Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

17/04/2024, 02:20 UTC

240417-csentscf4v 1

17/04/2024, 01:50 UTC

240417-b9q8hsae35 1

17/04/2024, 01:33 UTC

240417-bytjhaaa49 1

17/04/2024, 01:12 UTC

240417-bkzhlahe37 1

17/04/2024, 00:55 UTC

240417-a9swnsha78 1

17/04/2024, 00:37 UTC

240417-ayl9ragg37 1

17/04/2024, 00:36 UTC

240417-ax4gmsac3x 4

17/04/2024, 00:35 UTC

240417-axa54agf84 7

17/04/2024, 00:23 UTC

240417-apyanaaa6s 1

Analysis

  • max time kernel
    52s
  • max time network
    49s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    17/04/2024, 00:35 UTC

General

  • Target

    http://instagram.com

Score
7/10

Malware Config

Signatures

Processes

  • com.android.chrome
    1⤵
    • Checks CPU information
    • Checks memory information
    PID:4384

Network

  • flag-us
    DNS
    static.xx.fbcdn.net
    Remote address:
    1.1.1.1:53
    Request
    static.xx.fbcdn.net
    IN A
    Response
    static.xx.fbcdn.net
    IN CNAME
    scontent.xx.fbcdn.net
    scontent.xx.fbcdn.net
    IN A
    157.240.214.11
  • flag-us
    DNS
    m.youtube.com
    Remote address:
    1.1.1.1:53
    Request
    m.youtube.com
    IN A
    Response
    m.youtube.com
    IN A
    142.250.187.206
  • flag-us
    DNS
    images-na.ssl-images-amazon.com
    Remote address:
    1.1.1.1:53
    Request
    images-na.ssl-images-amazon.com
    IN A
    Response
    images-na.ssl-images-amazon.com
    IN CNAME
    m.media-amazon.com
    m.media-amazon.com
    IN CNAME
    tp.c47710ee9-frontier.media-amazon.com
    tp.c47710ee9-frontier.media-amazon.com
    IN CNAME
    f.media-amazon.com
    f.media-amazon.com
    IN CNAME
    media.amazon.map.fastly.net
    media.amazon.map.fastly.net
    IN A
    151.101.1.16
    media.amazon.map.fastly.net
    IN A
    151.101.65.16
    media.amazon.map.fastly.net
    IN A
    151.101.193.16
    media.amazon.map.fastly.net
    IN A
    151.101.129.16
  • flag-us
    DNS
    en.m.wikipedia.org
    Remote address:
    1.1.1.1:53
    Request
    en.m.wikipedia.org
    IN A
    Response
    en.m.wikipedia.org
    IN CNAME
    dyna.wikimedia.org
    dyna.wikimedia.org
    IN A
    185.15.59.224
  • flag-us
    DNS
    a.espncdn.com
    Remote address:
    1.1.1.1:53
    Request
    a.espncdn.com
    IN A
    Response
    a.espncdn.com
    IN CNAME
    a.espncdn.com.stls.edgesuite.net
    a.espncdn.com.stls.edgesuite.net
    IN CNAME
    a1793.dscg1.akamai.net
    a1793.dscg1.akamai.net
    IN A
    2.16.170.34
    a1793.dscg1.akamai.net
    IN A
    2.16.170.123
  • flag-us
    DNS
    s.yimg.com
    Remote address:
    1.1.1.1:53
    Request
    s.yimg.com
    IN A
    Response
    s.yimg.com
    IN CNAME
    edge.gycpi.b.yahoodns.net
    edge.gycpi.b.yahoodns.net
    IN A
    87.248.114.11
    edge.gycpi.b.yahoodns.net
    IN A
    87.248.114.12
  • flag-us
    DNS
    ir.ebaystatic.com
    Remote address:
    1.1.1.1:53
    Request
    ir.ebaystatic.com
    IN A
    Response
    ir.ebaystatic.com
    IN CNAME
    ir.ebaycdn.net
    ir.ebaycdn.net
    IN CNAME
    ebaystatic.ebay.map.fastly.net
    ebaystatic.ebay.map.fastly.net
    IN A
    151.101.194.206
    ebaystatic.ebay.map.fastly.net
    IN A
    151.101.130.206
    ebaystatic.ebay.map.fastly.net
    IN A
    151.101.66.206
    ebaystatic.ebay.map.fastly.net
    IN A
    151.101.2.206
  • flag-us
    DNS
    www.instagram.com
    Remote address:
    1.1.1.1:53
    Request
    www.instagram.com
    IN A
    Response
    www.instagram.com
    IN CNAME
    z-p42-instagram.c10r.instagram.com
    z-p42-instagram.c10r.instagram.com
    IN A
    163.70.147.174
  • flag-gb
    GET
    http://a.espncdn.com/wireless/mw5/r1/images/bookmark-icons/espn_icon-152x152.min.png
    Remote address:
    2.16.170.34:80
    Request
    GET /wireless/mw5/r1/images/bookmark-icons/espn_icon-152x152.min.png HTTP/1.1
    Host: a.espncdn.com
    Connection: keep-alive
    User-Agent: Mozilla/5.0 (Linux; Android 9; AOSP on IA Emulator Build/PSR1.180720.122) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Mobile Safari/537.36
    Accept-Encoding: gzip, deflate
    Accept-Language: en-US,en;q=0.9
    Response
    HTTP/1.1 200 OK
    Last-Modified: Sat, 02 Jun 2018 13:44:29 GMT
    ETag: "9ac9e9363b76587769dda7c61107e9a9"
