Overview

overview

10

Static

static

10

394534c9ad...aa.apk

android-9-x86

8

www/home.html

windows7-x64

1

www/home.html

windows10-2004-x64

1

www/js/app.js

windows7-x64

1

www/js/app.js

windows10-2004-x64

1

www/result.html

windows7-x64

1

www/result.html

windows10-2004-x64

1

a.alipayob...1.2.js

windows7-x64

1

a.alipayob...1.2.js

windows10-2004-x64

1

a.alipayob...pto.js

windows7-x64

1

a.alipayob...pto.js

windows10-2004-x64

1

a.alipayob...dex.js

windows7-x64

1

a.alipayob...dex.js

windows10-2004-x64

1

a.alipayob...0.7.js

windows7-x64

1

a.alipayob...0.7.js

windows10-2004-x64

1

a.alipayob...eed.js

windows7-x64

1

a.alipayob...eed.js

windows10-2004-x64

1

a.alipayob...min.js

windows7-x64

1

a.alipayob...min.js

windows10-2004-x64

1

a.alipayob...min.js

windows7-x64

1

a.alipayob...min.js

windows10-2004-x64

1

a.alipayob...min.js

windows7-x64

1

a.alipayob...min.js

windows10-2004-x64

1

a.alipayob...log.js

windows7-x64

1

a.alipayob...log.js

windows10-2004-x64

1

a.alipayob...ert.js

windows7-x64

1

a.alipayob...ert.js

windows10-2004-x64

1

a.alipayob...min.js

windows7-x64

1

a.alipayob...min.js

windows10-2004-x64

1

a.alipayob...min.js

windows7-x64

1

a.alipayob...min.js

windows10-2004-x64

1

a.alipayob...dex.js

windows7-x64

1

Resubmissions

14/01/2025, 09:27 UTC

250114-le61latrax 10

14/01/2025, 09:16 UTC

250114-k8wlaatpct 10

06/12/2023, 18:03 UTC

231206-wne9cabd79 10

08/10/2023, 00:01 UTC

231008-abc3kaba84 10

Analysis

  • max time kernel
    142s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/10/2023, 00:01 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a.alipayobjects.com/g/h5-lib/protobuf/1.0.0/protobuf.min.js

  • Size

    64KB

  • MD5

    b3514abe9c9bf668d3185160b0632e0f

  • SHA1

    ebe1e020d6d349dbd61c9b31656c30faa79d09df

  • SHA256

    9fbd15b27f01c41a399c2ccede3487f7dc336cd87dd4d3a9089704b0b8f6595f

  • SHA512

    9f7997a168f634032838939bdbb28e6ea9002c6c14165e19949ebd3dd1c616762f2281e0e12c9b73223582e4c4b3cbb5fe1523a5fd511da36d2b36a05d5e2e32

  • SSDEEP

    768:jqy1toOG28PhQOiA7bFehHu7GQRqIsE5jp8peguDSlaC2JEd6vZ05stTODT7SEa2:H3SPh9bbFetvE5j5gu3EzpaeiW3

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\a.alipayobjects.com\g\h5-lib\protobuf\1.0.0\protobuf.min.js
    1⤵
      PID:4208

    Network

    • flag-us
      DNS
      95.221.229.192.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      95.221.229.192.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      146.78.124.51.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      146.78.124.51.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      9.228.82.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      9.228.82.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      41.110.16.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      41.110.16.96.in-addr.arpa
      IN PTR
      Response
      41.110.16.96.in-addr.arpa
      IN PTR
      a96-16-110-41deploystaticakamaitechnologiescom
    • flag-us
      DNS
      57.169.31.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      57.169.31.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      54.120.234.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      54.120.234.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      157.123.68.40.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      157.123.68.40.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      171.39.242.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      171.39.242.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      240.81.21.72.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      240.81.21.72.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      9.57.101.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      9.57.101.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      2.136.104.51.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      2.136.104.51.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      169.117.168.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      169.117.168.52.in-addr.arpa
      IN PTR
      Response
    No results found
    • 8.8.8.8:53
      95.221.229.192.in-addr.arpa
      dns
      73 B
       144 B
       1
      1

      DNS Request

      95.221.229.192.in-addr.arpa

    • 8.8.8.8:53
      146.78.124.51.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      146.78.124.51.in-addr.arpa

    • 8.8.8.8:53
      9.228.82.20.in-addr.arpa
      dns
      70 B
       156 B
       1
      1

      DNS Request

      9.228.82.20.in-addr.arpa

    • 8.8.8.8:53
      41.110.16.96.in-addr.arpa
      dns
      71 B
       135 B
       1
      1

      DNS Request

      41.110.16.96.in-addr.arpa

    • 8.8.8.8:53
      57.169.31.20.in-addr.arpa
      dns
      71 B
       157 B
       1
      1

      DNS Request

      57.169.31.20.in-addr.arpa

    • 8.8.8.8:53
      54.120.234.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      54.120.234.20.in-addr.arpa

    • 8.8.8.8:53
      157.123.68.40.in-addr.arpa
      dns
      72 B
       146 B
       1
      1

      DNS Request

      157.123.68.40.in-addr.arpa

    • 8.8.8.8:53
      171.39.242.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      171.39.242.20.in-addr.arpa

    • 8.8.8.8:53
      240.81.21.72.in-addr.arpa
      dns
      71 B
       142 B
       1
      1

      DNS Request

      240.81.21.72.in-addr.arpa

    • 8.8.8.8:53
      9.57.101.20.in-addr.arpa
      dns
      70 B
       156 B
       1
      1

      DNS Request

      9.57.101.20.in-addr.arpa

    • 8.8.8.8:53
      2.136.104.51.in-addr.arpa
      dns
      71 B
       157 B
       1
      1

      DNS Request

      2.136.104.51.in-addr.arpa

    • 8.8.8.8:53
      169.117.168.52.in-addr.arpa
      dns
      73 B
       147 B
       1
      1

      DNS Request

      169.117.168.52.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.