Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

a035f780af...8.html

windows7-x64

1

a035f780af...8.html

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    12/06/2024, 09:45 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a035f780af6589522f5fe9e56b033e3f_JaffaCakes118.html

  • Size

    66KB

  • MD5

    a035f780af6589522f5fe9e56b033e3f

  • SHA1

    48ffa6fc5661ceb5efa12c8e43650a329ce6298f

  • SHA256

    6c7fbd7abe7efe89cec9fc9ac5da9e3933082a777de6261dd5a045ac37027a1a

  • SHA512

    0a6bfba3bac14b06f6f4be604302203f1c8b3a60818abe888f78d4141c9a93c5ccec62ce73fbf7ce5bfdc74751090013b32894a9cb5f3e03fea70ebf05173060

  • SSDEEP

    768:NcFCNXPIpB/d2xvyFQrb71u04AXzEJLUlrX3CE7rF8pEe51ziRiXLG3D+Ci:NcFGIpB/dIXMHiRiXLGm

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
    adwarespyware
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a035f780af6589522f5fe9e56b033e3f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:108
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:108 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2916

Network

  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    apis.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    apis.google.com
    IN A
  • flag-us
    DNS
    apis.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    apis.google.com
    IN A
  • flag-us
    DNS
    apis.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    apis.google.com
    IN A
  • flag-us
    DNS
    apis.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    apis.google.com
    IN A
  • flag-us
    DNS
    apis.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    apis.google.com
    IN A
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
  • flag-us
    DNS
    www.amoremlinks.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.amoremlinks.net
    IN A
  • flag-us
    DNS
    www.amoremlinks.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.amoremlinks.net
    IN A
  • flag-us
    DNS
    www.amoremlinks.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.amoremlinks.net
    IN A
  • flag-us
    DNS
    www.amoremlinks.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.amoremlinks.net
    IN A
  • flag-us
    DNS
    www.amoremlinks.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.amoremlinks.net
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    3.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    3.bp.blogspot.com
    IN A
  • flag-us
    DNS
    3.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    3.bp.blogspot.com
    IN A
  • flag-us
    DNS
    3.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    3.bp.blogspot.com
    IN A
  • flag-us
    DNS
    3.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    3.bp.blogspot.com
    IN A
  • flag-us
    DNS
    3.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    3.bp.blogspot.com
    IN A
  • flag-us
    DNS
    www.clocklink.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.clocklink.com
    IN A
  • flag-us
    DNS
    www.clocklink.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.clocklink.com
    IN A
  • flag-us
    DNS
    www.clocklink.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.clocklink.com
    IN A
  • flag-us
    DNS
    www.clocklink.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.clocklink.com
    IN A
  • flag-us
    DNS
    www.clocklink.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.clocklink.com
    IN A
  • flag-us
    DNS
    widgetserver.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgetserver.com
    IN A
  • flag-us
    DNS
    widgetserver.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgetserver.com
    IN A
  • flag-us
    DNS
    widgetserver.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgetserver.com
    IN A
  • flag-us
    DNS
    widgetserver.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgetserver.com
    IN A
  • flag-us
    DNS
    widgetserver.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgetserver.com
    IN A
  • flag-us
    DNS
    www.biblialegal.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.biblialegal.com.br
    IN A
  • flag-us
    DNS
    www.biblialegal.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.biblialegal.com.br
    IN A
  • flag-us
    DNS
    www.biblialegal.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.biblialegal.com.br
    IN A
  • flag-us
    DNS
    www.biblialegal.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.biblialegal.com.br
    IN A
  • flag-us
    DNS
    www.biblialegal.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.biblialegal.com.br
    IN A
  • flag-us
    DNS
    widgets.amung.us
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgets.amung.us
    IN A
  • flag-us
    DNS
    widgets.amung.us
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgets.amung.us
    IN A
  • flag-us
    DNS
    widgets.amung.us
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgets.amung.us
    IN A
  • flag-us
    DNS
    widgets.amung.us
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgets.amung.us
    IN A
  • flag-us
    DNS
    widgets.amung.us
