Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

123.rar

windows7-x64

3

123.rar

windows10-2004-x64

3

internatio...er.dll

windows7-x64

1

internatio...er.dll

windows10-2004-x64

1

internatio...er.dll

windows7-x64

1

internatio...er.dll

windows10-2004-x64

1

internatio...ch.dll

windows7-x64

1

internatio...ch.dll

windows10-2004-x64

1

internatio...s/cors

windows7-x64

1

internatio...s/cors

windows10-2004-x64

1

internatio...s .exe

windows7-x64

1

internatio...s .exe

windows10-2004-x64

1

internatio...wt.dll

windows7-x64

1

internatio...wt.dll

windows10-2004-x64

1

internatio...li.dll

windows7-x64

1

internatio...li.dll

windows10-2004-x64

1

internatio...libgis

windows7-x64

1

internatio...libgis

windows10-2004-x64

1

internatio...40.dll

windows7-x64

1

internatio...40.dll

windows10-2004-x64

1

internatio...se.dll

windows10-2004-x64

1

internatio...40.dll

windows7-x64

1

internatio...40.dll

windows10-2004-x64

1

internatio..._1.dll

windows7-x64

1

internatio..._1.dll

windows10-2004-x64

1

internatio...fy.dll

windows7-x64

1

internatio...fy.dll

windows10-2004-x64

1

Resubmissions

19/09/2024, 07:29 UTC

240919-jbcapsxeqk 7

19/09/2024, 07:27 UTC

240919-jaa19axcje 7

19/09/2024, 07:21 UTC

240919-h66x5axanb 7

19/09/2024, 07:04 UTC

240919-hwcxaswenh 7

19/09/2024, 07:04 UTC

240919-hv496awend 3

19/09/2024, 07:00 UTC

240919-hs4kvawfqr 3

Analysis

  • max time kernel
    93s
  • max time network
    98s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/09/2024, 07:00 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    internationalPaymentDetails/jawt.dll

  • Size

    22KB

  • MD5

    aa8c5c204fc51e0e41dd7438b9ae3a60

  • SHA1

    8a32f69e9284e692df2ac335cac89b89ff8df1ce

  • SHA256

    4d750b41868b1559d95aab6511f22abf4b4835eeb7b45a6edaa67b18100f90bc

  • SHA512

    aa718c9ec23d2bd9f8cf78f45b4c39eac9550cb45ac2542aa9b816a3684fee10e9a80d77cdb9dbd8f12cf2b15e2dd903c5a6ae0aa540bd70eb64768b2660a564

  • SSDEEP

    384:OdLySe1G07FleGeISFP27xWkVbgWUlIx4cBW0W1hjB0FP27NBY3Yuv+V:Oty1h7LletKxnVbgvqxNB8hGK/Y/+V

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\internationalPaymentDetails\jawt.dll,#1
    1⤵
      PID:4672

    Network

    • flag-us
      DNS
      8.8.8.8.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      8.8.8.8.in-addr.arpa
      IN PTR
      Response
      8.8.8.8.in-addr.arpa
      IN PTR
      dnsgoogle
    • flag-us
      DNS
      13.86.106.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      13.86.106.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      81.144.22.2.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      81.144.22.2.in-addr.arpa
      IN PTR
      Response
      81.144.22.2.in-addr.arpa
      IN PTR
      a2-22-144-81deploystaticakamaitechnologiescom
    • flag-us
      DNS
      183.59.114.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      183.59.114.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      18.31.95.13.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      18.31.95.13.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      172.214.232.199.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      172.214.232.199.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      172.210.232.199.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      172.210.232.199.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      19.229.111.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      19.229.111.52.in-addr.arpa
      IN PTR
      Response
    No results found
    • 8.8.8.8:53
      8.8.8.8.in-addr.arpa
      dns
      66 B
       90 B
       1
      1

      DNS Request

      8.8.8.8.in-addr.arpa

    • 8.8.8.8:53
      13.86.106.20.in-addr.arpa
      dns
      71 B
       157 B
       1
      1

      DNS Request

      13.86.106.20.in-addr.arpa

    • 8.8.8.8:53
      81.144.22.2.in-addr.arpa
      dns
      70 B
       133 B
       1
      1

      DNS Request

      81.144.22.2.in-addr.arpa

    • 8.8.8.8:53
      183.59.114.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      183.59.114.20.in-addr.arpa

    • 8.8.8.8:53
      18.31.95.13.in-addr.arpa
      dns
      70 B
       144 B
       1
      1

      DNS Request

      18.31.95.13.in-addr.arpa

    • 8.8.8.8:53
      172.214.232.199.in-addr.arpa
      dns
      74 B
       128 B
       1
      1

      DNS Request

      172.214.232.199.in-addr.arpa

    • 8.8.8.8:53
      172.210.232.199.in-addr.arpa
      dns
      74 B
       128 B
       1
      1

      DNS Request

      172.210.232.199.in-addr.arpa

    • 8.8.8.8:53
      19.229.111.52.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      19.229.111.52.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.