Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    17/06/2024, 01:09 UTC

General

  • Target

    b61c24cb80e68222be64f6757a94b3b7_JaffaCakes118.html

  • Size

    54KB

  • MD5

    b61c24cb80e68222be64f6757a94b3b7

  • SHA1

    ac61072f86d0f0793950e04d74fcb60f74e97318

  • SHA256

    d408206b9ed9c3fee715a7880303cf0c7c8fe59b95759e8c81a2875360183ad5

  • SHA512

    802d9854ce9e066085e890908b57245cec5af61c159f1ca9afc362b6a90afff1a27993092bab7f7933971396ab295f4de6c305b909cd1addc97fef8f9df19287

  • SSDEEP

    768:IXmvJEqmOlP3SqZrsa1pvSWGxwOr/FFhhbd/7I3iczf299V8K:IXm2qmOBmB/jrFDI33z+n

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b61c24cb80e68222be64f6757a94b3b7_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2040
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2040 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1872

Network

  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    ajax.googleapis.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    ajax.googleapis.com
    IN A
  • flag-us
    DNS
    ajax.googleapis.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    ajax.googleapis.com
    IN A
  • flag-us
    DNS
    ajax.googleapis.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    ajax.googleapis.com
    IN A
  • flag-us
    DNS
    ajax.googleapis.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    ajax.googleapis.com
    IN A
  • flag-us
    DNS
    ajax.googleapis.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    ajax.googleapis.com
    IN A
  • flag-us
    DNS
    2.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    2.bp.blogspot.com
    IN A
  • flag-us
    DNS
    2.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    2.bp.blogspot.com
    IN A
  • flag-us
    DNS
    2.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    2.bp.blogspot.com
    IN A
  • flag-us
    DNS
    2.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    2.bp.blogspot.com
    IN A
  • flag-us
    DNS
    2.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    2.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    fortawesome.github.io
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    fortawesome.github.io
    IN A
  • flag-us
    DNS
    fortawesome.github.io
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    fortawesome.github.io
    IN A
  • flag-us
    DNS
    fortawesome.github.io
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    fortawesome.github.io
    IN A
  • flag-us
    DNS
    fortawesome.github.io
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    fortawesome.github.io
    IN A
  • flag-us
    DNS
    fortawesome.github.io
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    fortawesome.github.io
    IN A
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
  • flag-us
    DNS
    3.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    3.bp.blogspot.com
    IN A
  • flag-us
    DNS
    3.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    3.bp.blogspot.com
    IN A
  • flag-us
    DNS
    3.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    3.bp.blogspot.com
    IN A
  • flag-us
    DNS
    3.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    3.bp.blogspot.com
    IN A
  • flag-us
    DNS
    3.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    3.bp.blogspot.com
    IN A
  • flag-us
    DNS
    connect.facebook.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    connect.facebook.net
    IN A
  • flag-us
    DNS
    connect.facebook.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    connect.facebook.net
    IN A
  • flag-us
    DNS
    connect.facebook.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    connect.facebook.net
    IN A
  • flag-us
    DNS
    connect.facebook.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    connect.facebook.net
    IN A
  • flag-us
    DNS
    connect.facebook.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    connect.facebook.net
    IN A
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
  • flag-us
    DNS
    yourjavascript.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    yourjavascript.com
    IN A
  • flag-us
    DNS
    yourjavascript.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    yourjavascript.com
    IN A
  • flag-us
    DNS
    yourjavascript.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    yourjavascript.com
    IN A
  • flag-us
    DNS
    yourjavascript.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    yourjavascript.com
    IN A
  • flag-us
    DNS
    yourjavascript.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    yourjavascript.com
    IN A
  • flag-us
    DNS
    matrix.be-wide.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    matrix.be-wide.com
    IN A
  • flag-us
    DNS
    matrix.be-wide.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    matrix.be-wide.com
    IN A
  • flag-us
    DNS
    matrix.be-wide.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    matrix.be-wide.com
    IN A
  • flag-us
    DNS
    matrix.be-wide.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    matrix.be-wide.com
    IN A
  • flag-us
    DNS
    matrix.be-wide.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    matrix.be-wide.com
    IN A
  • flag-us
    DNS
    apis.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    apis.google.com
    IN A
  • flag-us
    DNS
    apis.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    apis.google.com
    IN A
  • flag-us
    DNS
    apis.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    apis.google.com
    IN A
  • flag-us
    DNS
    apis.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    apis.google.com
    IN A
  • flag-us
    DNS
    apis.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    apis.google.com
    IN A
  • flag-us
    DNS
    matrix.be-wide.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    matrix.be-wide.com
    IN A
  • flag-us
    DNS
    matrix.be-wide.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    matrix.be-wide.com
    IN A
  • flag-us
    DNS
    matrix.be-wide.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    matrix.be-wide.com
    IN A
  • flag-us
    DNS
    matrix.be-wide.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    matrix.be-wide.com
    IN A
  • flag-us
    DNS
    matrix.be-wide.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    matrix.be-wide.com
    IN A
  • flag-us
    DNS
    connect.facebook.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    connect.facebook.net
    IN A
  • flag-us
    DNS
    connect.facebook.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    connect.facebook.net
