Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

Cash_Trans...647.js

windows7-x64

8

Cash_Trans...647.js

windows10-2004-x64

10

Analysis

  • max time kernel
    118s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    09/10/2023, 05:29 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Cash_Transfer_REF#23284449-9374647.js

  • Size

    7KB

  • MD5

    4e0ea5c5808c3d0cf7006eb0ef347c4b

  • SHA1

    80f8f2d5b7caf2f13b1edd764e56f46930754edc

  • SHA256

    d0ec40d1ae32bddb9159e4daa86d2b15535fe6cd456f8251d78fe64667d8abb1

  • SHA512

    40745410c37e8cf392c59ca9c8d04779c96624eefe7b8f90f3876f8c54c60518a622db9553b0420f77b34582a586ec68b664089f909e37043a11c0d9734a44d4

  • SSDEEP

    48:iVnz7HAx3ZSGwW6PnWe28gR7osdSrwyNNgnw5:itfHAx3ZzwWKWTnR7o8SrwqNgnw5

Score
8/10

Malware Config

Signatures

  • Blocklisted process makes network request 4 IoCs

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\Cash_Transfer_REF#23284449-9374647.js
    1⤵
    • Blocklisted process makes network request
    PID:2976

Network

  • flag-us
    DNS
    grapemundo.com
    wscript.exe
    Remote address:
    8.8.8.8:53
    Request
    grapemundo.com
    IN A
    Response
    grapemundo.com
    IN A
    103.50.163.157
  • 103.50.163.157:443
    grapemundo.com
    tls
    wscript.exe
    395 B
     219 B
     5
    5
  • 103.50.163.157:443
    grapemundo.com
    tls
    wscript.exe
    357 B
     219 B
     5
    5
  • 103.50.163.157:443
    grapemundo.com
    tls
    wscript.exe
    288 B
     219 B
     5
    5
  • 103.50.163.157:443
    grapemundo.com
    wscript.exe
    190 B
     92 B
     4
    2
  • 8.8.8.8:53
    grapemundo.com
    dns
    wscript.exe
    60 B
     76 B
     1
    1

    DNS Request

    grapemundo.com

    DNS Response

    103.50.163.157

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.