Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

lol.exe

windows7-x64

7

lol.exe

windows7-x64

7

lol.exe

windows10-1703-x64

7

lol.exe

windows10-2004-x64

7

lol.exe

windows11-21h2-x64

7

Resubmissions

23/02/2024, 15:00 UTC

240223-sdjx1ace7v 10

23/02/2024, 14:44 UTC

240223-r4hbesbc58 10

Analysis

  • max time kernel
    699s
  • max time network
    700s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    23/02/2024, 15:00 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    lol.exe

  • Size

    214KB

  • MD5

    bd367e4170e17df14b5a6a15cdfd79b0

  • SHA1

    206cb6b1336d890e2bb8f4f36cf27b9d78ca8b1a

  • SHA256

    1b0fb3b5cd0ff954ab04c5502d0be2270181da75cca92f84ab91e4142745ed56

  • SHA512

    c62163ea1be9652862112116200ca0153737b7af6b1439b820687c4bbaf52fb616c70bbd3ca55dfe3d24a178a99d831ef6819e685de5e838473b26ea6281b5f6

  • SSDEEP

    6144:DXP9zPvM92B+64kQ2EJam2dNREz9FdOZMJwGuE4QyZom8exsrPR5TE7D0XuDTTo6:DX5s2B+64kQHam2dNREz9FdOZMJwGuEu

Score
7/10
persistence

Malware Config

Signatures

  • Drops startup file 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 13 IoCs
  • Kills process with taskkill 2 IoCs
    evasion
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\lol.exe
    "C:\Users\Admin\AppData\Local\Temp\lol.exe"
    1⤵
    • Drops startup file
    • Adds Run key to start application
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2696
    • C:\Windows\SysWOW64\TASKKILL.exe
      TASKKILL /F /IM wscript.exe
      2⤵
      • Kills process with taskkill
      • Suspicious use of AdjustPrivilegeToken
      PID:972
    • C:\Windows\SysWOW64\TASKKILL.exe
      TASKKILL /F /IM cmd.exe
      2⤵
      • Kills process with taskkill
      • Suspicious use of AdjustPrivilegeToken
      PID:2028

Network

  • flag-us
    DNS
    0.tcp.eu.ngrok.io
    lol.exe
    Remote address:
    8.8.8.8:53
    Request
    0.tcp.eu.ngrok.io
    IN A
    Response
    0.tcp.eu.ngrok.io
    IN A
    3.125.223.134
  • flag-us
    DNS
    0.tcp.eu.ngrok.io
    lol.exe
    Remote address:
    8.8.8.8:53
    Request
    0.tcp.eu.ngrok.io
    IN A
    Response
    0.tcp.eu.ngrok.io
    IN A
    3.124.142.205
  • flag-us
    DNS
    0.tcp.eu.ngrok.io
    lol.exe
    Remote address:
    8.8.8.8:53
    Request
    0.tcp.eu.ngrok.io
    IN A
    Response
    0.tcp.eu.ngrok.io
    IN A
    18.192.31.165
  • flag-us
    DNS
    0.tcp.eu.ngrok.io
    lol.exe
    Remote address:
    8.8.8.8:53
    Request
    0.tcp.eu.ngrok.io
    IN A
    Response
    0.tcp.eu.ngrok.io
    IN A
    3.125.209.94
  • flag-us
    DNS
    0.tcp.eu.ngrok.io
    lol.exe
    Remote address:
    8.8.8.8:53
    Request
    0.tcp.eu.ngrok.io
    IN A
    Response
    0.tcp.eu.ngrok.io
    IN A
    3.124.142.205
  • flag-us
    DNS
    0.tcp.eu.ngrok.io
    lol.exe
    Remote address:
    8.8.8.8:53
    Request
    0.tcp.eu.ngrok.io
    IN A
    Response
    0.tcp.eu.ngrok.io
    IN A
    18.192.31.165
  • flag-us
    DNS
    0.tcp.eu.ngrok.io
    lol.exe
    Remote address:
    8.8.8.8:53
    Request
    0.tcp.eu.ngrok.io
    IN A
    Response
    0.tcp.eu.ngrok.io
    IN A
    18.158.249.75
  • flag-us
    DNS
    0.tcp.eu.ngrok.io
    lol.exe
    Remote address:
    8.8.8.8:53
    Request
    0.tcp.eu.ngrok.io
    IN A
    Response
    0.tcp.eu.ngrok.io
    IN A
    3.125.223.134
  • flag-us
    DNS
    0.tcp.eu.ngrok.io
    lol.exe
    Remote address:
    8.8.8.8:53
    Request
    0.tcp.eu.ngrok.io
    IN A
    Response
    0.tcp.eu.ngrok.io
    IN A
    3.124.142.205
  • flag-us
    DNS
    0.tcp.eu.ngrok.io
    lol.exe
    Remote address:
    8.8.8.8:53
    Request
    0.tcp.eu.ngrok.io
    IN A
    Response
    0.tcp.eu.ngrok.io
    IN A
    3.125.223.134
  • flag-us
    DNS
    0.tcp.eu.ngrok.io
    lol.exe
    Remote address:
    8.8.8.8:53
    Request
    0.tcp.eu.ngrok.io
    IN A
    Response
    0.tcp.eu.ngrok.io
    IN A
    3.124.142.205
  • flag-us
    DNS
    0.tcp.eu.ngrok.io
    lol.exe
    Remote address:
    8.8.8.8:53
    Request
    0.tcp.eu.ngrok.io
    IN A
    Response
    0.tcp.eu.ngrok.io
    IN A
    3.125.223.134
  • flag-us
    DNS
    0.tcp.eu.ngrok.io
    lol.exe
    Remote address:
    8.8.8.8:53
    Request
    0.tcp.eu.ngrok.io
    IN A
    Response
    0.tcp.eu.ngrok.io
    IN A
    3.125.102.39
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     80 B
     3
    2
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     80 B
     3
    2
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     80 B
     3
    2
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     80 B
     3
    2
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.209.94:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.209.94:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.209.94:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.209.94:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.209.94:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.209.94:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.209.94:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.209.94:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.209.94:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.209.94:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.209.94:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.209.94:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.209.94:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.209.94:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.209.94:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.209.94:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.209.94:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.209.94:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.209.94:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.192.31.165:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.158.249.75:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.158.249.75:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.158.249.75:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.158.249.75:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.158.249.75:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.158.249.75:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.158.249.75:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.158.249.75:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.158.249.75:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.158.249.75:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.158.249.75:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.158.249.75:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.158.249.75:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.158.249.75:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.158.249.75:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.158.249.75:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.158.249.75:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 18.158.249.75:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     80 B
     3
    2
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.124.142.205:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.223.134:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.102.39:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.102.39:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.102.39:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.102.39:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.102.39:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 3.125.102.39:12607
    0.tcp.eu.ngrok.io
    lol.exe
    152 B
     120 B
     3
    3
  • 8.8.8.8:53
    0.tcp.eu.ngrok.io
    dns
    lol.exe
    63 B
     79 B
     1
    1

