Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

ajccqfmlzq.exe

windows7-x64

1

ajccqfmlzq.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    207s
  • max time network
    232s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    01/12/2022, 18:14 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ajccqfmlzq.exe

  • Size

    610KB

  • MD5

    6b517cbb0b72101e9d9796ffb1d1c27f

  • SHA1

    48b3616738a2e2b80c41a1212c106b7172c5d6e6

  • SHA256

    e4495c45b3359a9491837638425d56e772ad78cbd3859843b4e4f402b8b9b136

  • SHA512

    8b6c6473e479dd239ef78bf9b48971719460320d9e5d643dac750ad8be838b611a255fa1fb74a43fddb901500f9f424b82ad259400660ff586c798d7773dc9eb

  • SSDEEP

    12288:lnle51CQgrlV257eqhdtq6L59kCqU5NEYJuuhm2mQFGFRd4HJKYdCysCl:WVO67DhpvkCqU5NEuX8/+hHJDf3l

Score
1/10

Malware Config

Signatures

  • Modifies system certificate store 2 TTPs 4 IoCs
    evasionspywaretrojan

Processes

  • C:\Users\Admin\AppData\Local\Temp\ajccqfmlzq.exe
    "C:\Users\Admin\AppData\Local\Temp\ajccqfmlzq.exe"
    1⤵
    • Modifies system certificate store
    PID:1420

