Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

01b2501b5b...943.js

windows7-x64

1

01b2501b5b...943.js

windows10-2004-x64

1

Analysis

  • max time kernel
    149s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/12/2023, 19:27 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    01b2501b5bd811053881d9211946e943.js

  • Size

    196KB

  • MD5

    01b2501b5bd811053881d9211946e943

  • SHA1

    6bf2c944951ca6bdf20afcdd2a51396bc3e7d2a7

  • SHA256

    9863635bd6ef990a76fc91ed4b35e74c540631ed2b779891427917d8b7df07c7

  • SHA512

    0efb98a99559047bd1265493dd27583205d42f1c1080b64d60524b62ab8a13a55a05d2a3c4c428e0c8e3f78a9ef1a84e265bb302e7343856c95ab0f957c84fb3

  • SSDEEP

    3072:39THpv5IP5ioX3CxsmdukVwvTmeXTP+74:5oP9YsmdwbNXTL

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\01b2501b5bd811053881d9211946e943.js
    1⤵
      PID:3560

    Network

    • flag-us
      DNS
      158.240.127.40.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      158.240.127.40.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      85.177.190.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      85.177.190.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      182.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      182.178.17.96.in-addr.arpa
      IN PTR
      Response
      182.178.17.96.in-addr.arpa
      IN PTR
      a96-17-178-182deploystaticakamaitechnologiescom
    • flag-us
      DNS
      95.221.229.192.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      95.221.229.192.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      241.154.82.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      241.154.82.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      88.156.103.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      88.156.103.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      183.59.114.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      183.59.114.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      183.59.114.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      183.59.114.20.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      41.110.16.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      41.110.16.96.in-addr.arpa
      IN PTR
      Response
      41.110.16.96.in-addr.arpa
      IN PTR
      a96-16-110-41deploystaticakamaitechnologiescom
    • flag-us
      DNS
      59.128.231.4.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      59.128.231.4.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      146.78.124.51.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      146.78.124.51.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      206.23.85.13.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      206.23.85.13.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      217.135.221.88.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      217.135.221.88.in-addr.arpa
      IN PTR
      Response
      217.135.221.88.in-addr.arpa
      IN PTR
      a88-221-135-217deploystaticakamaitechnologiescom
    • flag-us
      DNS
      178.223.142.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      178.223.142.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      204.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      204.178.17.96.in-addr.arpa
      IN PTR
      Response
      204.178.17.96.in-addr.arpa
      IN PTR
      a96-17-178-204deploystaticakamaitechnologiescom
    • flag-us
      DNS
      183.1.37.23.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      183.1.37.23.in-addr.arpa
      IN PTR
      Response
      183.1.37.23.in-addr.arpa
      IN PTR
      a23-37-1-183deploystaticakamaitechnologiescom
    • flag-us
      DNS
      119.110.54.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      119.110.54.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      26.35.223.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      26.35.223.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      18.134.221.88.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      18.134.221.88.in-addr.arpa
      IN PTR
      Response
      18.134.221.88.in-addr.arpa
      IN PTR
      a88-221-134-18deploystaticakamaitechnologiescom
    • flag-us
      DNS
      18.134.221.88.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      18.134.221.88.in-addr.arpa
      IN PTR
      Response
      18.134.221.88.in-addr.arpa
      IN PTR
      a88-221-134-18deploystaticakamaitechnologiescom
    • flag-us
      DNS
      59.134.221.88.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      59.134.221.88.in-addr.arpa
      IN PTR
      Response
      59.134.221.88.in-addr.arpa
      IN PTR
      a88-221-134-59deploystaticakamaitechnologiescom
    • flag-us
      DNS