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgets.amung.us
    IN A
  • flag-us
    DNS
    br.babelfish.yahoo.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    br.babelfish.yahoo.com
    IN A
  • flag-us
    DNS
    br.babelfish.yahoo.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    br.babelfish.yahoo.com
    IN A
  • flag-us
    DNS
    br.babelfish.yahoo.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    br.babelfish.yahoo.com
    IN A
  • flag-us
    DNS
    br.babelfish.yahoo.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    br.babelfish.yahoo.com
    IN A
  • flag-us
    DNS
    br.babelfish.yahoo.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    br.babelfish.yahoo.com
    IN A
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
  • flag-us
    DNS
    widgetserver.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgetserver.com
    IN A
  • flag-us
    DNS
    widgetserver.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgetserver.com
    IN A
  • flag-us
    DNS
    widgetserver.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgetserver.com
    IN A
  • flag-us
    DNS
    widgetserver.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgetserver.com
    IN A
  • flag-us
    DNS
    widgetserver.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgetserver.com
    IN A
  • flag-us
    DNS
    br.babelfish.yahoo.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    br.babelfish.yahoo.com
    IN A
  • flag-us
    DNS
    br.babelfish.yahoo.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    br.babelfish.yahoo.com
    IN A
  • flag-us
    DNS
    br.babelfish.yahoo.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    br.babelfish.yahoo.com
    IN A
  • flag-us
    DNS
    br.babelfish.yahoo.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    br.babelfish.yahoo.com
    IN A
  • flag-us
    DNS
    br.babelfish.yahoo.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    br.babelfish.yahoo.com
    IN A
  • flag-us
    DNS
    3.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    3.bp.blogspot.com
    IN A
  • flag-us
    DNS
    3.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    3.bp.blogspot.com
    IN A
  • flag-us
    DNS
    3.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    3.bp.blogspot.com
    IN A
  • flag-us
    DNS
    3.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    3.bp.blogspot.com
    IN A
  • flag-us
    DNS
    3.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    3.bp.blogspot.com
    IN A
  • flag-us
    DNS
    www.amoremlinks.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.amoremlinks.net
    IN A
  • flag-us
    DNS
    www.amoremlinks.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.amoremlinks.net
    IN A
  • flag-us
    DNS
    www.amoremlinks.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.amoremlinks.net
    IN A
  • flag-us
    DNS
    www.amoremlinks.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.amoremlinks.net
    IN A
  • flag-us
    DNS
    www.amoremlinks.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.amoremlinks.net
    IN A
  • flag-us
    DNS
    www.clocklink.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.clocklink.com
    IN A
  • flag-us
    DNS
    www.clocklink.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.clocklink.com
    IN A
  • flag-us
    DNS
    www.clocklink.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.clocklink.com
    IN A
  • flag-us
    DNS
    www.clocklink.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.clocklink.com
    IN A
  • flag-us
    DNS
    www.clocklink.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.clocklink.com
    IN A
  • flag-us
    DNS
    widgets.amung.us
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgets.amung.us
    IN A
  • flag-us
    DNS
    widgets.amung.us
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgets.amung.us
    IN A
  • flag-us
    DNS
    widgets.amung.us
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgets.amung.us
    IN A
  • flag-us
    DNS
    widgets.amung.us
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgets.amung.us
    IN A
  • flag-us
    DNS
    widgets.amung.us
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgets.amung.us
    IN A
  • flag-us
    DNS
    www.biblialegal.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.biblialegal.com.br
    IN A
  • flag-us
    DNS
    www.biblialegal.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.biblialegal.com.br
    IN A
  • flag-us
    DNS
    www.biblialegal.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.biblialegal.com.br
    IN A
  • flag-us
    DNS
    www.biblialegal.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.biblialegal.com.br
    IN A
  • flag-us
    DNS
    www.biblialegal.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.biblialegal.com.br
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    apis.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    apis.google.com
    IN A
  • flag-us
    DNS
    apis.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    apis.google.com
    IN A
  • flag-us
    DNS
