Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

海天在�...le.asp

windows7-x64

3

海天在�...le.asp

windows10-2004-x64

3

海天在�...al.asp

windows7-x64

3

海天在�...al.asp

windows10-2004-x64

3

海天在�...lp.htm

windows7-x64

3

海天在�...lp.htm

windows10-2004-x64

3

海天在�...om.asp

windows7-x64

3

海天在�...om.asp

windows10-2004-x64

3

海天在�...us.htm

windows7-x64

3

海天在�...us.htm

windows10-2004-x64

1

海天在�...se.asp

windows7-x64

3

海天在�...se.asp

windows10-2004-x64

3

海天在�...nd.asp

windows7-x64

3

海天在�...nd.asp

windows10-2004-x64

3

海天在�...zi.asp

windows7-x64

3

海天在�...zi.asp

windows10-2004-x64

3

海天在�...ig.asp

windows7-x64

3

海天在�...ig.asp

windows10-2004-x64

3

海天在�...spx.js

windows7-x64

3

海天在�...spx.js

windows10-2004-x64

3

海天在�...nd.asp

windows7-x64

3

海天在�...nd.asp

windows10-2004-x64

海天在�...spx.js

windows7-x64

3

海天在�...spx.js

windows10-2004-x64

3

海天在�...ad.asp

windows7-x64

3

海天在�...ad.asp

windows10-2004-x64

3

海天在�...in.asp

windows7-x64

3

海天在�...in.asp

windows10-2004-x64

3

海天在�...in.htm

windows7-x64

3

海天在�...in.htm

windows10-2004-x64

3

海天在�...wd.asp

windows7-x64

3

海天在�...wd.asp

windows10-2004-x64

3

Analysis

  • max time kernel
    91s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/09/2024, 22:47 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    海天在线.Net论坛系统 v1.0 正式版/_bottom.asp

  • Size

    1KB

  • MD5

    325c24ef398cfb50d39b466d7f13b0e1

  • SHA1

    df93aac2b03ec05181b4be3d2c921b8fe52c0c3e

  • SHA256

    e4a4ee5af5fdd7ac7849e4e577f5bd90b0f49890620daa107044c265bbb5b0ac

  • SHA512

    5cb958f45219b254d1ebe34a0796bbdc80ee2372d6d4e7d36d58c41ff588861aa2066a5ac394e52d9f3b35d6a85a30ac83154c3a5b79e74a56cbdbcfe1f8252a

Score
3/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c "C:\Users\Admin\AppData\Local\Temp\海天在线.Net论坛系统 v1.0 正式版\_bottom.asp"
    1⤵
      PID:972

    Network

    • flag-us
      DNS
      196.249.167.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      196.249.167.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      36.56.20.217.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      36.56.20.217.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      136.32.126.40.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      136.32.126.40.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      95.221.229.192.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      95.221.229.192.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      209.205.72.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      209.205.72.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      50.23.12.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      50.23.12.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      56.126.166.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      56.126.166.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      44.56.20.217.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      44.56.20.217.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      149.220.183.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      149.220.183.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      34.56.20.217.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      34.56.20.217.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      240.221.184.93.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      240.221.184.93.in-addr.arpa
      IN PTR
      Response
    No results found
    • 8.8.8.8:53
      196.249.167.52.in-addr.arpa
      dns
      73 B
       147 B
       1
      1

      DNS Request

      196.249.167.52.in-addr.arpa

    • 8.8.8.8:53
      36.56.20.217.in-addr.arpa
      dns
      71 B
       131 B
       1
      1

      DNS Request

      36.56.20.217.in-addr.arpa

    • 8.8.8.8:53
      136.32.126.40.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      136.32.126.40.in-addr.arpa

    • 8.8.8.8:53
      95.221.229.192.in-addr.arpa
      dns
      73 B
       144 B
       1
      1

      DNS Request

      95.221.229.192.in-addr.arpa

    • 8.8.8.8:53
      209.205.72.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      209.205.72.20.in-addr.arpa

    • 8.8.8.8:53
      50.23.12.20.in-addr.arpa
      dns
      70 B
       156 B
       1
      1

      DNS Request

      50.23.12.20.in-addr.arpa

    • 8.8.8.8:53
      56.126.166.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      56.126.166.20.in-addr.arpa

    • 8.8.8.8:53
      44.56.20.217.in-addr.arpa
      dns
      71 B
       131 B
       1
      1

      DNS Request

      44.56.20.217.in-addr.arpa

    • 8.8.8.8:53
      149.220.183.52.in-addr.arpa
      dns
      73 B
       147 B
       1
      1

      DNS Request

      149.220.183.52.in-addr.arpa

    • 8.8.8.8:53
      34.56.20.217.in-addr.arpa
      dns
      71 B
       131 B
       1
      1

      DNS Request

      34.56.20.217.in-addr.arpa

    • 8.8.8.8:53
      240.221.184.93.in-addr.arpa
      dns
      73 B
       144 B
       1
      1

      DNS Request

      240.221.184.93.in-addr.arpa

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.