    IN A
  • flag-us
    DNS
    connect.facebook.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    connect.facebook.net
    IN A
  • flag-us
    DNS
    connect.facebook.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    connect.facebook.net
    IN A
  • flag-us
    DNS
    connect.facebook.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    connect.facebook.net
    IN A
  • flag-us
    DNS
    yourjavascript.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    yourjavascript.com
    IN A
  • flag-us
    DNS
    yourjavascript.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    yourjavascript.com
    IN A
  • flag-us
    DNS
    yourjavascript.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    yourjavascript.com
    IN A
  • flag-us
    DNS
    yourjavascript.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    yourjavascript.com
    IN A
  • flag-us
    DNS
    yourjavascript.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    yourjavascript.com
    IN A
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    fortawesome.github.io
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    fortawesome.github.io
    IN A
  • flag-us
    DNS
    fortawesome.github.io
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    fortawesome.github.io
    IN A
  • flag-us
    DNS
    fortawesome.github.io
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    fortawesome.github.io
    IN A
  • flag-us
    DNS
    fortawesome.github.io
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    fortawesome.github.io
    IN A
  • flag-us
    DNS
    fortawesome.github.io
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    fortawesome.github.io
    IN A
  • flag-us
    DNS
    ajax.googleapis.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    ajax.googleapis.com
    IN A
  • flag-us
    DNS
    ajax.googleapis.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    ajax.googleapis.com
    IN A
  • flag-us
    DNS
    ajax.googleapis.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    ajax.googleapis.com
    IN A
  • flag-us
    DNS
    ajax.googleapis.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    ajax.googleapis.com
    IN A
  • flag-us
    DNS
    ajax.googleapis.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    ajax.googleapis.com
    IN A
  • flag-us
    DNS
    3.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    3.bp.blogspot.com
    IN A
  • flag-us
    DNS
    3.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    3.bp.blogspot.com
    IN A
  • flag-us
    DNS
    3.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    3.bp.blogspot.com
    IN A
  • flag-us
    DNS
    3.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    3.bp.blogspot.com
    IN A
  • flag-us
    DNS
    3.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    3.bp.blogspot.com
    IN A
  • flag-us
    DNS
    2.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    2.bp.blogspot.com
    IN A
  • flag-us
    DNS
    2.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    2.bp.blogspot.com
    IN A
  • flag-us
    DNS
    2.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    2.bp.blogspot.com
    IN A
  • flag-us
    DNS
    2.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    2.bp.blogspot.com
    IN A
  • flag-us
    DNS
    2.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    2.bp.blogspot.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    apis.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    apis.google.com
    IN A
  • flag-us
    DNS
    apis.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    apis.google.com
    IN A
  • flag-us
    DNS
    apis.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    apis.google.com
    IN A
  • flag-us
    DNS
    apis.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    apis.google.com
    IN A
  • flag-us
    DNS
    apis.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    apis.google.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
  • flag-us
    DNS
    widgets.amung.us
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgets.amung.us
    IN A
  • flag-us
    DNS
    widgets.amung.us
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgets.amung.us
    IN A
  • flag-us
    DNS
    widgets.amung.us
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgets.amung.us
    IN A
  • flag-us
    DNS
    widgets.amung.us
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgets.amung.us
    IN A
  • flag-us
    DNS
    widgets.amung.us
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgets.amung.us
    IN A
  • flag-us
    DNS
    lh4.googleusercontent.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    lh4.googleusercontent.com
    IN A
  • flag-us
    DNS
    lh4.googleusercontent.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    lh4.googleusercontent.com
    IN A
  • flag-us
    DNS
    lh4.googleusercontent.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    lh4.googleusercontent.com
    IN A
  • flag-us
    DNS
    lh4.googleusercontent.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    lh4.googleusercontent.com
    IN A
  • flag-us
    DNS
    lh4.googleusercontent.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    lh4.googleusercontent.com
    IN A
  • flag-us
    DNS
    widgets.amung.us
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgets.amung.us
    IN A
  • flag-us
    DNS
    widgets.amung.us
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgets.amung.us
    IN A
  • flag-us
    DNS
    widgets.amung.us
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgets.amung.us
    IN A
  • flag-us
    DNS
    widgets.amung.us
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgets.amung.us
    IN A
  • flag-us
    DNS
    widgets.amung.us
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgets.amung.us
    IN A
  • flag-us
    DNS
    lh4.googleusercontent.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    lh4.googleusercontent.com
    IN A
  • flag-us
    DNS
    lh4.googleusercontent.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    lh4.googleusercontent.com
    IN A
  • flag-us
    DNS
    lh4.googleusercontent.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    lh4.googleusercontent.com
    IN A
  • flag-us
    DNS
    lh4.googleusercontent.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    lh4.googleusercontent.com
    IN A
  • flag-us
    DNS
    lh4.googleusercontent.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    lh4.googleusercontent.com
    IN A
No results found
  • 8.8.8.8:53
    www.blogger.com
    dns
    IEXPLORE.EXE
    305 B
    5