    apis.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    apis.google.com
    IN A
  • flag-us
    DNS
    apis.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    apis.google.com
    IN A
  • flag-us
    DNS
    apis.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    apis.google.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    selos.climatempo.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    selos.climatempo.com.br
    IN A
  • flag-us
    DNS
    selos.climatempo.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    selos.climatempo.com.br
    IN A
  • flag-us
    DNS
    selos.climatempo.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    selos.climatempo.com.br
    IN A
  • flag-us
    DNS
    selos.climatempo.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    selos.climatempo.com.br
    IN A
  • flag-us
    DNS
    selos.climatempo.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    selos.climatempo.com.br
    IN A
  • flag-us
    DNS
    www.podcast1.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.podcast1.com.br
    IN A
  • flag-us
    DNS
    www.podcast1.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.podcast1.com.br
    IN A
  • flag-us
    DNS
    www.podcast1.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.podcast1.com.br
    IN A
  • flag-us
    DNS
    www.podcast1.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.podcast1.com.br
    IN A
  • flag-us
    DNS
    www.podcast1.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.podcast1.com.br
    IN A
  • flag-us
    DNS
    cdn.last.fm
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    cdn.last.fm
    IN A
  • flag-us
    DNS
    cdn.last.fm
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    cdn.last.fm
    IN A
  • flag-us
    DNS
    cdn.last.fm
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    cdn.last.fm
    IN A
  • flag-us
    DNS
    cdn.last.fm
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    cdn.last.fm
    IN A
  • flag-us
    DNS
    cdn.last.fm
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    cdn.last.fm
    IN A
  • flag-us
    DNS
    www.podcast1.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.podcast1.com.br
    IN A
  • flag-us
    DNS
    www.podcast1.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.podcast1.com.br
    IN A
  • flag-us
    DNS
    www.podcast1.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.podcast1.com.br
    IN A
  • flag-us
    DNS
    www.podcast1.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.podcast1.com.br
    IN A
  • flag-us
    DNS
    www.podcast1.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.podcast1.com.br
    IN A
  • flag-us
    DNS
    selos.climatempo.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    selos.climatempo.com.br
    IN A
  • flag-us
    DNS
    selos.climatempo.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    selos.climatempo.com.br
    IN A
  • flag-us
    DNS
    selos.climatempo.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    selos.climatempo.com.br
    IN A
  • flag-us
    DNS
    selos.climatempo.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    selos.climatempo.com.br
    IN A
  • flag-us
    DNS
    selos.climatempo.com.br
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    selos.climatempo.com.br
    IN A
  • flag-us
    DNS
    cdn.last.fm
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    cdn.last.fm
    IN A
  • flag-us
    DNS
    cdn.last.fm
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    cdn.last.fm
    IN A
  • flag-us
    DNS
    cdn.last.fm
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    cdn.last.fm
    IN A
  • flag-us
    DNS
    cdn.last.fm
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    cdn.last.fm
    IN A
  • flag-us
    DNS
    cdn.last.fm
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    cdn.last.fm
    IN A
  • flag-us
    DNS
    cdn.last.fm
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    cdn.last.fm
    IN A
  • flag-us
    DNS
    cdn.last.fm
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    cdn.last.fm
    IN A
  • flag-us
    DNS
    cdn.last.fm
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    cdn.last.fm
    IN A
  • flag-us
    DNS
    cdn.last.fm
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    cdn.last.fm
    IN A
  • flag-us
    DNS
    cdn.last.fm
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    cdn.last.fm
    IN A
  • flag-us
    DNS
    cdn.last.fm
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    cdn.last.fm
    IN A
  • flag-us
    DNS
    cdn.last.fm
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    cdn.last.fm
    IN A
  • flag-us
    DNS
    cdn.last.fm
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    cdn.last.fm
    IN A
  • flag-us
    DNS
    cdn.last.fm
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    cdn.last.fm
    IN A
  • flag-us
    DNS
    cdn.last.fm
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    cdn.last.fm
    IN A
No results found
  • 8.8.8.8:53
    www.blogger.com
    dns
    IEXPLORE.EXE
    305 B
     5

