Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
103s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
15/07/2024, 02:10 UTC
General
-
Target
XDumpGO.exe
-
Size
28.3MB
-
MD5
52147df6f56c23c0c623de13871f98e4
-
SHA1
31bfb21838f2d97673dd715f145208e899eef6fe
-
SHA256
c57ca5839dfe7940d68a69d3617d24bf052d38f4489c9c6abb6109ae1b61d26b
-
SHA512
eb341080ec0ff14d461c012af145c5e7e91f98bc761cee00b66ffc777d2a886eb98cef0be4ea8a106e861b3ca77648d6975c5fbb0ed7fc905e1d07575e034b94
-
SSDEEP
196608:C0AsQ4q2hg1PSlHQWGUUbkjkVccaXPhoD/o8eOyrwXfnPd9E:ZAsQEg1PQGUUwYVQ5oNPd9E
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\XDumpGO.exe"C:\Users\Admin\AppData\Local\Temp\XDumpGO.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
-
DNS140.32.126.40.in-addr.arpaRemote address:8.8.8.8:53Request140.32.126.40.in-addr.arpaIN PTRResponse -
DNS73.144.22.2.in-addr.arpaRemote address:8.8.8.8:53Request73.144.22.2.in-addr.arpaIN PTRResponse73.144.22.2.in-addr.arpaIN PTRa2-22-144-73deploystaticakamaitechnologiescom
-
DNS103.169.127.40.in-addr.arpaRemote address:8.8.8.8:53Request103.169.127.40.in-addr.arpaIN PTRResponse
-
DNS206.23.85.13.in-addr.arpaRemote address:8.8.8.8:53Request206.23.85.13.in-addr.arpaIN PTRResponse
-
DNS23.58.20.217.in-addr.arpaRemote address:8.8.8.8:53Request23.58.20.217.in-addr.arpaIN PTRResponse
No results found
-
8.8.8.8:53140.32.126.40.in-addr.arpadns
DNS Request
140.32.126.40.in-addr.arpa
-
8.8.8.8:5373.144.22.2.in-addr.arpadns
DNS Request
73.144.22.2.in-addr.arpa
-
8.8.8.8:53103.169.127.40.in-addr.arpadns
DNS Request
103.169.127.40.in-addr.arpa
-
8.8.8.8:53206.23.85.13.in-addr.arpadns
DNS Request
206.23.85.13.in-addr.arpa
-
8.8.8.8:5323.58.20.217.in-addr.arpadns
DNS Request
23.58.20.217.in-addr.arpa
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.2MB
-
Filesize
104KB
-
Filesize
372KB
-
Filesize
576KB
-
Filesize
28.9MB
-
Filesize
68KB
-
Filesize
524KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
420KB
-
Filesize
76KB
-
Filesize
84KB
-
Filesize
76KB
-
Filesize
208KB
-
Filesize
6.2MB
-
Filesize
1.8MB
-
Filesize
5.4MB
-
Filesize
84KB
-
Filesize
1.4MB
-
Filesize
28.9MB
-
Filesize
6.2MB
-
Filesize
28.9MB