Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
95s -
max time network
102s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
19/09/2024, 05:56 UTC
Static task
static1
Behavioral task
behavioral1
Sample
dfe43dc9f787115a63c74b693855e5638abe2e9c5afc0743d91000db0234939cN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dfe43dc9f787115a63c74b693855e5638abe2e9c5afc0743d91000db0234939cN.exe
Resource
win10v2004-20240802-en
General
-
Target
dfe43dc9f787115a63c74b693855e5638abe2e9c5afc0743d91000db0234939cN.exe
-
Size
1.3MB
-
MD5
db38da59bec47769d0d3a8efcd7a3f40
-
SHA1
e144d074c2d875df5cae1d3d58f398f02095531f
-
SHA256
dfe43dc9f787115a63c74b693855e5638abe2e9c5afc0743d91000db0234939c
-
SHA512
21c29eae58cdcfaafb66a0c2a720f6abb88d29e1fab2dd8e78862c48512286af03e212f599f7e96d9810493ce3386c0a3565511997e1483b13e85d9d43774f8c
-
SSDEEP
12288:Bkz2DWU+Xc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:Kz2DW/sqjnhMgeiCl7G0nehbGZpbD
Malware Config
Signatures
Processes
Network
-
Remote address:8.8.8.8:53Request241.150.49.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request81.144.22.2.in-addr.arpaIN PTRResponse81.144.22.2.in-addr.arpaIN PTRa2-22-144-81deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request71.159.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request95.221.229.192.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request149.220.183.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request26.165.165.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request18.31.95.13.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request172.214.232.199.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request29.243.111.52.in-addr.arpaIN PTRResponse
-
72 B 158 B 1 1
DNS Request
241.150.49.20.in-addr.arpa
-
70 B 133 B 1 1
DNS Request
81.144.22.2.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
71.159.190.20.in-addr.arpa
-
73 B 144 B 1 1
DNS Request
95.221.229.192.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
149.220.183.52.in-addr.arpa
-
72 B 146 B 1 1
DNS Request
26.165.165.52.in-addr.arpa
-
70 B 144 B 1 1
DNS Request
18.31.95.13.in-addr.arpa
-
74 B 128 B 1 1
DNS Request
172.214.232.199.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
29.243.111.52.in-addr.arpa