    DNS Request

    www.blogger.com

    DNS Request

    www.blogger.com

    DNS Request

    www.blogger.com

    DNS Request

    www.blogger.com

    DNS Request

    www.blogger.com

  • 8.8.8.8:53
    apis.google.com
    dns
    IEXPLORE.EXE
    305 B
     5

    DNS Request

    apis.google.com

    DNS Request

    apis.google.com

    DNS Request

    apis.google.com

    DNS Request

    apis.google.com

    DNS Request

    apis.google.com

  • 8.8.8.8:53
    4.bp.blogspot.com
    dns
    IEXPLORE.EXE
    315 B
     5

    DNS Request

    4.bp.blogspot.com

    DNS Request

    4.bp.blogspot.com

    DNS Request

    4.bp.blogspot.com

    DNS Request

    4.bp.blogspot.com

    DNS Request

    4.bp.blogspot.com

  • 8.8.8.8:53
    resources.blogblog.com
    dns
    IEXPLORE.EXE
    340 B
     5

    DNS Request

    resources.blogblog.com

    DNS Request

    resources.blogblog.com

    DNS Request

    resources.blogblog.com

    DNS Request

    resources.blogblog.com

    DNS Request

    resources.blogblog.com

  • 8.8.8.8:53
    www.amoremlinks.net
    dns
    IEXPLORE.EXE
    325 B
     5

    DNS Request

    www.amoremlinks.net

    DNS Request

    www.amoremlinks.net

    DNS Request

    www.amoremlinks.net

    DNS Request

    www.amoremlinks.net

    DNS Request

    www.amoremlinks.net

  • 8.8.8.8:53
    1.bp.blogspot.com
    dns
    IEXPLORE.EXE
    315 B
     5

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

  • 8.8.8.8:53
    3.bp.blogspot.com
    dns
    IEXPLORE.EXE
    315 B
     5

    DNS Request

    3.bp.blogspot.com

    DNS Request

    3.bp.blogspot.com

    DNS Request

    3.bp.blogspot.com

    DNS Request

    3.bp.blogspot.com

    DNS Request

    3.bp.blogspot.com

  • 8.8.8.8:53
    www.clocklink.com
    dns
    IEXPLORE.EXE
    315 B
     5

    DNS Request

    www.clocklink.com

    DNS Request

    www.clocklink.com

    DNS Request

    www.clocklink.com

    DNS Request

    www.clocklink.com

    DNS Request

    www.clocklink.com

  • 8.8.8.8:53
    widgetserver.com
    dns
    IEXPLORE.EXE
    310 B
     5

    DNS Request

    widgetserver.com

    DNS Request

    widgetserver.com

    DNS Request

    widgetserver.com

    DNS Request

    widgetserver.com

    DNS Request

    widgetserver.com

  • 8.8.8.8:53
    www.biblialegal.com.br
    dns
    IEXPLORE.EXE
    340 B
     5

    DNS Request

    www.biblialegal.com.br

    DNS Request

    www.biblialegal.com.br

    DNS Request

    www.biblialegal.com.br

    DNS Request

    www.biblialegal.com.br

    DNS Request

    www.biblialegal.com.br

  • 8.8.8.8:53
    widgets.amung.us
    dns
    IEXPLORE.EXE
    310 B
     5

    DNS Request

    widgets.amung.us

    DNS Request

    widgets.amung.us

    DNS Request

    widgets.amung.us

    DNS Request

    widgets.amung.us

    DNS Request

    widgets.amung.us

  • 8.8.8.8:53
    br.babelfish.yahoo.com
    dns
    IEXPLORE.EXE
    340 B
     5

