 UTC
Static task
static1
Behavioral task
behavioral1
Sample
76d9f909b801ad442e5b96efbe722ea6.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
76d9f909b801ad442e5b96efbe722ea6.exe
Resource
win10v2004-20240426-en
General
-
Target
76d9f909b801ad442e5b96efbe722ea6.exe
-
Size
1.6MB
-
MD5
76d9f909b801ad442e5b96efbe722ea6
-
SHA1
d3972911f2af7cb09db43e4f1dadd6c359d7a9b2
-
SHA256
3a27eea1a1b02b56f74dfcafcfe1a7003759be6ae058ba9f1261400592642884
-
SHA512
0dbce38edcdcd8304a48fc915b18c9e7bcd58261e2406027102aec8161bb138cad8837d201ef1faca25e57575f01c1d8dab124bf6e479972f2ff502f4d1385d2
-
SSDEEP
24576:gKp1H5vP6lJ3CQvfJFiG8cHmyepJTKzv2O8WjSJXZ2VQqeAyshWmAao32iG:gsV2JhJF1eq4JXZ2VxexcuG
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
pid Process 4580 76d9f909b801ad442e5b96efbe722ea6.exe 4580 76d9f909b801ad442e5b96efbe722ea6.exe
Processes
Network
-
Remote address:8.8.8.8:53Request8.8.8.8.in-addr.arpaIN PTRResponse8.8.8.8.in-addr.arpaIN PTRdnsgoogle
-
Remote address:8.8.8.8:53Request13.86.106.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request144.107.17.2.in-addr.arpaIN PTRResponse144.107.17.2.in-addr.arpaIN PTRa2-17-107-144deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request140.32.126.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request95.221.229.192.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request228.249.119.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request86.23.85.13.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request198.187.3.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request14.227.111.52.in-addr.arpaIN PTRResponse
-
66 B 90 B 1 1
DNS Request
8.8.8.8.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
13.86.106.20.in-addr.arpa
-
71 B 135 B 1 1
DNS Request
144.107.17.2.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
140.32.126.40.in-addr.arpa
-
73 B 144 B 1 1
DNS Request
95.221.229.192.in-addr.arpa
-
73 B 159 B 1 1
DNS Request
228.249.119.40.in-addr.arpa
-
70 B 144 B 1 1
DNS Request
86.23.85.13.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
198.187.3.20.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
14.227.111.52.in-addr.arpa
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD53b110b7a551c73926524da399a79befb
SHA1ae4a0bc7cc0f1fe6739aa36f17cd18ae02c4086b
SHA256ab44e943da76699cd1b603c789ba5969f8203c16d59afa1a685c703b218e1d05
SHA512bcabd4e3161c48c01eb404d900dd521ca715a8e18072f64c717b3df347e1cb461a0ae6b386b56ea8387377071fd79d6e5ba84d201b259ca4092f76145bfefff5