    X-DataStream-Cache-Status: 1
    Server: AmazonS3
    Content-Type: image/png
    Content-Length: 2790
    Accept-Ranges: bytes
    Cache-Control: max-age=13207
    Date: Wed, 17 Apr 2024 00:35:24 GMT
    Connection: keep-alive
    Access-Control-Allow-Origin: *
  • flag-us
    DNS
    www.google.com
    Remote address:
    1.1.1.1:53
    Request
    www.google.com
    IN A
    Response
    www.google.com
    IN A
    142.250.180.4
  • flag-us
    DNS
    safebrowsing.googleapis.com
    Remote address:
    1.1.1.1:53
    Request
    safebrowsing.googleapis.com
    IN A
    Response
    safebrowsing.googleapis.com
    IN A
    172.217.16.234
  • flag-us
    DNS
    static.cdninstagram.com
    Remote address:
    1.1.1.1:53
    Request
    static.cdninstagram.com
    IN A
    Response
    static.cdninstagram.com
    IN CNAME
    scontent.cdninstagram.com
    scontent.cdninstagram.com
    IN A
    157.240.221.63
  • flag-us
    DNS
    update.googleapis.com
    Remote address:
    1.1.1.1:53
    Request
    update.googleapis.com
    IN A
    Response
    update.googleapis.com
    IN A
    142.250.187.227
  • flag-gb
    POST
    https://update.googleapis.com/service/update2
    Remote address:
    142.250.187.227:443
    Request
    POST /service/update2 HTTP/1.1
    Content-Length: 660
    Content-Type: application/x-www-form-urlencoded
    User-Agent: Dalvik/2.1.0 (Linux; U; Android 9; Pixel 2 Build/PSR1.180720.122)
    Host: update.googleapis.com
    Connection: Keep-Alive
    Accept-Encoding: gzip
    Response
    HTTP/1.1 200 OK
    Content-Security-Policy: script-src 'report-sample' 'nonce-v7kYKckUP66Ftc_UrEwpJQ' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Wed, 17 Apr 2024 00:35:29 GMT
    Content-Type: text/xml; charset=UTF-8
    X-Daynum: 6315
    X-Daystart: 63329
    Content-Encoding: gzip
    X-Content-Type-Options: nosniff
    X-Frame-Options: SAMEORIGIN
    X-XSS-Protection: 1; mode=block
    Server: GSE
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-gb
    POST
    https://update.googleapis.com/service/update2
    Remote address:
    142.250.187.227:443
    Request
    POST /service/update2 HTTP/1.1
    Content-Length: 654
    Content-Type: application/x-www-form-urlencoded
    User-Agent: Dalvik/2.1.0 (Linux; U; Android 9; Pixel 2 Build/PSR1.180720.122)
    Host: update.googleapis.com
    Connection: Keep-Alive
    Accept-Encoding: gzip
    Response
    HTTP/1.1 200 OK
    Content-Security-Policy: script-src 'report-sample' 'nonce-eL0w5hhNSMd_nnJe4h-EuA' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Wed, 17 Apr 2024 00:35:29 GMT
    Content-Type: text/xml; charset=UTF-8
    X-Daynum: 6315
    X-Daystart: 63329
    Content-Encoding: gzip
    X-Content-Type-Options: nosniff
    X-Frame-Options: SAMEORIGIN
    X-XSS-Protection: 1; mode=block
    Server: GSE
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-us
    DNS
    szswiwbynle
    Remote address:
    1.1.1.1:53
    Request
    szswiwbynle
    IN A
    Response
  • flag-us
    DNS
    zkvxopnu
    Remote address:
    1.1.1.1:53
    Request
    zkvxopnu
    IN A
    Response
  • flag-us
    DNS
    ynpabqllmtuf
    Remote address:
    1.1.1.1:53
    Request
    ynpabqllmtuf
    IN A
    Response
  • flag-us
    DNS
    www.facebook.com
    Remote address:
    1.1.1.1:53
    Request
    www.facebook.com
    IN A
    Response
    www.facebook.com
    IN CNAME
    star-mini.c10r.facebook.com
    star-mini.c10r.facebook.com
    IN A
    163.70.151.35
  • flag-us
    DNS
    android.apis.google.com
    Remote address:
    1.1.1.1:53
    Request
    android.apis.google.com
    IN A
    Response
    android.apis.google.com
    IN CNAME
    clients.l.google.com
    clients.l.google.com
    IN A
    142.250.200.46
  • 157.240.214.11:443
    static.xx.fbcdn.net
    tls
    1.6kB
    8.1kB
    16
    15
  • 142.250.187.206:443
    m.youtube.com
    tls
    4.1kB
    111.8kB
    65
    86
  • 151.101.1.16:443
    images-na.ssl-images-amazon.com
    tls
    1.6kB
    9.9kB
    17
    17
  • 185.15.59.224:443
    en.m.wikipedia.org
    tls
    1.3kB
    6.9kB
    13
    9
  • 2.16.170.34:80
    http://a.espncdn.com/wireless/mw5/r1/images/bookmark-icons/espn_icon-152x152.min.png
    http
    679 B
    3.4kB
    6
    5

