Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

15/10/2024, 15:36 UTC

241015-s1zlzasdkc 10

01/07/2024, 18:32 UTC

240701-w6yteawhmq 10

01/07/2024, 14:52 UTC

240701-r82wmaxdnd 10

01/07/2024, 14:52 UTC

240701-r8syqa1dpp 10

11/03/2024, 21:22 UTC

240311-z8dsssgg58 10

01/09/2021, 13:18 UTC

210901-5bmxjspa5s 10

01/09/2021, 13:04 UTC

210901-te4btfspqa 10

01/09/2021, 05:12 UTC

210901-4wnkwm1p3j 10

31/08/2021, 21:47 UTC

210831-41rp97dma2 10

Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01/07/2024, 18:32 UTC

General

  • Target

    Setup (17).exe

  • Size

    631KB

  • MD5

    cb927513ff8ebff4dd52a47f7e42f934

  • SHA1

    0de47c02a8adc4940a6c18621b4e4a619641d029

  • SHA256

    fd5c970806fba1500cbb6af5328329aeb43b8de3f02d90ec5d8cd1d57711622f

  • SHA512

    988c8fd886a9155b7d190faf2ce6b34d910efcffcf1c6251f18a9d0c804a0ea26a89679273033ac98b200363c536426efd1ae9de445c34e660369abb06f0071c

  • SSDEEP

    12288:0qtavSvIGmVujfIzEQlzlmgGak6H3lP3XJik0YhBhrj05:0qsVrYyl876j0KDrj05

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Setup (17).exe
    "C:\Users\Admin\AppData\Local\Temp\Setup (17).exe"
    1⤵
      PID:1244

    Network

    • flag-us
      DNS
      wfsdragon.ru
      Setup (17).exe
      Remote address:
      8.8.8.8:53
      Request
      wfsdragon.ru
      IN A
      Response
      wfsdragon.ru
      IN A
      172.67.133.215
      wfsdragon.ru
      IN A
      104.21.5.208
    • flag-us
      GET
      http://wfsdragon.ru/api/setStats.php
      Setup (17).exe
      Remote address:
      172.67.133.215:80
      Request
      GET /api/setStats.php HTTP/1.1
      Connection: Keep-Alive
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36
      Host: wfsdragon.ru
      Response
      HTTP/1.1 404 Not Found
      Date: Mon, 01 Jul 2024 18:33:59 GMT
      Content-Type: text/html; charset=iso-8859-1
      Transfer-Encoding: chunked
      Connection: keep-alive
      CF-Cache-Status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tj10V%2FnhI1BJkjIWhEYE%2BSisOuRqyOIwMpkbwmFGHEiao29JXVLwmvspDnBr0vMrq6pot4zM8cr8YJOHQShae1Z9tYxmwagafVz3p7Zz1jprwpaHhlspre1UTqYflT8%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 89c87ccffaff9401-LHR
      alt-svc: h3=":443"; ma=86400
    • 37.0.8.235:80
      Setup (17).exe
      152 B
      3
    • 37.0.11.8:80
      Setup (17).exe
      152 B
      3
    • 172.67.133.215:80
      http://wfsdragon.ru/api/setStats.php
      http
      Setup (17).exe
      483 B
      1.9kB
      6
      5

      HTTP Request

      GET http://wfsdragon.ru/api/setStats.php

      HTTP Response

      404
    • 37.0.10.236:80
      Setup (17).exe
      152 B
      3
    • 8.8.8.8:53
      wfsdragon.ru
      dns
      Setup (17).exe
      58 B
      90 B
      1
      1

      DNS Request

      wfsdragon.ru

      DNS Response

      172.67.133.215
      104.21.5.208

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.