Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
10Battly-Lau...ws.exe
windows7-x64
7Battly-Lau...ws.exe
windows10-2004-x64
7resources/...ute.js
windows7-x64
3resources/...ute.js
windows10-2004-x64
3resources/...dex.js
windows7-x64
3resources/...dex.js
windows10-2004-x64
3resources/...DME.js
windows7-x64
3resources/...DME.js
windows10-2004-x64
3resources/...dex.js
windows7-x64
3resources/...dex.js
windows10-2004-x64
3resources/...dex.js
windows7-x64
3resources/...dex.js
windows10-2004-x64
3resources/...ime.js
windows7-x64
3resources/...ime.js
windows10-2004-x64
3resources/...cli.js
ubuntu-18.04-amd64
4resources/...cli.js
debian-9-armhf
4resources/...cli.js
debian-9-mips
1resources/...cli.js
debian-9-mipsel
1resources/...dex.js
windows7-x64
3resources/...dex.js
windows10-2004-x64
3resources/...tch.js
windows7-x64
3resources/...tch.js
windows10-2004-x64
3resources/...ark.js
windows7-x64
3resources/...ark.js
windows10-2004-x64
3resources/...put.js
windows7-x64
3resources/...put.js
windows10-2004-x64
3resources/...col.js
windows7-x64
3resources/...col.js
windows10-2004-x64
3resources/...ten.js
windows7-x64
3resources/...ten.js
windows10-2004-x64
3resources/...ema.js
windows7-x64
3resources/...ema.js
windows10-2004-x64
3Analysis
-
max time kernel
133s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
18/08/2024, 20:33 UTC
Behavioral task
behavioral1
Sample
Battly-Launcher-Windows.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
Battly-Launcher-Windows.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
resources/app/node_modules/color-convert/route.js
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
resources/app/node_modules/color-convert/route.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
resources/app/node_modules/color-name/index.js
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
resources/app/node_modules/color-name/index.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
resources/app/node_modules/concat-map/README.js
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
resources/app/node_modules/concat-map/README.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
resources/app/node_modules/concat-map/index.js
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
resources/app/node_modules/concat-map/index.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
resources/app/node_modules/ejs-electron/index.js
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
resources/app/node_modules/ejs-electron/index.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
resources/app/node_modules/ejs-electron/node_modules/mime/Mime.js
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
resources/app/node_modules/ejs-electron/node_modules/mime/Mime.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
resources/app/node_modules/ejs-electron/node_modules/mime/cli.js
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral16
Sample
resources/app/node_modules/ejs-electron/node_modules/mime/cli.js
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral17
Sample
resources/app/node_modules/ejs-electron/node_modules/mime/cli.js
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral18
Sample
resources/app/node_modules/ejs-electron/node_modules/mime/cli.js
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral19
Sample
resources/app/node_modules/ejs-electron/node_modules/mime/index.js
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
resources/app/node_modules/ejs-electron/node_modules/mime/index.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
resources/app/node_modules/minimatch/minimatch.js
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
resources/app/node_modules/minimatch/minimatch.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
resources/app/node_modules/protocol/benchmark/benchmark.js
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
resources/app/node_modules/protocol/benchmark/benchmark.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
resources/app/node_modules/protocol/benchmark/input.js
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
resources/app/node_modules/protocol/benchmark/input.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
resources/app/node_modules/protocol/benchmark/protocol.js
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
resources/app/node_modules/protocol/benchmark/protocol.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
resources/app/node_modules/protocol/lib/flatten.js
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
resources/app/node_modules/protocol/lib/flatten.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
resources/app/node_modules/protocol/lib/flattenSchema.js
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
resources/app/node_modules/protocol/lib/flattenSchema.js
Resource
win10v2004-20240802-en
General
-
Target
resources/app/node_modules/protocol/benchmark/benchmark.js
-
Size
4KB
-
MD5
aed52dfc6ee45583ee47274cbf80b6cc
-
SHA1
043ea2811d13b41cb7c230ec66d2a667de296cb3
-
SHA256
42091e950dea3a76bd810950f8f97dd6fad8da62101e8130834ecd0917d4b3c1
-
SHA512
cddeefe21289bd95b7c404f3625527558d247e4c476d757022918b52bac7490af6e1ef5b0a5f18498240f93edbc1d9487fd1d632ac043acdeb9781e19e7ccadc
-
SSDEEP
96:Jg/TgQH3o07o+FNVh3+S++bzGYXUt+8vj8uPVGZagVy5sy5uj0H0Wjw6:JLQH3HFNVhuSTbzGYkw8vj8u8am0H0Ox
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
Network
-
Remote address:8.8.8.8:53Request8.8.8.8.in-addr.arpaIN PTRResponse8.8.8.8.in-addr.arpaIN PTRdnsgoogle
-
