Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

04/10/2024, 13:28 UTC

241004-qqpb5s1akh 7

03/10/2024, 22:49 UTC

241003-2rvfbsvbpb 7

01/10/2024, 17:12 UTC

241001-vqtdbavcpg 7

10/09/2024, 12:08 UTC

240910-pa23maveje 7

10/09/2024, 12:07 UTC

240910-pajlaatbrl 7

05/09/2024, 12:10 UTC

240905-pcfx6s1eja 7

04/09/2024, 23:57 UTC

240904-3zwtssyepr 7

Analysis

  • max time kernel
    413s
  • max time network
    1138s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/09/2024, 12:08 UTC

General

  • Target

    resources/app.asar.unpacked/node_modules/sqlite3/lib/trace.js

  • Size

    1KB

  • MD5

    e5c2de3c74bc66d4906bb34591859a5f

  • SHA1

    37ec527d9798d43898108080506126b4146334e7

  • SHA256

    d06caec6136120c6fb7ee3681b1ca949e8b634e747ea8d3080c90f35aeb7728f

  • SHA512

    e250e53dae618929cbf3cb2f1084a105d3a78bdfb6bb29e290f63a1fd5fbb5b2fab934ad16bc285e245d749a90c84bdc72fdc1a77af912b7356c18b0b197fbe5

Score
3/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\resources\app.asar.unpacked\node_modules\sqlite3\lib\trace.js
    1⤵
      PID:552

    Network

    • flag-us
      DNS
      68.159.190.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      68.159.190.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      95.221.229.192.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      95.221.229.192.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      28.118.140.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      28.118.140.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      33.140.123.92.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      33.140.123.92.in-addr.arpa
      IN PTR
      Response
      33.140.123.92.in-addr.arpa
      IN PTR
      a92-123-140-33deploystaticakamaitechnologiescom
    • flag-us
      DNS
      86.23.85.13.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      86.23.85.13.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      198.187.3.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      198.187.3.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      43.229.111.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      43.229.111.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      194.142.123.92.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      194.142.123.92.in-addr.arpa
      IN PTR
      Response
      194.142.123.92.in-addr.arpa
      IN PTR
      a92-123-142-194deploystaticakamaitechnologiescom
    • flag-us
      DNS
      209.143.182.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      209.143.182.52.in-addr.arpa
      IN PTR
      Response
    No results found
    • 8.8.8.8:53
      68.159.190.20.in-addr.arpa
      dns
      72 B
      158 B
      1
      1

      DNS Request

      68.159.190.20.in-addr.arpa

    • 8.8.8.8:53
      95.221.229.192.in-addr.arpa
      dns
      73 B
      144 B
      1
      1

      DNS Request

      95.221.229.192.in-addr.arpa

    • 8.8.8.8:53
      28.118.140.52.in-addr.arpa
      dns
      72 B
      158 B
      1
      1

      DNS Request

      28.118.140.52.in-addr.arpa

    • 8.8.8.8:53
      33.140.123.92.in-addr.arpa
      dns
      72 B
      137 B
      1
      1

      DNS Request

      33.140.123.92.in-addr.arpa

    • 8.8.8.8:53
      86.23.85.13.in-addr.arpa
      dns
      70 B
      144 B
      1
      1

      DNS Request

      86.23.85.13.in-addr.arpa

    • 8.8.8.8:53
      198.187.3.20.in-addr.arpa
      dns
      71 B
      157 B
      1
      1

      DNS Request

      198.187.3.20.in-addr.arpa

    • 8.8.8.8:53
      43.229.111.52.in-addr.arpa
      dns
      72 B
      158 B
      1
      1

      DNS Request

      43.229.111.52.in-addr.arpa

    • 8.8.8.8:53
      194.142.123.92.in-addr.arpa
      dns
      73 B
      139 B
      1
      1

      DNS Request

      194.142.123.92.in-addr.arpa

    • 8.8.8.8:53
      209.143.182.52.in-addr.arpa
      dns
      73 B
      147 B
      1
      1

      DNS Request

      209.143.182.52.in-addr.arpa

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.