Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

1

shop8/电�...��.url

windows7-x64

1

shop8/电�...��.url

windows10-2004-x64

1

shop8/电�...ay.vbs

windows7-x64

1

shop8/电�...ay.vbs

windows10-2004-x64

1

shop8/电�...de.vbs

windows7-x64

1

shop8/电�...de.vbs

windows10-2004-x64

1

shop8/电�...D5.vbs

windows7-x64

1

shop8/电�...D5.vbs

windows10-2004-x64

1

shop8/电�...at.vbs

windows7-x64

1

shop8/电�...at.vbs

windows10-2004-x64

1

shop8/电�...op.vbs

windows7-x64

1

shop8/电�...op.vbs

windows10-2004-x64

1

shop8/电�...ct.vbs

windows7-x64

1

shop8/电�...ct.vbs

windows10-2004-x64

1

shop8/电�...to.vbs

windows7-x64

1

shop8/电�...to.vbs

windows10-2004-x64

1

shop8/电�...ct.vbs

windows7-x64

1

shop8/电�...ct.vbs

windows10-2004-x64

1

shop8/电�...de.vbs

windows7-x64

1

shop8/电�...de.vbs

windows10-2004-x64

1

shop8/电�...ct.vbs

windows7-x64

1

shop8/电�...ct.vbs

windows10-2004-x64

1

shop8/电�...IP.vbs

windows7-x64

1

shop8/电�...IP.vbs

windows10-2004-x64

1

shop8/电�...er.asp

windows7-x64

3

shop8/电�...er.asp

windows10-2004-x64

3

shop8/电�...2.html

windows7-x64

1

shop8/电�...2.html

windows10-2004-x64

1

shop8/电�...AD.vbs

windows7-x64

1

shop8/电�...AD.vbs

windows10-2004-x64

1

shop8/电�...QQ.vbs

windows7-x64

1

shop8/电�...QQ.vbs

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 00:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    shop8/电子商务购物网站管理系统/电子商务购物网站管理系统SQL版/admin/PayHacker.asp

  • Size

    71B

  • MD5

    90edfa9d1b6b14299125a530c7351686

  • SHA1

    dd576997a75d23c8841560bcb3887795e29bd78e

  • SHA256

    b106e9d7b184c1906db6b91de665795ae54a361c96ec3d4a75d5538d1c36fcfc

  • SHA512

    0f7e0426c1c1ed793d86fda77a74d5a268a701f60a7eb6f53c423ab3ac7dcd96844ee1e0b6e0be95516295b3811e9ad913ed5bf4be83ef6f7d48453e21c1a510

Score
3/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\shop8\电子商务购物网站管理系统\电子商务购物网站管理系统SQL版\admin\PayHacker.asp
    1⤵
      PID:1364

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1364-21-0x00000000005B0000-0x00000000005B1000-memory.dmp

      Filesize

      4KB

      Download