Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    155s
  • platform
    windows7_x64
  • resource
    win7
  • submitted
    18/07/2020, 08:43 UTC

General

  • Target

    invoice.pdf.jar

  • Size

    12KB

  • MD5

    0e50cb4e9b25da899c46b32c503dceef

  • SHA1

    98a5551e4c9a079bf200a45a055210ed5d81868b

  • SHA256

    e8d0db564e1a959cc6e308980c5b681841c76d28ac976d99579bcc2b9ff7f420

  • SHA512

    5c24a2ab5ce9b5bb0e4835b54efaaa67abe1fb1eda10c62d54fbdb899f03aabd9674b215ded76aa01c45662a82e5d9d0ad5ed40879130f6b10dd4f401718d1b3

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\invoice.pdf.jar
    1⤵
      PID:1060

    Network

    • flag-unknown
      DNS
      nodejs.org
      Remote address:
      8.8.8.8:53
      Request
      nodejs.org
      IN A
      Response
      nodejs.org
      IN A
      104.20.22.46
      nodejs.org
      IN A
      104.20.23.46
    • flag-unknown
      DNS
      cocogzy.ddns.net
      Remote address:
      8.8.8.8:53
      Request
      cocogzy.ddns.net
      IN A
      Response
      cocogzy.ddns.net
      IN A
      37.120.146.107
    • flag-unknown
      DNS
      cocogzy.ddns.net
      Remote address:
      8.8.8.8:53
      Request
      cocogzy.ddns.net
      IN A
      Response
      cocogzy.ddns.net
      IN A
      37.120.146.107
    • flag-unknown
      DNS
      cocogzy.ddns.net
      Remote address:
      8.8.8.8:53
      Request
      cocogzy.ddns.net
      IN A
      Response
      cocogzy.ddns.net
      IN A
      37.120.146.107
    • 104.20.22.46:443
      nodejs.org
      tls
      java.exe
      488.9kB
      28.4MB
      10615
      19633
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      219 B
      5
      5
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      219 B
      5
      5
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      219 B
      5
      5
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      219 B
      5
      5
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      219 B
      5
      5
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      219 B
      5
      5
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      219 B
      5
      5
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      219 B
      5
      5
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      219 B
      5
      5
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      219 B
      5
      5
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      219 B
      5
      5
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      219 B
      5
      5
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      219 B
      5
      5
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      219 B
      5
      5
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      219 B
      5
      5
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      219 B
      5
      5
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      219 B
      5
      5
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      219 B
      5
      5
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      219 B
      5
      5
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      219 B
      5
      5
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      219 B
      5
      5
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 37.120.146.107:443
      cocogzy.ddns.net
      tls
      java.exe
      409 B
      179 B
      5
      4
    • 10.7.0.255:138
      netbios-dgm
      1.3kB
      6
    • 8.8.8.8:53
      nodejs.org
      dns
      56 B
      88 B
      1
      1

      DNS Request

      nodejs.org

      DNS Response

      104.20.22.46
      104.20.23.46

    • 8.8.8.8:53
      cocogzy.ddns.net
      dns
      62 B
      78 B
      1
      1

      DNS Request

      cocogzy.ddns.net

      DNS Response

      37.120.146.107

    • 239.255.255.250:1900
      966 B
      6
    • 239.255.255.250:1900
    • 8.8.8.8:53
      cocogzy.ddns.net
      dns
      62 B
      78 B
      1
      1

      DNS Request

      cocogzy.ddns.net

      DNS Response

      37.120.146.107

    • 8.8.8.8:53
      cocogzy.ddns.net
      dns
      62 B
      78 B
      1
      1

      DNS Request

      cocogzy.ddns.net

      DNS Response

      37.120.146.107

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.