Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
08/11/2024, 15:13 UTC
241108-slqqhsvcjl 408/11/2024, 15:11 UTC
241108-skk4msvbqq 408/11/2024, 14:30 UTC
241108-rvgzassrev 808/11/2024, 14:22 UTC
241108-rp3c2stelg 10Analysis
-
max time kernel
438s -
max time network
1159s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
08/11/2024, 15:11 UTC
General
-
Target
attachment-21
-
Size
7KB
-
MD5
6f338783ef08fcbc70dcb456ba14e667
-
SHA1
b2e5d69f922e0bc2ef55f1365f34a5e30f54eacb
-
SHA256
4d3ddab8323315523f2ea2c080e91e2274fe2b2320129c355aa4ba8ef52c1d83
-
SHA512
769a4f184187339d2bc4d09609f1cc52318bf1eaee7e5d1004fb1594232de1ce456500608f9a04aaab5b1cc09773a265faa7ffd36c963c696e6487931780e6cc
-
SSDEEP
192:KKMvwi3D39i7fnw2KuwU+GiVHTR3G2wi/ZuBib:KKMvwi3D3Y7fnw2K/U+XVH13G2R/ZuEb
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\attachment-211⤵
Network
-
DNS8.8.8.8.in-addr.arpaRemote address:8.8.8.8:53Request8.8.8.8.in-addr.arpaIN PTRResponse8.8.8.8.in-addr.arpaIN PTRdnsgoogle -
DNS27.178.89.13.in-addr.arpaRemote address:8.8.8.8:53Request27.178.89.13.in-addr.arpaIN PTRResponse
-
DNSocsp.digicert.comRemote address:8.8.8.8:53Requestocsp.digicert.comIN AResponseocsp.digicert.comIN CNAMEocsp.edge.digicert.comocsp.edge.digicert.comIN CNAMEfp2e7a.wpc.2be4.phicdn.netfp2e7a.wpc.2be4.phicdn.netIN CNAMEfp2e7a.wpc.phicdn.netfp2e7a.wpc.phicdn.netIN A192.229.221.95
-
DNS95.221.229.192.in-addr.arpaRemote address:8.8.8.8:53Request95.221.229.192.in-addr.arpaIN PTRResponse
No results found
-
8.8.8.8:538.8.8.8.in-addr.arpadns
DNS Request
8.8.8.8.in-addr.arpa
DNS Request
27.178.89.13.in-addr.arpa
DNS Request
ocsp.digicert.com
DNS Response
192.229.221.95
DNS Request
95.221.229.192.in-addr.arpa