    HTTP Request

    GET http://a.espncdn.com/wireless/mw5/r1/images/bookmark-icons/espn_icon-152x152.min.png

    HTTP Response

    200
  • 87.248.114.11:443
    s.yimg.com
    tls
    1.6kB
    13.3kB
    18
    18
  • 151.101.194.206:443
    ir.ebaystatic.com
    tls
    1.7kB
    15.1kB
    19
    20
  • 163.70.147.174:443
    www.instagram.com
    tls
    2.3kB
    40.9kB
    30
    38
  • 142.250.180.4:443
    www.google.com
    tls
    1.6kB
    6.2kB
    14
    15
  • 163.70.147.174:443
    www.instagram.com
    tls
    38.4kB
    98.3kB
    104
    124
  • 142.250.180.4:443
    www.google.com
    tls
    1.4kB
    6.7kB
    13
    17
  • 172.217.16.234:443
    safebrowsing.googleapis.com
    tls
    11.3kB
    381.4kB
    167
    275
  • 157.240.221.63:443
    static.cdninstagram.com
    tls
    24.9kB
    1.9MB
    398
    1306
  • 157.240.221.63:443
    static.cdninstagram.com
    tls
    912 B
    3.9kB
    12
    10
  • 157.240.221.63:443
    static.cdninstagram.com
    tls
    912 B
    3.9kB
    12
    10
  • 157.240.221.63:443
    static.cdninstagram.com
    tls
    964 B
    3.9kB
    13
    10
  • 157.240.221.63:443
    static.cdninstagram.com
    tls
    852 B
    3.8kB
    9
    8
  • 157.240.221.63:443
    static.cdninstagram.com
    tls
    724 B
    3.6kB
    7
    7
  • 142.250.187.227:443
    https://update.googleapis.com/service/update2
    tls, http
    2.7kB
    8.1kB
    10
    15

