Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

FurMark_2....64.zip

windows7-x64

1

FurMark_2....64.zip

windows10-2004-x64

1

FurMark_wi...LA.txt

windows7-x64

1

FurMark_wi...LA.txt

windows10-2004-x64

1

FurMark_wi...UI.exe

windows7-x64

1

FurMark_wi...UI.exe

windows10-2004-x64

1

FurMark_wi...ME.txt

windows7-x64

1

FurMark_wi...ME.txt

windows10-2004-x64

1

FurMark_wi...nf.xml

windows7-x64

1

FurMark_wi...nf.xml

windows10-2004-x64

1

FurMark_wi...er.exe

windows7-x64

1

FurMark_wi...er.exe

windows10-2004-x64

1

FurMark_wi...ts.txt

windows7-x64

1

FurMark_wi...ts.txt

windows10-2004-x64

1

FurMark_wi...me.txt

windows7-x64

1

FurMark_wi...me.txt

windows10-2004-x64

1

FurMark_wi...rk.exe

windows7-x64

1

FurMark_wi...rk.exe

windows10-2004-x64

1

FurMark_win64/g.dz

windows7-x64

3

FurMark_win64/g.dz

windows10-2004-x64

3

FurMark_wi...64.dll

windows7-x64

1

FurMark_wi...64.dll

windows10-2004-x64

1

FurMark_wi...LA.txt

windows7-x64

1

FurMark_wi...LA.txt

windows10-2004-x64

1

FurMark_wi...ME.txt

windows7-x64

1

FurMark_wi...ME.txt

windows10-2004-x64

1

FurMark_wi...pp.gxl

windows7-x64

3

FurMark_wi...pp.gxl

windows10-2004-x64

3

FurMark_wi...nf.xml

windows7-x64

1

FurMark_wi...nf.xml

windows10-2004-x64

1

FurMark_wi...me.txt

windows7-x64

1

FurMark_wi...me.txt

windows10-2004-x64

1

Resubmissions

09/07/2024, 01:16 UTC

240709-bm536aydqm 7

Analysis

  • max time kernel
    1368s
  • max time network
    1163s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-es
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-eslocale:es-esos:windows10-2004-x64systemwindows
  • submitted
    09/07/2024, 01:16 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    FurMark_win64/furmark.exe

  • Size

    220KB

  • MD5

    871b5e12dc33acf6d48a9052dc4c1f0f

  • SHA1

    c7a393a91d732e14c96f91ffc95235a2567f91ff

  • SHA256

    f6bcdc270c3ce9c241a37b94b24cafebe13a0d6816d17e5bc8d1ef142a47b352

  • SHA512

    842cfb292dbd71a6905b745a275b17dd16b0ea3494f1e25edb4820d5522e9235536233dd17815fa63f72acf9736f23cab24e0f716e53d5ae3b001e46a4b8b671

  • SSDEEP

    6144:itpaBCNwgAg80GhjtPbWCuM3lOrvHsWDylvNvtLU:itpaBCNw5X0GhjtjhuM3lqwlvR

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\FurMark_win64\furmark.exe
    "C:\Users\Admin\AppData\Local\Temp\FurMark_win64\furmark.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3052

Network

  • flag-us
    DNS
    240.221.184.93.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    240.221.184.93.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    68.32.126.40.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    68.32.126.40.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    88.156.103.20.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    88.156.103.20.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    183.59.114.20.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    183.59.114.20.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    198.187.3.20.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    198.187.3.20.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    192.142.123.92.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    192.142.123.92.in-addr.arpa
    IN PTR
    Response
    192.142.123.92.in-addr.arpa
    IN PTR
    a92-123-142-192deploystaticakamaitechnologiescom
  • flag-us
    DNS
    21.236.111.52.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    21.236.111.52.in-addr.arpa
    IN PTR
    Response
  • flag-us
    DNS
    11.173.189.20.in-addr.arpa
    Remote address:
    8.8.8.8:53
    Request
    11.173.189.20.in-addr.arpa
    IN PTR
    Response
No results found
  • 8.8.8.8:53
    240.221.184.93.in-addr.arpa
    dns
    73 B
     144 B
     1
    1

    DNS Request

    240.221.184.93.in-addr.arpa

  • 8.8.8.8:53
    68.32.126.40.in-addr.arpa
    dns
    71 B
     157 B
     1
    1

    DNS Request

    68.32.126.40.in-addr.arpa

  • 8.8.8.8:53
    88.156.103.20.in-addr.arpa
    dns
    72 B
     158 B
     1
    1

    DNS Request

    88.156.103.20.in-addr.arpa

  • 8.8.8.8:53
    183.59.114.20.in-addr.arpa
    dns
    72 B
     158 B
     1
    1

    DNS Request

    183.59.114.20.in-addr.arpa

  • 8.8.8.8:53
    198.187.3.20.in-addr.arpa
    dns
    71 B
     157 B
     1
    1

    DNS Request

    198.187.3.20.in-addr.arpa

  • 8.8.8.8:53
    192.142.123.92.in-addr.arpa
    dns
    73 B
     139 B
     1
    1

    DNS Request

    192.142.123.92.in-addr.arpa

  • 8.8.8.8:53
    21.236.111.52.in-addr.arpa
    dns
    72 B
     158 B
     1
    1

    DNS Request

    21.236.111.52.in-addr.arpa

  • 8.8.8.8:53
    11.173.189.20.in-addr.arpa
    dns
    72 B
     158 B
     1
    1

    DNS Request

    11.173.189.20.in-addr.arpa

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3052-0-0x00007FF82A920000-0x00007FF82AD41000-memory.dmp

    Filesize

    4.1MB

    Download

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.