Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
03/09/2024, 04:48 UTC
Static task
static1
Behavioral task
behavioral1
Sample
15b6690005bd5ad9164416996d5d8e1ac82a9aa52eae0a9464b209fdaf415a4a.vbs
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
15b6690005bd5ad9164416996d5d8e1ac82a9aa52eae0a9464b209fdaf415a4a.vbs
Resource
win10v2004-20240802-en
General
-
Target
15b6690005bd5ad9164416996d5d8e1ac82a9aa52eae0a9464b209fdaf415a4a.vbs
-
Size
357KB
-
MD5
415f0c526ebdd7977f6ca9560573e58b
-
SHA1
60e54afc538f80a2579cc99af6cba8e08df6851e
-
SHA256
15b6690005bd5ad9164416996d5d8e1ac82a9aa52eae0a9464b209fdaf415a4a
-
SHA512
8132eb1ab6c0dc6ed0df0ef10afe88a509344e7bdc04e27a4aebe537c97f83724b00f569e4b0589acadfdfe449bdaadb44bfc33ee055fa4d51ece906c32c4a5c
-
SSDEEP
192:fnnnknnknknnknnknnknknknknknknknknknMnknknnknnknnnknknnknknknknw:f
Malware Config
Signatures
Processes
Network
-
Remote address:8.8.8.8:53Request217.106.137.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request73.144.22.2.in-addr.arpaIN PTRResponse73.144.22.2.in-addr.arpaIN PTRa2-22-144-73deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request14.160.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request97.17.167.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request26.165.165.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request15.164.165.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request140.71.91.104.in-addr.arpaIN PTRResponse140.71.91.104.in-addr.arpaIN PTRa104-91-71-140deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request45.56.20.217.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request45.56.20.217.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Request23.236.111.52.in-addr.arpaIN PTRResponse
-
73 B 147 B 1 1
DNS Request
217.106.137.52.in-addr.arpa
-
70 B 133 B 1 1
DNS Request
73.144.22.2.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
14.160.190.20.in-addr.arpa
-
71 B 145 B 1 1
DNS Request
97.17.167.52.in-addr.arpa
-
72 B 146 B 1 1
DNS Request
26.165.165.52.in-addr.arpa
-
72 B 146 B 1 1
DNS Request
15.164.165.52.in-addr.arpa
-
72 B 137 B 1 1
DNS Request
140.71.91.104.in-addr.arpa
-
142 B 131 B 2 1
DNS Request
45.56.20.217.in-addr.arpa
DNS Request
45.56.20.217.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
23.236.111.52.in-addr.arpa