    HTTP Request

    POST https://update.googleapis.com/service/update2

    HTTP Response

    200

    HTTP Request

    POST https://update.googleapis.com/service/update2

    HTTP Response

    200
  • 157.240.221.63:443
    static.cdninstagram.com
    tls
    3.1kB
    35.9kB
    38
    45
  • 163.70.151.35:443
    www.facebook.com
    tls
    1.5kB
    5.7kB
    12
    12
  • 216.58.201.110:443
    tls, https
    858 B
    40 B
    1
    1
  • 142.250.200.46:443
    android.apis.google.com
    tls
    2.8kB
    6.9kB
    10
    14
  • 172.217.169.10:443
    tls, https
    1.2kB
    40 B
    1
    1
  • 224.0.0.251:5353
    2.9kB
    9
  • 1.1.1.1:53
    static.xx.fbcdn.net
    dns
    65 B
    104 B
    1
    1

    DNS Request

    static.xx.fbcdn.net

    DNS Response

    157.240.214.11

  • 1.1.1.1:53
    m.youtube.com
    dns
    59 B
    75 B
    1
    1

    DNS Request

    m.youtube.com

    DNS Response

    142.250.187.206

  • 1.1.1.1:53
    images-na.ssl-images-amazon.com
    dns
    77 B
    263 B
    1
    1

    DNS Request

    images-na.ssl-images-amazon.com

    DNS Response

    151.101.1.16
    151.101.65.16
    151.101.193.16
    151.101.129.16

  • 1.1.1.1:53
    en.m.wikipedia.org
    dns
    64 B
    109 B
    1
    1

    DNS Request

    en.m.wikipedia.org

    DNS Response

    185.15.59.224

  • 1.1.1.1:53
    a.espncdn.com
    dns
    59 B
    170 B
    1
    1

    DNS Request

    a.espncdn.com

    DNS Response

    2.16.170.34
    2.16.170.123

  • 1.1.1.1:53
    s.yimg.com
    dns
    56 B
    127 B
    1
    1

    DNS Request

    s.yimg.com

    DNS Response

    87.248.114.11
    87.248.114.12

  • 1.1.1.1:53
    ir.ebaystatic.com
    dns
    63 B
    196 B
    1
    1

    DNS Request

    ir.ebaystatic.com

    DNS Response

    151.101.194.206
    151.101.130.206
    151.101.66.206
    151.101.2.206

  • 1.1.1.1:53
    www.instagram.com
    dns
    63 B
    114 B
    1
    1

    DNS Request

    www.instagram.com

    DNS Response

    163.70.147.174

  • 1.1.1.1:53
    www.google.com
    dns
    60 B
    76 B
    1
    1

    DNS Request

    www.google.com

    DNS Response

    142.250.180.4

  • 1.1.1.1:53
    safebrowsing.googleapis.com
    dns
    73 B
    89 B
    1
    1

    DNS Request

    safebrowsing.googleapis.com

    DNS Response

    172.217.16.234

  • 1.1.1.1:53
    static.cdninstagram.com
    dns
    69 B
    108 B
    1
    1

    DNS Request

    static.cdninstagram.com

    DNS Response

    157.240.221.63

  • 1.1.1.1:53
    update.googleapis.com
    dns
    67 B
    83 B
    1
    1

    DNS Request

    update.googleapis.com

    DNS Response

    142.250.187.227

  • 1.1.1.1:53
    szswiwbynle
    dns
    57 B
    132 B
    1
    1

    DNS Request

    szswiwbynle

  • 1.1.1.1:53
    zkvxopnu
    dns
    54 B
    129 B
    1
    1

    DNS Request

    zkvxopnu

  • 1.1.1.1:53
    ynpabqllmtuf
    dns
    58 B
    133 B
    1
    1

    DNS Request

    ynpabqllmtuf

  • 1.1.1.1:53
    www.facebook.com
    dns
    62 B
    107 B
    1
    1

    DNS Request

    www.facebook.com

    DNS Response

    163.70.151.35

  • 1.1.1.1:53
    android.apis.google.com
    dns
    69 B
    109 B
    1
    1

    DNS Request

    android.apis.google.com

    DNS Response

    142.250.200.46

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.