Remote address:8.8.8.8:53Request196.249.167.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request172.210.232.199.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request14.160.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request13.86.106.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request228.249.119.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request183.59.114.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request206.23.85.13.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request240.143.123.92.in-addr.arpaIN PTRResponse240.143.123.92.in-addr.arpaIN PTRa92-123-143-240deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request100.58.20.217.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request205.47.74.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request19.229.111.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requesttse1.mm.bing.netIN AResponsetse1.mm.bing.netIN CNAMEmm-mm.bing.net.trafficmanager.netmm-mm.bing.net.trafficmanager.netIN CNAMEax-0001.ax-msedge.netax-0001.ax-msedge.netIN A150.171.27.10ax-0001.ax-msedge.netIN A150.171.28.10
-
GEThttps://tse1.mm.bing.net/th?id=OADD2.10239339388141_1OVD83K3ANLQD9KEG&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90Remote address:150.171.27.10:443RequestGET /th?id=OADD2.10239339388141_1OVD83K3ANLQD9KEG&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
ResponseHTTP/2.0 200
content-length: 675761
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: DB0A6004E3C34650AE7AD5834E174486 Ref B: LON04EDGE0909 Ref C: 2024-08-18T20:40:07Z
date: Sun, 18 Aug 2024 20:40:06 GMT
-
GEThttps://tse1.mm.bing.net/th?id=OADD2.10239340418604_1C96RL77YFK8DKA16&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90Remote address:150.171.27.10:443RequestGET /th?id=OADD2.10239340418604_1C96RL77YFK8DKA16&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
ResponseHTTP/2.0 200
content-length: 588459
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 2EE8C97DDAFF4EE18DDF949CE3FED8E6 Ref B: LON04EDGE0909 Ref C: 2024-08-18T20:40:07Z
date: Sun, 18 Aug 2024 20:40:06 GMT
-
GEThttps://tse1.mm.bing.net/th?id=OADD2.10239339388140_1LI3WHEJIR12MEKBJ&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90Remote address:150.171.27.10:443RequestGET /th?id=OADD2.10239339388140_1LI3WHEJIR12MEKBJ&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
ResponseHTTP/2.0 200
content-length: 601541
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: B579E1CA7A8E4821A67576818E5831B9 Ref B: LON04EDGE0909 Ref C: 2024-08-18T20:40:07Z
date: Sun, 18 Aug 2024 20:40:06 GMT
-
GEThttps://tse1.mm.bing.net/th?id=OADD2.10239340418603_15DZPLB0SHJXVDM66&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90Remote address:150.171.27.10:443RequestGET /th?id=OADD2.10239340418603_15DZPLB0SHJXVDM66&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
ResponseHTTP/2.0 200
content-length: 546860
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 80D9BF7C27A44CAB8DC2D9137EDFD583 Ref B: LON04EDGE0909 Ref C: 2024-08-18T20:40:07Z
date: Sun, 18 Aug 2024 20:40:06 GMT
-
GEThttps://tse1.mm.bing.net/th?id=OADD2.10239317301323_1AVULELNRKG9EH3DR&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90Remote address:150.171.27.10:443RequestGET /th?id=OADD2.10239317301323_1AVULELNRKG9EH3DR&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
ResponseHTTP/2.0 200
content-length: 707951
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 224037416A3B4F2F9BE83022239C7D3A Ref B: LON04EDGE0909 Ref C: 2024-08-18T20:40:07Z
date: Sun, 18 Aug 2024 20:40:06 GMT
-
GEThttps://tse1.mm.bing.net/th?id=OADD2.10239317301732_1XU9VS499YTY2RBMB&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90Remote address:150.171.27.10:443RequestGET /th?id=OADD2.10239317301732_1XU9VS499YTY2RBMB&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
ResponseHTTP/2.0 200
content-length: 552873
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 0F78AFA0E1874DA0887C396EDF087DA2 Ref B: LON04EDGE0909 Ref C: 2024-08-18T20:40:07Z
date: Sun, 18 Aug 2024 20:40:07 GMT
-
Remote address:8.8.8.8:53Request43.58.199.20.in-addr.arpaIN PTRResponse
-
1.2kB 6.9kB 15 13
-
1.2kB 6.9kB 15 13
-
1.2kB 6.9kB 15 13
-
150.171.27.10:443https://tse1.mm.bing.net/th?id=OADD2.10239317301732_1XU9VS499YTY2RBMB&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90tls, http2131.6kB 3.8MB 2769 2763
HTTP Request
GET https://tse1.mm.bing.net/th?id=OADD2.10239339388141_1OVD83K3ANLQD9KEG&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90HTTP Request
GET https://tse1.mm.bing.net/th?id=OADD2.10239340418604_1C96RL77YFK8DKA16&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90HTTP Request
GET https://tse1.mm.bing.net/th?id=OADD2.10239339388140_1LI3WHEJIR12MEKBJ&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90HTTP Request
GET https://tse1.mm.bing.net/th?id=OADD2.10239340418603_15DZPLB0SHJXVDM66&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90HTTP Request
GET https://tse1.mm.bing.net/th?id=OADD2.10239317301323_1AVULELNRKG9EH3DR&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://tse1.mm.bing.net/th?id=OADD2.10239317301732_1XU9VS499YTY2RBMB&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90HTTP Response
200 -
1.2kB 6.9kB 15 13
-
66 B 90 B 1 1
DNS Request
8.8.8.8.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
196.249.167.52.in-addr.arpa
-
74 B 128 B 1 1
DNS Request
172.210.232.199.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
14.160.190.20.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
13.86.106.20.in-addr.arpa
-
73 B 159 B 1 1
DNS Request
228.249.119.40.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
183.59.114.20.in-addr.arpa
-
71 B 145 B 1 1
DNS Request
206.23.85.13.in-addr.arpa
-
73 B 139 B 1 1
DNS Request
240.143.123.92.in-addr.arpa
-
72 B 132 B 1 1
DNS Request
100.58.20.217.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
205.47.74.20.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
19.229.111.52.in-addr.arpa
-
62 B 170 B 1 1
DNS Request
tse1.mm.bing.net
DNS Response
150.171.27.10150.171.28.10
-
71 B 157 B 1 1
DNS Request
43.58.199.20.in-addr.arpa