    DNS Request

    www.blogger.com

    DNS Request

    www.blogger.com

    DNS Request

    www.blogger.com

    DNS Request

    www.blogger.com

    DNS Request

    www.blogger.com

  • 8.8.8.8:53
    ajax.googleapis.com
    dns
    IEXPLORE.EXE
    325 B
    5

    DNS Request

    ajax.googleapis.com

    DNS Request

    ajax.googleapis.com

    DNS Request

    ajax.googleapis.com

    DNS Request

    ajax.googleapis.com

    DNS Request

    ajax.googleapis.com

  • 8.8.8.8:53
    2.bp.blogspot.com
    dns
    IEXPLORE.EXE
    315 B
    5

    DNS Request

    2.bp.blogspot.com

    DNS Request

    2.bp.blogspot.com

    DNS Request

    2.bp.blogspot.com

    DNS Request

    2.bp.blogspot.com

    DNS Request

    2.bp.blogspot.com

  • 8.8.8.8:53
    1.bp.blogspot.com
    dns
    IEXPLORE.EXE
    315 B
    5

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

  • 8.8.8.8:53
    fortawesome.github.io
    dns
    IEXPLORE.EXE
    335 B
    5

    DNS Request

    fortawesome.github.io

    DNS Request

    fortawesome.github.io

    DNS Request

    fortawesome.github.io

    DNS Request

    fortawesome.github.io

    DNS Request

    fortawesome.github.io

  • 8.8.8.8:53
    4.bp.blogspot.com
    dns
    IEXPLORE.EXE
    315 B
    5

    DNS Request

    4.bp.blogspot.com

    DNS Request

    4.bp.blogspot.com

    DNS Request

    4.bp.blogspot.com

    DNS Request

    4.bp.blogspot.com

    DNS Request

    4.bp.blogspot.com

  • 8.8.8.8:53
    3.bp.blogspot.com
    dns
    IEXPLORE.EXE
    315 B
    5

    DNS Request

    3.bp.blogspot.com

    DNS Request

    3.bp.blogspot.com

    DNS Request

    3.bp.blogspot.com

    DNS Request

    3.bp.blogspot.com

    DNS Request

    3.bp.blogspot.com

  • 8.8.8.8:53
    connect.facebook.net
    dns
    IEXPLORE.EXE
    330 B
    5

    DNS Request

    connect.facebook.net

    DNS Request

    connect.facebook.net

    DNS Request

    connect.facebook.net

    DNS Request

    connect.facebook.net

    DNS Request

    connect.facebook.net

  • 8.8.8.8:53
    resources.blogblog.com
    dns
    IEXPLORE.EXE
    340 B
    5

    DNS Request

    resources.blogblog.com

    DNS Request

    resources.blogblog.com

    DNS Request

    resources.blogblog.com

    DNS Request

    resources.blogblog.com

    DNS Request

    resources.blogblog.com

  • 8.8.8.8:53
    yourjavascript.com
    dns
    IEXPLORE.EXE
    320 B
    5

    DNS Request

    yourjavascript.com

    DNS Request

    yourjavascript.com

    DNS Request

    yourjavascript.com

    DNS Request

    yourjavascript.com

    DNS Request

    yourjavascript.com

  • 8.8.8.8:53
    matrix.be-wide.com
    dns
    IEXPLORE.EXE
    320 B
    5

    DNS Request

    matrix.be-wide.com

    DNS Request

    matrix.be-wide.com

    DNS Request

    matrix.be-wide.com

    DNS Request