Network

  • flag-unknown
    DNS
    omega.turystyka.pl
    ajccqfmlzq.exe
    Remote address:
    8.8.8.8:53
    Request
    omega.turystyka.pl
    IN A
    Response
    omega.turystyka.pl
    IN A
    79.137.69.186
  • flag-unknown
    GET
    https://omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    ajccqfmlzq.exe
    Remote address:
    79.137.69.186:443
    Request
    GET /telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc== HTTP/1.1
    Accept: */*
    UA-CPU: AMD64
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
    Host: omega.turystyka.pl
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Thu, 01 Dec 2022 18:18:40 GMT
    Server: Apache
    Strict-Transport-Security: max-age=15768000
    Location: https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    Content-Length: 331
    Keep-Alive: timeout=5, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-unknown
    DNS
    www.omega.turystyka.pl
    ajccqfmlzq.exe
    Remote address:
    8.8.8.8:53
    Request
    www.omega.turystyka.pl
    IN A
    Response
    www.omega.turystyka.pl
    IN A
    79.137.69.186
  • flag-unknown
    GET
    https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    ajccqfmlzq.exe
    Remote address:
    79.137.69.186:443
    Request
    GET /telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc== HTTP/1.1
    Accept: */*
    UA-CPU: AMD64
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
    Host: www.omega.turystyka.pl
    Connection: Keep-Alive
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 01 Dec 2022 18:18:40 GMT
    Server: Apache
    Expires: Thu, 19 Nov 1981 08:52:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
    Pragma: no-cache
    Set-Cookie: sid=d896a9e9d7594df6a358d6c7130cc36d; path=/
    Strict-Transport-Security: max-age=15768000
    X-Content-Type-Options: nosniff
    X-Frame-Options: sameorigin
    Keep-Alive: timeout=5, max=100
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-unknown
    GET
    https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    ajccqfmlzq.exe
    Remote address:
    79.137.69.186:443
    Request
    GET /telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc== HTTP/1.1
    Accept: */*
    UA-CPU: AMD64
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
    Connection: Keep-Alive
    Host: www.omega.turystyka.pl
    Cookie: sid=d896a9e9d7594df6a358d6c7130cc36d
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 01 Dec 2022 18:18:42 GMT
    Server: Apache
    Expires: Thu, 19 Nov 1981 08:52:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
    Pragma: no-cache
    Strict-Transport-Security: max-age=15768000
    X-Content-Type-Options: nosniff
    X-Frame-Options: sameorigin
    Keep-Alive: timeout=5, max=100
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-unknown
    GET
    https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    ajccqfmlzq.exe
    Remote address:
    79.137.69.186:443
    Request
    GET /telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc== HTTP/1.1
    Accept: */*
    UA-CPU: AMD64
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
    Connection: Keep-Alive
    Host: www.omega.turystyka.pl
    Cookie: sid=d896a9e9d7594df6a358d6c7130cc36d
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 01 Dec 2022 18:18:44 GMT
    Server: Apache
    Expires: Thu, 19 Nov 1981 08:52:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
    Pragma: no-cache
    Strict-Transport-Security: max-age=15768000
    X-Content-Type-Options: nosniff
    X-Frame-Options: sameorigin
    Keep-Alive: timeout=5, max=100
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-unknown
    GET
    https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    ajccqfmlzq.exe
    Remote address:
    79.137.69.186:443
    Request
    GET /telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc== HTTP/1.1
    Accept: */*
    UA-CPU: AMD64
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
    Connection: Keep-Alive
    Host: www.omega.turystyka.pl
    Cookie: sid=d896a9e9d7594df6a358d6c7130cc36d
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 01 Dec 2022 18:18:45 GMT
    Server: Apache
    Expires: Thu, 19 Nov 1981 08:52:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
    Pragma: no-cache
    Strict-Transport-Security: max-age=15768000
    X-Content-Type-Options: nosniff
    X-Frame-Options: sameorigin
    Keep-Alive: timeout=5, max=100
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-unknown
    GET
    https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    ajccqfmlzq.exe
    Remote address:
    79.137.69.186:443
    Request
    GET /telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc== HTTP/1.1
    Accept: */*
    UA-CPU: AMD64
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
    Connection: Keep-Alive
    Host: www.omega.turystyka.pl
    Cookie: sid=d896a9e9d7594df6a358d6c7130cc36d
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 01 Dec 2022 18:19:10 GMT
    Server: Apache
    Expires: Thu, 19 Nov 1981 08:52:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
    Pragma: no-cache
    Strict-Transport-Security: max-age=15768000
    X-Content-Type-Options: nosniff
    X-Frame-Options: sameorigin
    Keep-Alive: timeout=5, max=100
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-unknown
    GET
    https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    ajccqfmlzq.exe
    Remote address:
    79.137.69.186:443
    Request
    GET /telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc== HTTP/1.1
    Accept: */*
    UA-CPU: AMD64
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
    Connection: Keep-Alive
    Host: www.omega.turystyka.pl
    Cookie: sid=d896a9e9d7594df6a358d6c7130cc36d