    DNS Request

    br.babelfish.yahoo.com

    DNS Request

    br.babelfish.yahoo.com

    DNS Request

    br.babelfish.yahoo.com

    DNS Request

    br.babelfish.yahoo.com

    DNS Request

    br.babelfish.yahoo.com

  • 8.8.8.8:53
    resources.blogblog.com
    dns
    IEXPLORE.EXE
    340 B
     5

    DNS Request

    resources.blogblog.com

    DNS Request

    resources.blogblog.com

    DNS Request

    resources.blogblog.com

    DNS Request

    resources.blogblog.com

    DNS Request

    resources.blogblog.com

  • 8.8.8.8:53
    1.bp.blogspot.com
    dns
    IEXPLORE.EXE
    315 B
     5

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

  • 8.8.8.8:53
    4.bp.blogspot.com
    dns
    IEXPLORE.EXE
    315 B
     5

    DNS Request

    4.bp.blogspot.com

    DNS Request

    4.bp.blogspot.com

    DNS Request

    4.bp.blogspot.com

    DNS Request

    4.bp.blogspot.com

    DNS Request

    4.bp.blogspot.com

  • 8.8.8.8:53
    widgetserver.com
    dns
    IEXPLORE.EXE
    310 B
     5

    DNS Request

    widgetserver.com

    DNS Request

    widgetserver.com

    DNS Request

    widgetserver.com

    DNS Request

    widgetserver.com

    DNS Request

    widgetserver.com

  • 8.8.8.8:53
    br.babelfish.yahoo.com
    dns
    IEXPLORE.EXE
    340 B
     5

    DNS Request

    br.babelfish.yahoo.com

    DNS Request

    br.babelfish.yahoo.com

    DNS Request

    br.babelfish.yahoo.com

    DNS Request

    br.babelfish.yahoo.com

    DNS Request

    br.babelfish.yahoo.com

  • 8.8.8.8:53
    3.bp.blogspot.com
    dns
    IEXPLORE.EXE
    315 B
     5

    DNS Request

    3.bp.blogspot.com

    DNS Request

    3.bp.blogspot.com

    DNS Request

    3.bp.blogspot.com

    DNS Request

    3.bp.blogspot.com

    DNS Request

    3.bp.blogspot.com

  • 8.8.8.8:53
    www.amoremlinks.net
    dns
    IEXPLORE.EXE
    325 B
     5

    DNS Request

    www.amoremlinks.net

    DNS Request

    www.amoremlinks.net

    DNS Request

    www.amoremlinks.net

    DNS Request

    www.amoremlinks.net

    DNS Request

    www.amoremlinks.net

  • 8.8.8.8:53
    www.clocklink.com
    dns
    IEXPLORE.EXE
    315 B
     5

    DNS Request

    www.clocklink.com

    DNS Request

    www.clocklink.com

    DNS Request

    www.clocklink.com

    DNS Request

    www.clocklink.com

    DNS Request

    www.clocklink.com

  • 8.8.8.8:53
    widgets.amung.us
    dns
    IEXPLORE.EXE
    310 B
     5

    DNS Request

    widgets.amung.us

    DNS Request

    widgets.amung.us

    DNS Request

    widgets.amung.us

    DNS Request

    widgets.amung.us

    DNS Request

    widgets.amung.us

  • 8.8.8.8:53
    www.biblialegal.com.br
    dns
    IEXPLORE.EXE
    340 B
     5