    matrix.be-wide.com

    DNS Request

    matrix.be-wide.com

  • 8.8.8.8:53
    apis.google.com
    dns
    IEXPLORE.EXE
    305 B
    5

    DNS Request

    apis.google.com

    DNS Request

    apis.google.com

    DNS Request

    apis.google.com

    DNS Request

    apis.google.com

    DNS Request

    apis.google.com

  • 8.8.8.8:53
    matrix.be-wide.com
    dns
    IEXPLORE.EXE
    320 B
    5

    DNS Request

    matrix.be-wide.com

    DNS Request

    matrix.be-wide.com

    DNS Request

    matrix.be-wide.com

    DNS Request

    matrix.be-wide.com

    DNS Request

    matrix.be-wide.com

  • 8.8.8.8:53
    connect.facebook.net
    dns
    IEXPLORE.EXE
    330 B
    5

    DNS Request

    connect.facebook.net

    DNS Request

    connect.facebook.net

    DNS Request

    connect.facebook.net

    DNS Request

    connect.facebook.net

    DNS Request

    connect.facebook.net

  • 8.8.8.8:53
    yourjavascript.com
    dns
    IEXPLORE.EXE
    320 B
    5

    DNS Request

    yourjavascript.com

    DNS Request

    yourjavascript.com

    DNS Request

    yourjavascript.com

    DNS Request

    yourjavascript.com

    DNS Request

    yourjavascript.com

  • 8.8.8.8:53
    4.bp.blogspot.com
    dns
    IEXPLORE.EXE
    315 B
    5

    DNS Request

    4.bp.blogspot.com

    DNS Request

    4.bp.blogspot.com

    DNS Request

    4.bp.blogspot.com

    DNS Request

    4.bp.blogspot.com

    DNS Request

    4.bp.blogspot.com

  • 8.8.8.8:53
    resources.blogblog.com
    dns
    IEXPLORE.EXE
    340 B
    5

    DNS Request

    resources.blogblog.com

    DNS Request

    resources.blogblog.com

    DNS Request

    resources.blogblog.com

    DNS Request

    resources.blogblog.com

    DNS Request

    resources.blogblog.com

  • 8.8.8.8:53
    1.bp.blogspot.com
    dns
    IEXPLORE.EXE
    315 B
    5

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

  • 8.8.8.8:53
    fortawesome.github.io
    dns
    IEXPLORE.EXE
    335 B
    5

    DNS Request

    fortawesome.github.io

    DNS Request

    fortawesome.github.io

    DNS Request

    fortawesome.github.io

    DNS Request

    fortawesome.github.io

    DNS Request

    fortawesome.github.io

  • 8.8.8.8:53
    ajax.googleapis.com
    dns
    IEXPLORE.EXE
    325 B
    5

    DNS Request

    ajax.googleapis.com

    DNS Request

    ajax.googleapis.com

    DNS Request

    ajax.googleapis.com

    DNS Request

    ajax.googleapis.com

    DNS Request

    ajax.googleapis.com

  • 8.8.8.8:53
    3.bp.blogspot.com
    dns
    IEXPLORE.EXE
    315 B
    5

    DNS Request

    3.bp.blogspot.com

    DNS Request

    3.bp.blogspot.com

    DNS Request

    3.bp.blogspot.com

    DNS Request

    3.bp.blogspot.com

    DNS Request

    3.bp.blogspot.com

  • 8.8.8.8:53
    2.bp.blogspot.com
    dns
    IEXPLORE.EXE
