Overview

overview

10

Static

static

10

394534c9ad...aa.apk

android-9-x86

8

www/home.html

windows7-x64

1

www/home.html

windows10-2004-x64

1

www/js/app.js

windows7-x64

1

www/js/app.js

windows10-2004-x64

1

www/result.html

windows7-x64

1

www/result.html

windows10-2004-x64

1

a.alipayob...1.2.js

windows7-x64

1

a.alipayob...1.2.js

windows10-2004-x64

1

a.alipayob...pto.js

windows7-x64

1

a.alipayob...pto.js

windows10-2004-x64

1

a.alipayob...dex.js

windows7-x64

1

a.alipayob...dex.js

windows10-2004-x64

1

a.alipayob...0.7.js

windows7-x64

1

a.alipayob...0.7.js

windows10-2004-x64

1

a.alipayob...eed.js

windows7-x64

1

a.alipayob...eed.js

windows10-2004-x64

1

a.alipayob...min.js

windows7-x64

1

a.alipayob...min.js

windows10-2004-x64

1

a.alipayob...min.js

windows7-x64

1

a.alipayob...min.js

windows10-2004-x64

1

a.alipayob...min.js

windows7-x64

1

a.alipayob...min.js

windows10-2004-x64

1

a.alipayob...log.js

windows7-x64

1

a.alipayob...log.js

windows10-2004-x64

1

a.alipayob...ert.js

windows7-x64

1

a.alipayob...ert.js

windows10-2004-x64

1

a.alipayob...min.js

windows7-x64

1

a.alipayob...min.js

windows10-2004-x64

1

a.alipayob...min.js

windows7-x64

1

a.alipayob...min.js

windows10-2004-x64

1

a.alipayob...dex.js

windows7-x64

1

Resubmissions

14/01/2025, 09:27 UTC

250114-le61latrax 10

14/01/2025, 09:16 UTC

250114-k8wlaatpct 10

06/12/2023, 18:03 UTC

231206-wne9cabd79 10

08/10/2023, 00:01 UTC

231008-abc3kaba84 10

Analysis

  • max time kernel
    151s
  • max time network
    160s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/10/2023, 00:01 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a.alipayobjects.com/am/log/httpblock/1.2.js

  • Size

    2KB

  • MD5

    ce404ec713367ce24de9819369a0f378

  • SHA1

    e75e636aabcde80fa25397f935f1603a5c9dd11d

  • SHA256

    be2a758ca71c7feca8b7cdd354d199c31385e8e3d293c9cf54b1a5a95766b950

  • SHA512

    eaf0a03d2f4fe0555dd1dd8a6a357a6c403daef9e873513ebb58c78c5c4b13f4547cc25d2c57ad72b7d1f7183db326f9dbe8511c55b5dcfcc412a08fff8f10d3

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\a.alipayobjects.com\am\log\httpblock\1.2.js
    1⤵
      PID:1196

    Network

    • flag-us
      DNS
      8.8.8.8.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      8.8.8.8.in-addr.arpa
      IN PTR
      Response
      8.8.8.8.in-addr.arpa
      IN PTR
      dnsgoogle
    • flag-us
      DNS
      71.159.190.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      71.159.190.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      95.221.229.192.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      95.221.229.192.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      9.228.82.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      9.228.82.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      41.110.16.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      41.110.16.96.in-addr.arpa
      IN PTR
      Response
      41.110.16.96.in-addr.arpa
      IN PTR
      a96-16-110-41deploystaticakamaitechnologiescom
    • flag-us
      DNS
      208.194.73.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      208.194.73.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      73.31.126.40.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      73.31.126.40.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      146.78.124.51.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      146.78.124.51.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      103.169.127.40.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      103.169.127.40.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      240.81.21.72.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      240.81.21.72.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      18.31.95.13.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      18.31.95.13.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      254.109.26.67.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      254.109.26.67.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      57.169.31.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      57.169.31.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      131.72.42.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      131.72.42.20.in-addr.arpa
      IN PTR
      Response
    No results found
    • 8.8.8.8:53
      8.8.8.8.in-addr.arpa
      dns
      66 B
       90 B
       1
      1

      DNS Request

      8.8.8.8.in-addr.arpa

    • 8.8.8.8:53
      71.159.190.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      71.159.190.20.in-addr.arpa

    • 8.8.8.8:53
      95.221.229.192.in-addr.arpa
      dns
      73 B
       144 B
       1
      1

      DNS Request

      95.221.229.192.in-addr.arpa

    • 8.8.8.8:53
      9.228.82.20.in-addr.arpa
      dns
      70 B
       156 B
       1
      1

      DNS Request

      9.228.82.20.in-addr.arpa

    • 8.8.8.8:53
      41.110.16.96.in-addr.arpa
      dns
      71 B
       135 B
       1
      1

      DNS Request

      41.110.16.96.in-addr.arpa

    • 8.8.8.8:53
      208.194.73.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      208.194.73.20.in-addr.arpa

    • 8.8.8.8:53
      73.31.126.40.in-addr.arpa
      dns
      71 B
       157 B
       1
      1

      DNS Request

      73.31.126.40.in-addr.arpa

    • 8.8.8.8:53
      146.78.124.51.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      146.78.124.51.in-addr.arpa

    • 8.8.8.8:53
      103.169.127.40.in-addr.arpa
      dns
      73 B
       147 B
       1
      1

      DNS Request

      103.169.127.40.in-addr.arpa

    • 8.8.8.8:53
      240.81.21.72.in-addr.arpa
      dns
      71 B
       142 B
       1
      1

      DNS Request

      240.81.21.72.in-addr.arpa

    • 8.8.8.8:53
      18.31.95.13.in-addr.arpa
      dns
      70 B
       144 B
       1
      1

      DNS Request

      18.31.95.13.in-addr.arpa

    • 8.8.8.8:53
      254.109.26.67.in-addr.arpa
      dns
      72 B
       126 B
       1
      1

      DNS Request

      254.109.26.67.in-addr.arpa

    • 8.8.8.8:53
      57.169.31.20.in-addr.arpa
      dns
      71 B
       157 B
       1
      1

      DNS Request

      57.169.31.20.in-addr.arpa

    • 8.8.8.8:53
      131.72.42.20.in-addr.arpa
      dns
      71 B
       157 B
       1
      1

      DNS Request

      131.72.42.20.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.