Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
10/07/2024, 04:03 UTC
General
-
Target
xuanxi3.81/admin/admin_articlessay.vbs
-
Size
5KB
-
MD5
082d15083bd0433975a235802f90e550
-
SHA1
5403848a735e6d6b1d2f6b2ac816ef9b9b406eed
-
SHA256
fef6b85b44bac11b75d7ec1707fe611465a08c83925e1a54c3445c934ed25734
-
SHA512
a0d4350daf955e6d3f5b9200b82981c6be9e44ec70d7c4090e127c63848c13cc36a96398666a46f6c4831f6e5f23e69f81731f0ed25353c1f9519f79fbdee8e1
-
SSDEEP
96:u70UVSNSUP4sCgrxWV2xcAu/C4eAg1q1fKX8s:3UUNfP4L+xt4K4eAg1q1frs
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\System32\WScript.exe"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\xuanxi3.81\admin\admin_articlessay.vbs"1⤵
Network
-
DNS17.160.190.20.in-addr.arpaRemote address:8.8.8.8:53Request17.160.190.20.in-addr.arpaIN PTRResponse -
DNS26.35.223.20.in-addr.arpaRemote address:8.8.8.8:53Request26.35.223.20.in-addr.arpaIN PTRResponse
-
DNS240.221.184.93.in-addr.arpaRemote address:8.8.8.8:53Request240.221.184.93.in-addr.arpaIN PTRResponse
-
DNS14.227.111.52.in-addr.arpaRemote address:8.8.8.8:53Request14.227.111.52.in-addr.arpaIN PTRResponse
No results found
-
8.8.8.8:5317.160.190.20.in-addr.arpadns
DNS Request
17.160.190.20.in-addr.arpa
-
8.8.8.8:5326.35.223.20.in-addr.arpadns
DNS Request
26.35.223.20.in-addr.arpa
-
8.8.8.8:53240.221.184.93.in-addr.arpadns
DNS Request
240.221.184.93.in-addr.arpa
-
8.8.8.8:5314.227.111.52.in-addr.arpadns
DNS Request
14.227.111.52.in-addr.arpa