Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
10/10/2024, 10:05 UTC
General
-
Target
b292bc1fb131acfeca703a4b5dc5fd41303a0fad42afa9d8361ebcb3106419b8.exe
-
Size
5.8MB
-
MD5
f0b1d52fba9beba551c737b91d8b6020
-
SHA1
b6910d042ffeefe80787b0539f20a16688a0f1d5
-
SHA256
b292bc1fb131acfeca703a4b5dc5fd41303a0fad42afa9d8361ebcb3106419b8
-
SHA512
37810bd7f0e76e835cacee3bc7674bb9e675111515521da7b86ebc3110d0c4be2a4d4725487fdefafe004b6e8554e9fcd3f844808d1fdb72c0daad6d08ea4eaf
-
SSDEEP
98304:9BzZxajF0kyICd+PefMsJGu2btutsZIEsrJntZArNYFsJEp:9ECFfMsJGIsKp
Score
7/10
Malware Config
Signatures
-
Credentials from Password Stores: Windows Credential Manager 1 TTPs
Suspicious access to Credentials History.
-
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Browser Information Discovery 1 TTPs
Enumerate browser information.
Processes
-
C:\Users\Admin\AppData\Local\Temp\b292bc1fb131acfeca703a4b5dc5fd41303a0fad42afa9d8361ebcb3106419b8.exe"C:\Users\Admin\AppData\Local\Temp\b292bc1fb131acfeca703a4b5dc5fd41303a0fad42afa9d8361ebcb3106419b8.exe"1⤵
Network
-
DNS71.31.126.40.in-addr.arpaRemote address:8.8.8.8:53Request71.31.126.40.in-addr.arpaIN PTRResponse -
DNS55.36.223.20.in-addr.arpaRemote address:8.8.8.8:53Request55.36.223.20.in-addr.arpaIN PTRResponse
-
DNS50.23.12.20.in-addr.arpaRemote address:8.8.8.8:53Request50.23.12.20.in-addr.arpaIN PTRResponse
-
DNS77.190.18.2.in-addr.arpaRemote address:8.8.8.8:53Request77.190.18.2.in-addr.arpaIN PTRResponse77.190.18.2.in-addr.arpaIN PTRa2-18-190-77deploystaticakamaitechnologiescom
-
DNS241.42.69.40.in-addr.arpaRemote address:8.8.8.8:53Request241.42.69.40.in-addr.arpaIN PTRResponse
-
DNS29.243.111.52.in-addr.arpaRemote address:8.8.8.8:53Request29.243.111.52.in-addr.arpaIN PTRResponse
No results found
-
8.8.8.8:5371.31.126.40.in-addr.arpadns
DNS Request
71.31.126.40.in-addr.arpa
-
8.8.8.8:5355.36.223.20.in-addr.arpadns
DNS Request
55.36.223.20.in-addr.arpa
-
8.8.8.8:5350.23.12.20.in-addr.arpadns
DNS Request
50.23.12.20.in-addr.arpa
-
8.8.8.8:5377.190.18.2.in-addr.arpadns
DNS Request
77.190.18.2.in-addr.arpa
-
8.8.8.8:53241.42.69.40.in-addr.arpadns
DNS Request
241.42.69.40.in-addr.arpa
-
8.8.8.8:5329.243.111.52.in-addr.arpadns
DNS Request
29.243.111.52.in-addr.arpa
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.2MB
-
Filesize
6.2MB
-
Filesize
6.2MB
-
Filesize
6.2MB
-
Filesize
6.2MB
-
Filesize
6.2MB
-
Filesize
6.2MB
-
Filesize
6.2MB
-
Filesize
6.2MB
-
Filesize
6.2MB
-
Filesize
6.2MB
-
Filesize
6.2MB
-
Filesize
6.2MB
-
Filesize
6.2MB