Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

ccaa63730f...5bb.js

windows7-x64

1

ccaa63730f...5bb.js

windows10-2004-x64

1

Analysis

  • max time kernel
    145s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/03/2024, 00:40 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ccaa63730f90e3cff8017843c7b285bb.js

  • Size

    9KB

  • MD5

    ccaa63730f90e3cff8017843c7b285bb

  • SHA1

    930977a6c9ab4fa6066d3d40a45f429a7dc740e4

  • SHA256

    e822b8f16ddd602e1f882b0cd8051e897f88201bf876971d7850de8d6c39b663

  • SHA512

    491b0fc343e41074527cd4429d0720bda801c60d9b50f951d6be4be700d9b464a2fb3c93420401ad3895b8af53d6d7fb3c58d941100d67cf6271c52a2a10749a

  • SSDEEP

    192:oZKHYakP8B/OPvqxanR+WZTMWUWdhIZUTMP5TntMLLmMos:3HGyqrnR+uMT8heUg5TtMLFos

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\ccaa63730f90e3cff8017843c7b285bb.js
    1⤵
      PID:872

    Network

    • flag-us
      DNS
      178.223.142.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      178.223.142.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      241.150.49.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      241.150.49.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      209.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      209.178.17.96.in-addr.arpa
      IN PTR
      Response
      209.178.17.96.in-addr.arpa
      IN PTR
      a96-17-178-209deploystaticakamaitechnologiescom
    • flag-us
      DNS
      71.159.190.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      71.159.190.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      95.221.229.192.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      95.221.229.192.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      28.118.140.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      28.118.140.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      www.microsoft.com
      Remote address:
      8.8.8.8:53
      Request
      www.microsoft.com
      IN A
      Response
      www.microsoft.com
      IN CNAME
      www.microsoft.com-c-3.edgekey.net
      www.microsoft.com-c-3.edgekey.net
      IN CNAME
      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
      www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
      IN CNAME
      e13678.dscb.akamaiedge.net
      e13678.dscb.akamaiedge.net
      IN A
      92.123.241.137
    • flag-gb
      GET
      http://www.microsoft.com/pkiops/certs/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crt
      Remote address:
      92.123.241.137:80
      Request
      GET /pkiops/certs/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crt HTTP/1.1
      Connection: Keep-Alive
      Accept: */*
      User-Agent: Microsoft-CryptoAPI/10.0
      Host: www.microsoft.com
      Response
      HTTP/1.1 200 OK
      Content-Length: 1126
      Content-Type: application/octet-stream
      Content-MD5: YAUaFgF7vUODUG8XQQW6BQ==
      Last-Modified: Fri, 28 Sep 2018 22:50:05 GMT
      ETag: 0x8D62594BC0C84D8
      x-ms-request-id: 9327f1ba-601e-004f-4648-1536e4000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      X-EdgeConnect-Origin-MEX-Latency: 213
      X-EdgeConnect-Origin-MEX-Latency: 113
      Date: Sat, 16 Mar 2024 00:41:26 GMT
      Connection: keep-alive
      TLS_version: UNKNOWN
      ms-cv: CASMicrosoftCV1f700a19.0
      ms-cv-esi: CASMicrosoftCV1f700a19.0
      X-RTag: RT
    • flag-gb
      GET
      http://www.microsoft.com/pkiops/certs/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crt
      Remote address:
      92.123.241.137:80
      Request
      GET /pkiops/certs/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crt HTTP/1.1
      Connection: Keep-Alive
      Accept: */*
      User-Agent: Microsoft-CryptoAPI/10.0
      Host: www.microsoft.com
      Response
      HTTP/1.1 200 OK
      Content-Length: 1126
      Content-Type: application/octet-stream
      Content-MD5: YAUaFgF7vUODUG8XQQW6BQ==
      Last-Modified: Fri, 28 Sep 2018 22:50:05 GMT
      ETag: 0x8D62594BC0C84D8
      x-ms-request-id: 9327f1ba-601e-004f-4648-1536e4000000
      x-ms-version: 2009-09-19
      x-ms-lease-status: unlocked
      x-ms-blob-type: BlockBlob
      X-EdgeConnect-Origin-MEX-Latency: 113
      Date: Sat, 16 Mar 2024 00:41:26 GMT
      Connection: keep-alive
      TLS_version: UNKNOWN
      ms-cv: CASMicrosoftCV1d742a91.0
      ms-cv-esi: CASMicrosoftCV1d742a91.0
      X-RTag: RT
    • flag-us
      DNS
      137.241.123.92.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      137.241.123.92.in-addr.arpa
      IN PTR
      Response
      137.241.123.92.in-addr.arpa
      IN PTR
      a92-123-241-137deploystaticakamaitechnologiescom
    • flag-us
      DNS
      26.165.165.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      26.165.165.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      18.31.95.13.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      18.31.95.13.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      240.221.184.93.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      240.221.184.93.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      90.65.42.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      90.65.42.20.in-addr.arpa
      IN PTR
      Response
    • 92.123.241.137:80
      http://www.microsoft.com/pkiops/certs/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crt
      http
      418 B
       1.9kB
       5
      4

      HTTP Request

      GET http://www.microsoft.com/pkiops/certs/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crt

      HTTP Response

      200
    • 92.123.241.137:80
      http://www.microsoft.com/pkiops/certs/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crt
      http
      418 B
       1.8kB
       5
      4

      HTTP Request

      GET http://www.microsoft.com/pkiops/certs/Microsoft%20ECC%20Update%20Secure%20Server%20CA%202.1.crt

      HTTP Response

      200
    • 8.8.8.8:53
      178.223.142.52.in-addr.arpa
      dns
      73 B
       147 B
       1
      1

      DNS Request

      178.223.142.52.in-addr.arpa

    • 8.8.8.8:53
      241.150.49.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      241.150.49.20.in-addr.arpa

    • 8.8.8.8:53
      209.178.17.96.in-addr.arpa
      dns
      72 B
       137 B
       1
      1

      DNS Request

      209.178.17.96.in-addr.arpa

    • 8.8.8.8:53
      71.159.190.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      71.159.190.20.in-addr.arpa

    • 8.8.8.8:53
      95.221.229.192.in-addr.arpa
      dns
      73 B
       144 B
       1
      1

      DNS Request

      95.221.229.192.in-addr.arpa

    • 8.8.8.8:53
      28.118.140.52.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      28.118.140.52.in-addr.arpa

    • 8.8.8.8:53
      www.microsoft.com
      dns
      63 B
       230 B
       1
      1

      DNS Request

      www.microsoft.com

      DNS Response

      92.123.241.137

    • 8.8.8.8:53
      26.165.165.52.in-addr.arpa
      dns
      72 B
       146 B
       1
      1

      DNS Request

      26.165.165.52.in-addr.arpa

    • 8.8.8.8:53
      137.241.123.92.in-addr.arpa
      dns
      73 B
       139 B
       1
      1

      DNS Request

      137.241.123.92.in-addr.arpa

    • 8.8.8.8:53
      18.31.95.13.in-addr.arpa
      dns
      70 B
       144 B
       1
      1

      DNS Request

      18.31.95.13.in-addr.arpa

    • 8.8.8.8:53
      240.221.184.93.in-addr.arpa
      dns
      73 B
       144 B
       1
      1

      DNS Request

      240.221.184.93.in-addr.arpa

    • 8.8.8.8:53
      90.65.42.20.in-addr.arpa
      dns
      70 B
       156 B
       1
      1

      DNS Request

      90.65.42.20.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.