    DNS Request

    www.biblialegal.com.br

    DNS Request

    www.biblialegal.com.br

    DNS Request

    www.biblialegal.com.br

    DNS Request

    www.biblialegal.com.br

    DNS Request

    www.biblialegal.com.br

  • 8.8.8.8:53
    www.blogger.com
    dns
    IEXPLORE.EXE
    305 B
     5

    DNS Request

    www.blogger.com

    DNS Request

    www.blogger.com

    DNS Request

    www.blogger.com

    DNS Request

    www.blogger.com

    DNS Request

    www.blogger.com

  • 8.8.8.8:53
    apis.google.com
    dns
    IEXPLORE.EXE
    305 B
     5

    DNS Request

    apis.google.com

    DNS Request

    apis.google.com

    DNS Request

    apis.google.com

    DNS Request

    apis.google.com

    DNS Request

    apis.google.com

  • 8.8.8.8:53
    1.bp.blogspot.com
    dns
    IEXPLORE.EXE
    315 B
     5

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

  • 8.8.8.8:53
    resources.blogblog.com
    dns
    IEXPLORE.EXE
    340 B
     5

    DNS Request

    resources.blogblog.com

    DNS Request

    resources.blogblog.com

    DNS Request

    resources.blogblog.com

    DNS Request

    resources.blogblog.com

    DNS Request

    resources.blogblog.com

  • 8.8.8.8:53
    www.blogger.com
    dns
    IEXPLORE.EXE
    305 B
     5

    DNS Request

    www.blogger.com

    DNS Request

    www.blogger.com

    DNS Request

    www.blogger.com

    DNS Request

    www.blogger.com

    DNS Request

    www.blogger.com

  • 8.8.8.8:53
    selos.climatempo.com.br
    dns
    IEXPLORE.EXE
    345 B
     5

    DNS Request

    selos.climatempo.com.br

    DNS Request

    selos.climatempo.com.br

    DNS Request

    selos.climatempo.com.br

    DNS Request

    selos.climatempo.com.br

    DNS Request

    selos.climatempo.com.br

  • 8.8.8.8:53
    www.podcast1.com.br
    dns
    IEXPLORE.EXE
    325 B
     5

    DNS Request

    www.podcast1.com.br

    DNS Request

    www.podcast1.com.br

    DNS Request

    www.podcast1.com.br

    DNS Request

    www.podcast1.com.br

    DNS Request

    www.podcast1.com.br

  • 8.8.8.8:53
    cdn.last.fm
    dns
    IEXPLORE.EXE
    285 B
     5

    DNS Request

    cdn.last.fm

    DNS Request

    cdn.last.fm

    DNS Request

    cdn.last.fm

    DNS Request

    cdn.last.fm

    DNS Request

    cdn.last.fm

  • 8.8.8.8:53
    www.podcast1.com.br
    dns
    IEXPLORE.EXE
    325 B
     5

    DNS Request

    www.podcast1.com.br

    DNS Request

    www.podcast1.com.br

    DNS Request

    www.podcast1.com.br

    DNS Request

    www.podcast1.com.br

    DNS Request

    www.podcast1.com.br

  • 8.8.8.8:53
    selos.climatempo.com.br
    dns
    IEXPLORE.EXE
    345 B
     5

    DNS Request

    selos.climatempo.com.br

    DNS Request

    selos.climatempo.com.br

    DNS Request

    selos.climatempo.com.br

    DNS Request

    selos.climatempo.com.br

    DNS Request

    selos.climatempo.com.br

  • 8.8.8.8:53
    cdn.last.fm
    dns
    IEXPLORE.EXE
    285 B
     5

    DNS Request

    cdn.last.fm

    DNS Request

    cdn.last.fm

    DNS Request

    cdn.last.fm

    DNS Request

    cdn.last.fm

    DNS Request

    cdn.last.fm

  • 8.8.8.8:53
    cdn.last.fm
    dns
    IEXPLORE.EXE
    285 B
     5

    DNS Request

    cdn.last.fm

    DNS Request

    cdn.last.fm

    DNS Request

    cdn.last.fm

    DNS Request

    cdn.last.fm

    DNS Request

    cdn.last.fm

  • 8.8.8.8:53
    cdn.last.fm
    dns
    IEXPLORE.EXE
    285 B
     5

    DNS Request

    cdn.last.fm

    DNS Request

    cdn.last.fm

    DNS Request

    cdn.last.fm

    DNS Request

    cdn.last.fm

    DNS Request

    cdn.last.fm

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.