    DNS Request

    0.tcp.eu.ngrok.io

    DNS Response

    3.125.223.134

  • 8.8.8.8:53
    0.tcp.eu.ngrok.io
    dns
    lol.exe
    63 B
     79 B
     1
    1

    DNS Request

    0.tcp.eu.ngrok.io

    DNS Response

    3.124.142.205

  • 8.8.8.8:53
    0.tcp.eu.ngrok.io
    dns
    lol.exe
    63 B
     79 B
     1
    1

    DNS Request

    0.tcp.eu.ngrok.io

    DNS Response

    18.192.31.165

  • 8.8.8.8:53
    0.tcp.eu.ngrok.io
    dns
    lol.exe
    63 B
     79 B
     1
    1

    DNS Request

    0.tcp.eu.ngrok.io

    DNS Response

    3.125.209.94

  • 8.8.8.8:53
    0.tcp.eu.ngrok.io
    dns
    lol.exe
    63 B
     79 B
     1
    1

    DNS Request

    0.tcp.eu.ngrok.io

    DNS Response

    3.124.142.205

  • 8.8.8.8:53
    0.tcp.eu.ngrok.io
    dns
    lol.exe
    63 B
     79 B
     1
    1

    DNS Request

    0.tcp.eu.ngrok.io

    DNS Response

    18.192.31.165

  • 8.8.8.8:53
    0.tcp.eu.ngrok.io
    dns
    lol.exe
    63 B
     79 B
     1
    1

    DNS Request

    0.tcp.eu.ngrok.io

    DNS Response

    18.158.249.75

  • 8.8.8.8:53
    0.tcp.eu.ngrok.io
    dns
    lol.exe
    63 B
     79 B
     1
    1

    DNS Request

    0.tcp.eu.ngrok.io

    DNS Response

    3.125.223.134

  • 8.8.8.8:53
    0.tcp.eu.ngrok.io
    dns
    lol.exe
    63 B
     79 B
     1
    1

    DNS Request

    0.tcp.eu.ngrok.io

    DNS Response

    3.124.142.205

  • 8.8.8.8:53
    0.tcp.eu.ngrok.io
    dns
    lol.exe
    63 B
     79 B
     1
    1

    DNS Request

    0.tcp.eu.ngrok.io

    DNS Response

    3.125.223.134

  • 8.8.8.8:53
    0.tcp.eu.ngrok.io
    dns
    lol.exe
    63 B
     79 B
     1
    1

    DNS Request

    0.tcp.eu.ngrok.io

    DNS Response

    3.124.142.205

  • 8.8.8.8:53
    0.tcp.eu.ngrok.io
    dns
    lol.exe
    63 B
     79 B
     1
    1

    DNS Request

    0.tcp.eu.ngrok.io

    DNS Response

    3.125.223.134

  • 8.8.8.8:53
    0.tcp.eu.ngrok.io
    dns
    lol.exe
    63 B
     79 B
     1
    1

    DNS Request

    0.tcp.eu.ngrok.io

    DNS Response

    3.125.102.39

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2696-0-0x0000000074730000-0x0000000074CDB000-memory.dmp

    Filesize

    5.7MB

    Download

  • memory/2696-2-0x0000000000CE0000-0x0000000000D20000-memory.dmp

    Filesize

    256KB

    Download

  • memory/2696-1-0x0000000074730000-0x0000000074CDB000-memory.dmp

    Filesize

    5.7MB

    Download

  • memory/2696-17-0x0000000074730000-0x0000000074CDB000-memory.dmp

    Filesize

    5.7MB

    Download

  • memory/2696-18-0x0000000074730000-0x0000000074CDB000-memory.dmp

    Filesize

    5.7MB

    Download

  • memory/2696-19-0x0000000000CE0000-0x0000000000D20000-memory.dmp

    Filesize

    256KB

    Download

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.