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 01 Dec 2022 18:19:11 GMT
    Server: Apache
    Expires: Thu, 19 Nov 1981 08:52:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
    Pragma: no-cache
    Strict-Transport-Security: max-age=15768000
    X-Content-Type-Options: nosniff
    X-Frame-Options: sameorigin
    Keep-Alive: timeout=5, max=100
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-unknown
    GET
    https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    ajccqfmlzq.exe
    Remote address:
    79.137.69.186:443
    Request
    GET /telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc== HTTP/1.1
    Accept: */*
    UA-CPU: AMD64
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
    Connection: Keep-Alive
    Host: www.omega.turystyka.pl
    Cookie: sid=d896a9e9d7594df6a358d6c7130cc36d
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 01 Dec 2022 18:19:13 GMT
    Server: Apache
    Expires: Thu, 19 Nov 1981 08:52:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
    Pragma: no-cache
    Strict-Transport-Security: max-age=15768000
    X-Content-Type-Options: nosniff
    X-Frame-Options: sameorigin
    Keep-Alive: timeout=5, max=100
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-unknown
    GET
    https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    ajccqfmlzq.exe
    Remote address:
    79.137.69.186:443
    Request
    GET /telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc== HTTP/1.1
    Accept: */*
    UA-CPU: AMD64
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
    Connection: Keep-Alive
    Host: www.omega.turystyka.pl
    Cookie: sid=d896a9e9d7594df6a358d6c7130cc36d
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 01 Dec 2022 18:19:15 GMT
    Server: Apache
    Expires: Thu, 19 Nov 1981 08:52:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
    Pragma: no-cache
    Strict-Transport-Security: max-age=15768000
    X-Content-Type-Options: nosniff
    X-Frame-Options: sameorigin
    Keep-Alive: timeout=5, max=100
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-unknown
    GET
    https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    ajccqfmlzq.exe
    Remote address:
    79.137.69.186:443
    Request
    GET /telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc== HTTP/1.1
    Accept: */*
    UA-CPU: AMD64
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
    Connection: Keep-Alive
    Host: www.omega.turystyka.pl
    Cookie: sid=d896a9e9d7594df6a358d6c7130cc36d
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 01 Dec 2022 18:19:39 GMT
    Server: Apache
    Expires: Thu, 19 Nov 1981 08:52:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
    Pragma: no-cache
    Strict-Transport-Security: max-age=15768000
    X-Content-Type-Options: nosniff
    X-Frame-Options: sameorigin
    Keep-Alive: timeout=5, max=100
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-unknown
    GET
    https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    ajccqfmlzq.exe
    Remote address:
    79.137.69.186:443
    Request
    GET /telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc== HTTP/1.1
    Accept: */*
    UA-CPU: AMD64
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
    Connection: Keep-Alive
    Host: www.omega.turystyka.pl
    Cookie: sid=d896a9e9d7594df6a358d6c7130cc36d
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 01 Dec 2022 18:20:28 GMT
    Server: Apache
    Expires: Thu, 19 Nov 1981 08:52:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
    Pragma: no-cache
    Strict-Transport-Security: max-age=15768000
    X-Content-Type-Options: nosniff
    X-Frame-Options: sameorigin
    Keep-Alive: timeout=5, max=100
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-unknown
    GET
    https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    ajccqfmlzq.exe
    Remote address:
    79.137.69.186:443
    Request
    GET /telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc== HTTP/1.1
    Accept: */*
    UA-CPU: AMD64
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
    Connection: Keep-Alive
    Host: www.omega.turystyka.pl
    Cookie: sid=d896a9e9d7594df6a358d6c7130cc36d
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 01 Dec 2022 18:20:29 GMT
    Server: Apache
    Expires: Thu, 19 Nov 1981 08:52:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
    Pragma: no-cache
    Strict-Transport-Security: max-age=15768000
    X-Content-Type-Options: nosniff
    X-Frame-Options: sameorigin
    Keep-Alive: timeout=5, max=100
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • flag-unknown
    GET
    https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    ajccqfmlzq.exe
    Remote address:
    79.137.69.186:443
    Request
    GET /telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc== HTTP/1.1
    Accept: */*
    UA-CPU: AMD64
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)
    Connection: Keep-Alive
    Host: www.omega.turystyka.pl
    Cookie: sid=d896a9e9d7594df6a358d6c7130cc36d
    Response
    HTTP/1.1 404 Not Found
    Date: Thu, 01 Dec 2022 18:20:31 GMT
    Server: Apache
    Expires: Thu, 19 Nov 1981 08:52:00 GMT
    Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
    Pragma: no-cache
    Strict-Transport-Security: max-age=15768000
    X-Content-Type-Options: nosniff
    X-Frame-Options: sameorigin
    Keep-Alive: timeout=5, max=100
    Connection: Keep-Alive
    Transfer-Encoding: chunked
    Content-Type: text/html; charset=UTF-8
  • 79.137.69.186:443
    omega.turystyka.pl
    ajccqfmlzq.exe
    152 B
     3
  • 79.137.69.186:443
    https://omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    tls, http
    ajccqfmlzq.exe
    1.3kB
     9.3kB
     11
    13

