Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

1

697460bcc7...118.js

windows7-x64

3

697460bcc7...118.js

windows10-2004-x64

3

Analysis

  • max time kernel
    143s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/05/2024, 02:31 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    697460bcc735c38e2dd387224bc1ff34_JaffaCakes118.js

  • Size

    100KB

  • MD5

    697460bcc735c38e2dd387224bc1ff34

  • SHA1

    b1f7647fcdaa1fb4346ee7de3e07ac0a533ca242

  • SHA256

    2dcaa0a971b09ab3e3acd76f581c1966218fdf8ea70b6567d36e14c66184521c

  • SHA512

    478484e438e5f5b728e6285f274469ee897e06e22f2916d580ea91be1bfe6be0bf81ab7b9530f71de8805922e806f12e0143135d9d3d83431ebadc534f30f375

  • SSDEEP

    1536:ySlr+spdqfr1pZmjeeveeeeeeveeveeeeeeveeveegeeveeeeeeveeveeeeeeveD:DhFI1LLB3aKsJdeWgjYQR8H8G

Score
3/10
execution

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\697460bcc735c38e2dd387224bc1ff34_JaffaCakes118.js
    1⤵
      PID:4436
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3824 --field-trial-handle=2292,i,2103142837140538807,15881446839139365070,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:2968

      Network

      • flag-us
        DNS
        172.210.232.199.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        172.210.232.199.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        133.211.185.52.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        133.211.185.52.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        133.32.126.40.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        133.32.126.40.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        95.221.229.192.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        95.221.229.192.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        232.168.11.51.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        232.168.11.51.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        183.59.114.20.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        183.59.114.20.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        56.126.166.20.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        56.126.166.20.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        56.126.166.20.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        56.126.166.20.in-addr.arpa
        IN PTR
      • flag-us
        DNS
        11.227.111.52.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        11.227.111.52.in-addr.arpa
        IN PTR
        Response
      • flag-us
        DNS
        chromewebstore.googleapis.com
        Remote address:
        8.8.8.8:53
        Request
        chromewebstore.googleapis.com
        IN A
        Response
        chromewebstore.googleapis.com
        IN A
        216.58.212.234
        chromewebstore.googleapis.com
        IN A
        172.217.169.74
        chromewebstore.googleapis.com
        IN A
        172.217.169.42
        chromewebstore.googleapis.com
        IN A
        142.250.179.234
        chromewebstore.googleapis.com
        IN A
        142.250.180.10
        chromewebstore.googleapis.com
        IN A
        142.250.187.202
        chromewebstore.googleapis.com
        IN A
        142.250.187.234
        chromewebstore.googleapis.com
        IN A
        142.250.178.10
        chromewebstore.googleapis.com
        IN A
        172.217.16.234
        chromewebstore.googleapis.com
        IN A
        142.250.200.10
        chromewebstore.googleapis.com
        IN A
        142.250.200.42
        chromewebstore.googleapis.com
        IN A
        216.58.201.106
        chromewebstore.googleapis.com
        IN A
        216.58.204.74
        chromewebstore.googleapis.com
        IN A
        216.58.213.10
        chromewebstore.googleapis.com
        IN A
        172.217.169.10
      • flag-us
        DNS
        chromewebstore.googleapis.com
        Remote address:
        8.8.8.8:53
        Request
        chromewebstore.googleapis.com
        IN Unknown
        Response
      • flag-us
        DNS
        234.212.58.216.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        234.212.58.216.in-addr.arpa
        IN PTR
        Response
        234.212.58.216.in-addr.arpa
        IN PTR
        lhr25s28-in-f101e100net
        234.212.58.216.in-addr.arpa
        IN PTR
        ams16s22-in-f234�I
        234.212.58.216.in-addr.arpa
        IN PTR
        ams16s22-in-f10�I
      • flag-us
        DNS
        27.173.189.20.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        27.173.189.20.in-addr.arpa
        IN PTR
        Response
      • 13.107.253.64:443
        46 B
         40 B
         1
        1
      • 216.58.212.234:443
        chromewebstore.googleapis.com
        tls
        2.0kB
         7.9kB
         15
        16
      • 8.8.8.8:53
        133.211.185.52.in-addr.arpa
        dns
        73 B
         147 B
         1
        1

        DNS Request

        133.211.185.52.in-addr.arpa

      • 8.8.8.8:53
        172.210.232.199.in-addr.arpa
        dns
        74 B
         128 B
         1
        1

        DNS Request

        172.210.232.199.in-addr.arpa

      • 8.8.8.8:53
        133.32.126.40.in-addr.arpa
        dns
        72 B
         158 B
         1
        1

        DNS Request

        133.32.126.40.in-addr.arpa

      • 8.8.8.8:53
        95.221.229.192.in-addr.arpa
        dns
        73 B
         144 B
         1
        1

        DNS Request

        95.221.229.192.in-addr.arpa

      • 8.8.8.8:53
        232.168.11.51.in-addr.arpa
        dns
        72 B
         158 B
         1
        1

        DNS Request

        232.168.11.51.in-addr.arpa

      • 8.8.8.8:53
        183.59.114.20.in-addr.arpa
        dns
        72 B
         158 B
         1
        1

        DNS Request

        183.59.114.20.in-addr.arpa

      • 8.8.8.8:53
        56.126.166.20.in-addr.arpa
        dns
        144 B
         158 B
         2
        1

        DNS Request

        56.126.166.20.in-addr.arpa

        DNS Request

        56.126.166.20.in-addr.arpa

      • 8.8.8.8:53
        11.227.111.52.in-addr.arpa
        dns
        72 B
         158 B
         1
        1

        DNS Request

        11.227.111.52.in-addr.arpa

      • 8.8.8.8:53
        chromewebstore.googleapis.com
        dns
        75 B
         315 B
         1
        1

        DNS Request

        chromewebstore.googleapis.com

        DNS Response

        216.58.212.234
        172.217.169.74
        172.217.169.42
        142.250.179.234
        142.250.180.10
        142.250.187.202
        142.250.187.234
        142.250.178.10
        172.217.16.234
        142.250.200.10
        142.250.200.42
        216.58.201.106
        216.58.204.74
        216.58.213.10
        172.217.169.10

      • 8.8.8.8:53
        chromewebstore.googleapis.com
        dns
        75 B
         132 B
         1
        1

        DNS Request

        chromewebstore.googleapis.com

      • 8.8.8.8:53
        234.212.58.216.in-addr.arpa
        dns
        73 B
         173 B
         1
        1

        DNS Request

        234.212.58.216.in-addr.arpa

      • 8.8.8.8:53
        27.173.189.20.in-addr.arpa
        dns
        72 B
         158 B
         1
        1

        DNS Request

        27.173.189.20.in-addr.arpa

      MITRE ATT&CK Enterprise v15

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      We care about your privacy.

      This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.