Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
6Static
static
1URLScan
urlscan
1http://whatismyipadd...
windows7-x64
6http://whatismyipadd...
windows10-1703-x64
6http://whatismyipadd...
windows10-2004-x64
6http://whatismyipadd...
windows11-21h2-x64
6http://whatismyipadd...
android-10-x64
6http://whatismyipadd...
android-11-x64
6http://whatismyipadd...
android-13-x64
6http://whatismyipadd...
android-9-x86
6http://whatismyipadd...
macos-10.15-amd64
6http://whatismyipadd...
ubuntu-18.04-amd64
3http://whatismyipadd...
ubuntu-20.04-amd64
6http://whatismyipadd...
ubuntu-22.04-amd64
3http://whatismyipadd...
ubuntu-24.04-amd64
6Analysis
-
max time kernel
64s -
max time network
67s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
15/07/2024, 06:46
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://whatismyipaddress.com
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
http://whatismyipaddress.com
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
http://whatismyipaddress.com
Resource
win10v2004-20240709-en
Behavioral task
behavioral4
Sample
http://whatismyipaddress.com
Resource
win11-20240709-en
Behavioral task
behavioral5
Sample
http://whatismyipaddress.com
Resource
android-x64-20240624-en
Behavioral task
behavioral6
Sample
http://whatismyipaddress.com
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral7
Sample
http://whatismyipaddress.com
Resource
android-33-x64-arm64-20240624-en
Behavioral task
behavioral8
Sample
http://whatismyipaddress.com
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral9
Sample
http://whatismyipaddress.com
Resource
macos-20240711.1-en
Behavioral task
behavioral10
Sample
http://whatismyipaddress.com
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral11
Sample
http://whatismyipaddress.com
Resource
ubuntu2004-amd64-20240611-en
Behavioral task
behavioral12
Sample
http://whatismyipaddress.com
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral13
Sample
http://whatismyipaddress.com
Resource
ubuntu2404-amd64-20240523-en
General
-
Target
http://whatismyipaddress.com
Malware Config
Signatures
-
Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 2 whatismyipaddress.com 5 whatismyipaddress.com -
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.android.chrome -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.android.chrome
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
274KB
MD5e58690e5f27318e0a8b36b26505f6904
SHA150559cb790cfc0a95faeb5e7805340820a47f771
SHA2561504d687f93cbfaae8fe829b7b9e25dff0fd8522ec41d1ea67a039adbc174bc8
SHA51273fca2578dc1637a45ed14bbe07cb66c42834c07ab761177c7e1deb426c8c66c0d9a44771018d4e9e167fa96997b55be3081b0ddad5cf7be40f06db25db429af