    HTTP Request

    GET https://omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==

    HTTP Response

    301
  • 79.137.69.186:443
    https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    tls, http
    ajccqfmlzq.exe
    1.5kB
     22.2kB
     15
    22

    HTTP Request

    GET https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==

    HTTP Response

    404
  • 79.137.69.186:443
    https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    tls, http
    ajccqfmlzq.exe
    1.4kB
     14.1kB
     13
    15

    HTTP Request

    GET https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==

    HTTP Response

    404
  • 79.137.69.186:443
    https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    tls, http
    ajccqfmlzq.exe
    1.4kB
     14.1kB
     13
    15

    HTTP Request

    GET https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==

    HTTP Response

    404
  • 79.137.69.186:443
    https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    tls, http
    ajccqfmlzq.exe
    1.4kB
     14.1kB
     13
    15

    HTTP Request

    GET https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==

    HTTP Response

    404
  • 79.137.69.186:443
    www.omega.turystyka.pl
    ajccqfmlzq.exe
    152 B
     3
  • 79.137.69.186:443
    https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    tls, http
    ajccqfmlzq.exe
    1.4kB
     14.1kB
     13
    15

    HTTP Request

    GET https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==

    HTTP Response

    404
  • 79.137.69.186:443
    https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    tls, http
    ajccqfmlzq.exe
    1.4kB
     14.1kB
     13
    15

    HTTP Request

    GET https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==

    HTTP Response

    404
  • 79.137.69.186:443
    https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    tls, http
    ajccqfmlzq.exe
    1.4kB
     14.2kB
     13
    16

    HTTP Request

    GET https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==

    HTTP Response

    404
  • 79.137.69.186:443
    https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    tls, http
    ajccqfmlzq.exe
    1.5kB
     14.2kB
     14
    17

    HTTP Request

    GET https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==

    HTTP Response

    404
  • 79.137.69.186:443
    www.omega.turystyka.pl
    ajccqfmlzq.exe
    152 B
     3
  • 79.137.69.186:443
    https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    tls, http
    ajccqfmlzq.exe
    1.4kB
     14.1kB
     13
    15

    HTTP Request

    GET https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==

    HTTP Response

    404
  • 79.137.69.186:443
    www.omega.turystyka.pl
    ajccqfmlzq.exe
    152 B
     3
  • 79.137.69.186:443
    www.omega.turystyka.pl
    ajccqfmlzq.exe
    152 B
     3
  • 79.137.69.186:443
    https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    tls, http
    ajccqfmlzq.exe
    1.4kB
     14.1kB
     13
    15

    HTTP Request

    GET https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==

    HTTP Response

    404
  • 79.137.69.186:443
    https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    tls, http
    ajccqfmlzq.exe
    1.4kB
     14.1kB
     13
    15

    HTTP Request

    GET https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==

    HTTP Response

    404
  • 79.137.69.186:443
    https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==
    tls, http
    ajccqfmlzq.exe
    1.4kB
     14.1kB
     13
    15

    HTTP Request

    GET https://www.omega.turystyka.pl/telemetry.svc?action=GetAnalyticsOptions&cv=DQiyenw71HsXFU14cda8qxSNmM0If6GkpvmmRWJ1Kc==

    HTTP Response

    404
  • 79.137.69.186:443
    www.omega.turystyka.pl
    tls
    ajccqfmlzq.exe
    343 B
     309 B
     3
    3
  • 8.8.8.8:53
    omega.turystyka.pl
    dns
    ajccqfmlzq.exe
    64 B
     80 B
     1
    1

    DNS Request

    omega.turystyka.pl

    DNS Response

    79.137.69.186

  • 8.8.8.8:53
    www.omega.turystyka.pl
    dns
    ajccqfmlzq.exe
    68 B
     84 B
     1
    1

    DNS Request

    www.omega.turystyka.pl

    DNS Response

    79.137.69.186

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1420-54-0x0000000140000000-0x00000001400DA000-memory.dmp

    Filesize

    872KB

    Download

  • memory/1420-55-0x000007FEFBA41000-0x000007FEFBA43000-memory.dmp

    Filesize

    8KB

    Download

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.