      59.134.221.88.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      59.134.221.88.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      191.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      191.178.17.96.in-addr.arpa
      IN PTR
      Response
      191.178.17.96.in-addr.arpa
      IN PTR
      a96-17-178-191deploystaticakamaitechnologiescom
    • flag-us
      DNS
      191.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      191.178.17.96.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      30.243.111.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      30.243.111.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      30.243.111.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      30.243.111.52.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      67.134.221.88.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      67.134.221.88.in-addr.arpa
      IN PTR
      Response
      67.134.221.88.in-addr.arpa
      IN PTR
      a88-221-134-67deploystaticakamaitechnologiescom
    • flag-us
      DNS
      67.134.221.88.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      67.134.221.88.in-addr.arpa
      IN PTR
      Response
      67.134.221.88.in-addr.arpa
      IN PTR
      a88-221-134-67deploystaticakamaitechnologiescom
    • flag-us
      DNS
      55.36.223.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      55.36.223.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      55.36.223.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      55.36.223.20.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      55.36.223.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      55.36.223.20.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      tse1.mm.bing.net
      Remote address:
      8.8.8.8:53
      Request
      tse1.mm.bing.net
      IN A
      Response
      tse1.mm.bing.net
      IN CNAME
      mm-mm.bing.net.trafficmanager.net
      mm-mm.bing.net.trafficmanager.net
      IN CNAME
      dual-a-0001.a-msedge.net
      dual-a-0001.a-msedge.net
      IN A
      204.79.197.200
      dual-a-0001.a-msedge.net
      IN A
      13.107.21.200
    • flag-us
      DNS
      tse1.mm.bing.net
      Remote address:
      8.8.8.8:53
      Request
      tse1.mm.bing.net
      IN A
      Response
      tse1.mm.bing.net
      IN CNAME
      mm-mm.bing.net.trafficmanager.net
      mm-mm.bing.net.trafficmanager.net
      IN CNAME
      dual-a-0001.a-msedge.net
      dual-a-0001.a-msedge.net
      IN A
      204.79.197.200
      dual-a-0001.a-msedge.net
      IN A
      13.107.21.200
    • flag-us
      DNS
      178.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      178.178.17.96.in-addr.arpa
      IN PTR
      Response
      178.178.17.96.in-addr.arpa
      IN PTR
      a96-17-178-178deploystaticakamaitechnologiescom
    • flag-us
      DNS
      178.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      178.178.17.96.in-addr.arpa
      IN PTR
      Response
      178.178.17.96.in-addr.arpa
      IN PTR
      a96-17-178-178deploystaticakamaitechnologiescom
    • 96.17.178.191:80
    • 96.17.178.191:80
    • 88.221.134.67:80
    • 88.221.134.67:80
    • 88.221.134.67:80
    • 88.221.134.67:80
    • 204.79.197.200:443
      tse1.mm.bing.net
      104 B
       2
    • 204.79.197.200:443
      tse1.mm.bing.net
      104 B
       2
    • 204.79.197.200:443
      tse1.mm.bing.net
      104 B
       2
    • 204.79.197.200:443
      tse1.mm.bing.net
      https
      3.8kB
       96.5kB
       73
      71
    • 204.79.197.200:443
      tse1.mm.bing.net
      104 B
       2
    • 192.229.221.95:80
    • 96.17.178.178:80
    • 96.17.178.178:80
    • 13.107.21.200:443
      tse1.mm.bing.net
      104 B
       2
    • 13.107.21.200:443
      tse1.mm.bing.net
      156 B
       3
    • 13.107.21.200:443
      tse1.mm.bing.net
      104 B
       2
    • 96.17.178.178:80
    • 96.17.178.178:80
    • 96.17.178.178:80
    • 96.17.178.178:80
    • 96.17.178.178:80
    • 96.17.178.178:80
    • 96.17.178.178:80
    • 96.17.178.178:80
    • 96.17.178.178:80
    • 96.17.178.178:80
    • 96.17.178.178:80
    • 96.17.178.178:80
    • 96.17.178.178:80
    • 96.17.178.178:80
    • 96.17.178.178:80
    • 96.17.178.178:80
    • 96.17.178.178:80
    • 96.17.178.178:80
    • 8.8.8.8:53
      158.240.127.40.in-addr.arpa
      dns
      73 B
       147 B
       1
      1

      DNS Request

      158.240.127.40.in-addr.arpa

    • 8.8.8.8:53
      85.177.190.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      85.177.190.20.in-addr.arpa

    • 8.8.8.8:53
      182.178.17.96.in-addr.arpa
      dns
      72 B
       137 B
       1
      1

      DNS Request

      182.178.17.96.in-addr.arpa

    • 8.8.8.8:53
      95.221.229.192.in-addr.arpa
      dns
      73 B
       144 B
       1
      1

      DNS Request

      95.221.229.192.in-addr.arpa

    • 8.8.8.8:53
      241.154.82.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      241.154.82.20.in-addr.arpa

