Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
95s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
13/09/2024, 17:32 UTC
Behavioral task
behavioral1
Sample
2024091385d7ecb1493cb3034055058fc0b09b46bkransomwarefloxificedid.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024091385d7ecb1493cb3034055058fc0b09b46bkransomwarefloxificedid.exe
Resource
win10v2004-20240802-en
General
-
Target
2024091385d7ecb1493cb3034055058fc0b09b46bkransomwarefloxificedid.exe
-
Size
2.3MB
-
MD5
85d7ecb1493cb3034055058fc0b09b46
-
SHA1
1bf1fde6dcff11b51a502d90a4dbd6ff70769bcf
-
SHA256
95ab0daf50f87c7b5a21e5beb6409aa749b21d9e646548fd84b96ff2e0c2e769
-
SHA512
7ac925afb36783027e20d0811a517669a1f9cbd447caa3096651dcc099d2c4d1c2f19d8621911c5af6877b8316a78abd55cb29d1bbd3b1c00c1d310bfa92114b
-
SSDEEP
49152:xe/6TJT0uQXa+6DokMs/lwH+vQStNdE/fQisgxoy34Z1y/iH6:x86TJT0uKalokMs/lwe7dE/fQisgxoyJ
Malware Config
Signatures
Processes
Network
-
Remote address:8.8.8.8:53Request8.8.8.8.in-addr.arpaIN PTRResponse8.8.8.8.in-addr.arpaIN PTRdnsgoogle
-
Remote address:8.8.8.8:53Request217.106.137.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request25.140.123.92.in-addr.arpaIN PTRResponse25.140.123.92.in-addr.arpaIN PTRa92-123-140-25deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request95.221.229.192.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request95.221.229.192.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Request73.159.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request73.159.190.20.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Request73.159.190.20.in-addr.arpaIN PTR
-
Remote address:8.8.8.8:53Request133.211.185.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request157.123.68.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request171.39.242.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request37.56.20.217.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request240.143.123.92.in-addr.arpaIN PTRResponse240.143.123.92.in-addr.arpaIN PTRa92-123-143-240deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request44.56.20.217.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request21.236.111.52.in-addr.arpaIN PTRResponse
-
66 B 90 B 1 1
DNS Request
8.8.8.8.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
217.106.137.52.in-addr.arpa
-
72 B 137 B 1 1
DNS Request
25.140.123.92.in-addr.arpa
-
146 B 144 B 2 1
DNS Request
95.221.229.192.in-addr.arpa
DNS Request
95.221.229.192.in-addr.arpa
-
216 B 158 B 3 1
DNS Request
73.159.190.20.in-addr.arpa
DNS Request
73.159.190.20.in-addr.arpa
DNS Request
73.159.190.20.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
133.211.185.52.in-addr.arpa
-
72 B 146 B 1 1
DNS Request
157.123.68.40.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
171.39.242.20.in-addr.arpa
-
71 B 131 B 1 1
DNS Request
37.56.20.217.in-addr.arpa
-
73 B 139 B 1 1
DNS Request
240.143.123.92.in-addr.arpa
-
71 B 131 B 1 1
DNS Request
44.56.20.217.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
21.236.111.52.in-addr.arpa