Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
174s -
max time network
217s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
25/11/2022, 21:48 UTC
General
-
Target
ZealotAllideoConverter/All Video Converter/用firefox浏览器上网包安全.url
-
Size
334B
-
MD5
2f82495bbecfb4ac9ae75a17fd666bca
-
SHA1
2fb870b6f9a822627a970b589f2f7f1e0fe20fd1
-
SHA256
85e1cb8227a993c29f4add5fa8c6db6e8c52f1fcf0dddc2c8d943a8ca5fbc542
-
SHA512
8b7476093e4e799beae92829dbff62c19eb55beff5c2cea7ebe6b99c6b98114e00113b8c026f7540f29f5186c97089781ba2d9cf8315de53463f73b304313126
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\System32\rundll32.exe"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL "C:\Users\Admin\AppData\Local\Temp\ZealotAllideoConverter\All Video Converter\用firefox浏览器上网包安全.url"1⤵
Network
-
DNS97.97.242.52.in-addr.arpaRemote address:8.8.8.8:53Request97.97.242.52.in-addr.arpaIN PTRResponse -
DNSf.7.6.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.0.0.0.0.3.0.1.3.0.6.2.ip6.arpaRemote address:8.8.8.8:53Requestf.7.6.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.0.0.0.0.3.0.1.3.0.6.2.ip6.arpaIN PTRResponse
-
67.27.154.126:80
-
8.238.20.126:80
-
88.221.25.154:80
-
88.221.25.154:80
-
104.80.225.205:443
-
20.50.73.9:443
-
8.248.7.254:80
-
8.248.7.254:80
-
8.248.7.254:80
-
8.248.7.254:80
-
52.152.108.96:443
-
67.27.153.254:80
-
8.238.20.126:80
-
8.238.20.126:80
-
8.248.7.254:80
-
8.8.8.8:5397.97.242.52.in-addr.arpadns
DNS Request
97.97.242.52.in-addr.arpa
-
8.8.8.8:53f.7.6.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.0.0.0.0.3.0.1.3.0.6.2.ip6.arpadns
DNS Request
f.7.6.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.0.0.0.0.3.0.1.3.0.6.2.ip6.arpa