Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

Nursultan_...24.zip

windows10-1703-x64

1

NursultanN...AL.dll

windows10-1703-x64

1

NursultanN...64.dll

windows10-1703-x64

1

NursultanN...ts.rar

windows10-1703-x64

3

04/04933f2...bdce8c

windows10-1703-x64

1

04/049a304...8de39b

windows10-1703-x64

1

04/04c43a7...8b9f8a

windows10-1703-x64

1

04/04d00bc...51c55d

windows10-1703-x64

1

04/04d181f...624ab2

windows10-1703-x64

1

04/04de7b3...57ff7f

windows10-1703-x64

10

04/04f5636...23aa7a

windows10-1703-x64

1

04/3d0cb49...я (3)

windows10-1703-x64

1

04/3d0cb49...пия

windows10-1703-x64

1

04/3d0cb49...я (4)

windows10-1703-x64

1

04/3d0cb49...пия

windows10-1703-x64

1

NursultanN...oc.dll

windows10-1703-x64

1

NursultanN...gl.dll

windows10-1703-x64

1

NursultanN...gl.dll

windows10-1703-x64

1

NursultanN...tb.dll

windows10-1703-x64

1

NursultanN...ft.jar

windows10-1703-x64

7

NursultanN...es.rar

windows10-1703-x64

3

natives/Nursultan.dll

windows10-1703-x64

5

natives/OpenAL.dll

windows10-1703-x64

1

natives/SA...64.dll

windows10-1703-x64

1

natives/glfw.dll

windows10-1703-x64

1

natives/jemalloc.dll

windows10-1703-x64

1

natives/lwjgl.dll

windows10-1703-x64

1

natives/lw...gl.dll

windows10-1703-x64

1

natives/lwjgl_stb.dll

windows10-1703-x64

1

natives/lw...fd.dll

windows10-1703-x64

1

NursultanN...AR.exe

windows10-1703-x64

3

NursultanN...rt.bat

windows10-1703-x64

10

Analysis

  • max time kernel
    130s
  • max time network
    137s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    23/06/2024, 13:01 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    natives/jemalloc.dll

  • Size

    248KB

  • MD5

    cdcaa2d4874a0aaab526c52e1fff2fea

  • SHA1

    8a6eb00b934da6c97b0dc9d2dc321843076c8987

  • SHA256

    b147a3cc1fce8a514a558a030fe647a4a91761769eedec1c1ca2be1cd712a9e8

  • SHA512

    270ae883818c2cea891c3efae717aa3f455c902721ad80441b0f2b28e58bf9aeba67bb1fb65d76f20d09a4c937a089ee1018439b3815b9fcdb7d7fdcce704853

  • SSDEEP

    6144:5ISPvZG+86Mzlpb2mnk5uIXhy3hKT4W5i6wb:5n86MppbkxwKMb

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\natives\jemalloc.dll,#1
    1⤵
      PID:4036

    Network

    • flag-us
      DNS
      0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.0.8.0.8.0.8.0.ip6.arpa
      Remote address:
      8.8.8.8:53
      Request
      0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.0.8.0.8.0.8.0.ip6.arpa
      IN PTR
      Response
    • flag-us
      DNS
      14.227.111.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      14.227.111.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      12.173.189.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      12.173.189.20.in-addr.arpa
      IN PTR
      Response
    No results found
    • 8.8.8.8:53
      0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.0.8.0.8.0.8.0.ip6.arpa
      dns
      118 B
       182 B
       1
      1

      DNS Request

      0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.0.8.0.8.0.8.0.ip6.arpa

    • 8.8.8.8:53
      14.227.111.52.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      14.227.111.52.in-addr.arpa

    • 8.8.8.8:53
      12.173.189.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      12.173.189.20.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.