    • 8.8.8.8:53
      88.156.103.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      88.156.103.20.in-addr.arpa

    • 8.8.8.8:53
      183.59.114.20.in-addr.arpa
      dns
      144 B
       158 B
       2
      1

      DNS Request

      183.59.114.20.in-addr.arpa

      DNS Request

      183.59.114.20.in-addr.arpa

    • 8.8.8.8:53
      41.110.16.96.in-addr.arpa
      dns
      71 B
       135 B
       1
      1

      DNS Request

      41.110.16.96.in-addr.arpa

    • 8.8.8.8:53
      59.128.231.4.in-addr.arpa
      dns
      71 B
       157 B
       1
      1

      DNS Request

      59.128.231.4.in-addr.arpa

    • 8.8.8.8:53
      146.78.124.51.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      146.78.124.51.in-addr.arpa

    • 8.8.8.8:53
      206.23.85.13.in-addr.arpa
      dns
      71 B
       145 B
       1
      1

      DNS Request

      206.23.85.13.in-addr.arpa

    • 8.8.8.8:53
      217.135.221.88.in-addr.arpa
      dns
      73 B
       139 B
       1
      1

      DNS Request

      217.135.221.88.in-addr.arpa

    • 8.8.8.8:53
      178.223.142.52.in-addr.arpa
      dns
      73 B
       147 B
       1
      1

      DNS Request

      178.223.142.52.in-addr.arpa

    • 8.8.8.8:53
      204.178.17.96.in-addr.arpa
      dns
      72 B
       137 B
       1
      1

      DNS Request

      204.178.17.96.in-addr.arpa

    • 8.8.8.8:53
      183.1.37.23.in-addr.arpa
      dns
      70 B
       133 B
       1
      1

      DNS Request

      183.1.37.23.in-addr.arpa

    • 8.8.8.8:53
      119.110.54.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      119.110.54.20.in-addr.arpa

    • 8.8.8.8:53
      26.35.223.20.in-addr.arpa
      dns
      71 B
       157 B
       1
      1

      DNS Request

      26.35.223.20.in-addr.arpa

    • 8.8.8.8:53
      18.134.221.88.in-addr.arpa
      dns
      144 B
       274 B
       2
      2

      DNS Request

      18.134.221.88.in-addr.arpa

      DNS Request

      18.134.221.88.in-addr.arpa

    • 8.8.8.8:53
      59.134.221.88.in-addr.arpa
      dns
      144 B
       137 B
       2
      1

      DNS Request

      59.134.221.88.in-addr.arpa

      DNS Request

      59.134.221.88.in-addr.arpa

    • 8.8.8.8:53
      191.178.17.96.in-addr.arpa
      dns
      144 B
       137 B
       2
      1

      DNS Request

      191.178.17.96.in-addr.arpa

      DNS Request

      191.178.17.96.in-addr.arpa

    • 8.8.8.8:53
      30.243.111.52.in-addr.arpa
      dns
      144 B
       158 B
       2
      1

      DNS Request

      30.243.111.52.in-addr.arpa

      DNS Request

      30.243.111.52.in-addr.arpa

    • 8.8.8.8:53
      67.134.221.88.in-addr.arpa
      dns
      144 B
       274 B
       2
      2

      DNS Request

      67.134.221.88.in-addr.arpa

      DNS Request

      67.134.221.88.in-addr.arpa

    • 8.8.8.8:53
      55.36.223.20.in-addr.arpa
      dns
      213 B
       157 B
       3
      1

      DNS Request

      55.36.223.20.in-addr.arpa

      DNS Request

      55.36.223.20.in-addr.arpa

      DNS Request

      55.36.223.20.in-addr.arpa

    • 8.8.8.8:53
      tse1.mm.bing.net
      dns
      124 B
       346 B
       2
      2

      DNS Request

      tse1.mm.bing.net

      DNS Request

      tse1.mm.bing.net

      DNS Response

      204.79.197.200
      13.107.21.200

      DNS Response

      204.79.197.200
      13.107.21.200

    • 8.8.8.8:53
      178.178.17.96.in-addr.arpa
      dns
      144 B
       274 B
       2
      2

      DNS Request

      178.178.17.96.in-addr.arpa

      DNS Request

      178.178.17.96.in-addr.arpa

    • 8.8.8.8:53

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.