    315 B
    5

    DNS Request

    2.bp.blogspot.com

    DNS Request

    2.bp.blogspot.com

    DNS Request

    2.bp.blogspot.com

    DNS Request

    2.bp.blogspot.com

    DNS Request

    2.bp.blogspot.com

  • 8.8.8.8:53
    www.blogger.com
    dns
    IEXPLORE.EXE
    305 B
    5

    DNS Request

    www.blogger.com

    DNS Request

    www.blogger.com

    DNS Request

    www.blogger.com

    DNS Request

    www.blogger.com

    DNS Request

    www.blogger.com

  • 8.8.8.8:53
    apis.google.com
    dns
    IEXPLORE.EXE
    305 B
    5

    DNS Request

    apis.google.com

    DNS Request

    apis.google.com

    DNS Request

    apis.google.com

    DNS Request

    apis.google.com

    DNS Request

    apis.google.com

  • 8.8.8.8:53
    1.bp.blogspot.com
    dns
    IEXPLORE.EXE
    315 B
    5

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

  • 8.8.8.8:53
    4.bp.blogspot.com
    dns
    IEXPLORE.EXE
    315 B
    5

    DNS Request

    4.bp.blogspot.com

    DNS Request

    4.bp.blogspot.com

    DNS Request

    4.bp.blogspot.com

    DNS Request

    4.bp.blogspot.com

    DNS Request

    4.bp.blogspot.com

  • 8.8.8.8:53
    www.blogger.com
    dns
    IEXPLORE.EXE
    305 B
    5

    DNS Request

    www.blogger.com

    DNS Request

    www.blogger.com

    DNS Request

    www.blogger.com

    DNS Request

    www.blogger.com

    DNS Request

    www.blogger.com

  • 8.8.8.8:53
    1.bp.blogspot.com
    dns
    IEXPLORE.EXE
    315 B
    5

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

    DNS Request

    1.bp.blogspot.com

  • 8.8.8.8:53
    widgets.amung.us
    dns
    IEXPLORE.EXE
    310 B
    5

    DNS Request

    widgets.amung.us

    DNS Request

    widgets.amung.us

    DNS Request

    widgets.amung.us

    DNS Request

    widgets.amung.us

    DNS Request

    widgets.amung.us

  • 8.8.8.8:53
    lh4.googleusercontent.com
    dns
    IEXPLORE.EXE
    355 B
    5

    DNS Request

    lh4.googleusercontent.com

    DNS Request

    lh4.googleusercontent.com

    DNS Request

    lh4.googleusercontent.com

    DNS Request

    lh4.googleusercontent.com

    DNS Request

    lh4.googleusercontent.com

  • 8.8.8.8:53
    widgets.amung.us
    dns
    IEXPLORE.EXE
    310 B
    5

    DNS Request

    widgets.amung.us

    DNS Request

    widgets.amung.us

    DNS Request

    widgets.amung.us

    DNS Request

    widgets.amung.us

    DNS Request

    widgets.amung.us

  • 8.8.8.8:53
    lh4.googleusercontent.com
    dns
    IEXPLORE.EXE
    355 B
    5

    DNS Request

    lh4.googleusercontent.com

    DNS Request

    lh4.googleusercontent.com

    DNS Request

    lh4.googleusercontent.com

    DNS Request

    lh4.googleusercontent.com

    DNS Request

    lh4.googleusercontent.com

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.