top title background image
flash

App1667895929112011200_34122CF1-AE58-41FB-8E13-C906CB8D40E6.log

Status: finished
Submission Time: 2022-11-10 21:13:51 +01:00
Malicious
Trojan
Exploiter
Evader
Miner
CobaltStrike, Follina CVE-2022-30190, Xm

Comments

Tags

Details

  • Analysis ID:
    743454
  • API (Web) ID:
    1110761
  • Analysis Started:
    2022-11-10 21:14:46 +01:00
  • Analysis Finished:
    2022-11-10 21:22:20 +01:00
  • MD5:
    988e0cb19fbc2cf5e3b9a33b205affd8
  • SHA1:
    1b091e30aa366a5cdf582a81954893ac6201f769
  • SHA256:
    c289adee6ca95bb69f864497f32a8abbad65d20dccd06c4a1f6c3ef6d402693d
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 100
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious
Score: 10/61
malicious

URLs

Name Detection
http://www.bonusesfound.ml/update/index.php
http://shgshgwsdynationalobjindustrialat18ygs.duckdns.org/receipt/invoice_202121.doc
https://www.sputnikradio.net/radio/news/
Click to see the 97 hidden entries
http://usa-national.info/gpu/band/grumble.dot
http://83.166.246.59/ua-lt98brkc2/perform/luck/
https://wwdurl.com/3nav
http://www.poltc.cz/zackova/novak.exe-outfilec:
https://ziengineeringco.com/project-arab-contracting/css/dahbzo4xg.php
http://103.167.90.177/shpdocument/invc_0098008.wbk
https://logz.live/frnd/
https://office.michiganappellateblog.com/soft.dll
http://ap.4iitk0-ninv.xyz/?e=u2fuzgkuvghvbxbzb25ay290lnrulmdvdg==
https://fpvtunes.binaryprotectors.com/msreal/jreside
http://false.grafitto.ru/dch00-01/rehearsal.dot
https://teachon.aerialview.lk/systemdemo/uploads/addons/__macosx/live-class/f2u4p7u3jk.php
http://yourcontents.xyz/0758/0806pn
http://thrprivatecloudshareandfileprotectagent.duckdns.org/receipt/invoice_651254.doc
https://bitbucket.org/atlasover/atlassiancore/downloads/
https://bb.realestateprivateportfolio.com/img/
https://www.mygreatlearning.com
https://rawcdn.githack.net/up.php?key=5
http://swipermachinereview.xyz/wp-includes/t3ow4kf0p0q8oo/
http://towardsdatascience.com
http://private0091111.duckdns.org/qagj/gipsy.png
http://pretence77.glorious.nonima.ru/elenapc/principles/nearly.mp3
https://hosteriaestilonorte.com.ar/admins/uzie/actions.php
http://103.167.93.37/invoice/invoice_000499000049.wbk
https://pigeonious.com/img/
https://unlibroparatodos.mx/wp-content/themes/divi/epanel/css/tpcsfltfzf9r7yx.php
http://107.173.143.102/hhh/invc_005400005400.wbk
https://ab.v-mail.online/?e=
https://lidamtour.com/masivo/file/kmshost/
http://thomastongrealestate.com/skywkc/3415201.pnga
https://lidamtour.com/masivo/ala/cronsrt/
https://luxtonace.com/luxton/plugins/ckeditor/plugins/a11yhelp/9gysz7pxb.php
http://172.245.119.43/recept/34.doc
https://extraosseous.com/zik/document.php
https://www.vespang.cf/sizx/post.php
http://ramashardware.co.za/wp-fxm.php
http://atozlovebook.com/vision.iosapp-o%appdata%
https://lidamtour.com/masivo/ala/cronsrt/corn.dot
https://jeffmhall.net/lant/
http://lump.semara.ru/dch00-01/counter/nearest/
http://files.telefacer.com/1/2.html
http://www.22find.com/?utm_source=b&utm_medium=
http://www.theabigailbloomcakecompany.co.uk/wp-content/uploads/
http://209.127.20.13/b44u8j.dotm
http://www.comeinbaby.com/updateerror/fiif
https://emicrosoftteam.com/scot/
http://earium.ru/ua-lt5cg63120d6/country/
https://tiger.hotshot.sk/wp-admin/
http://shdjhgftyhgjklolkjio.dns.navy/bcz/document.doc
http://snapper.genesysindonesia.com/excel/excelz/index.php?email=
http://www.mygreatlearning.com
https://mail.emifermetures.xyz/myguy/receiptswift.php
http://ppaauuaa11232.cc/dlx5rc.dotm
https://raw.githubusercontent.com/s3cur3th1ssh1t/
https://blackberryizm.com/frontend/assets/images/favico/report-fedex.php
http://kec-rupit.muratarakab.go.id/si/excelz/index.php?email=
https://tph786.com/sale/images/avatar/
http://www.systweak.com/registrycleaner
https://gez.org.zw/errorpages/load/
http://192.210.240.8/doc_document/188.doc
https://jmcglone.com
http://103.133.106.72/ini/................wbk
http://outfish.bounceme.net/outl.dot
https://tulsabailbondfinancing.com/dglmzmfueublehbmzi5jb20=
https://jovial-pasteur.159-89-118-202.plesk.page/wp-content/uploads/index.php
https://diarnondfireplace.com/dobo/xxx.php?user=
https://acaciavictorias.com/sxmal.php
https://partoniroo.com/n9/u.js&&pingo0.org&&cd
https://hitechceramics.com/egab/processor.php
https://doocument.m2diving.ml/fay/login.php?log
https://endodermic-needles.000webhostapp.com/clean.php
https://gengengma.com/wp-content/uploads/vipe_11/send.php
http://spr-updates.ddns.net/spr_updates.php-o
https://transfer.sh/get/0oulld/i9ch18.dotm
http://3.104.223.22/dhl/receipt.doc
https://visualscope.org/visual/office/css/nelz.php
http://trialservice.genesystuna.com/io/excelz/index.php?email=
http://media.vitkvitk.com/xmlstatic/ads/videoplaza/vittalia.html?df=
http://filecopying.xyz/update/kbp08x
http://49.234.67.167/
http://usb.mine.nu/c.sh-o/users/shared/c.sh
http://kitten-268.frge.io/article.html
http://103.167.90.69/receipt/inv_126776.wbk
https://sitesimobisis.com.br/bin/
http://192.3.152.171/
https://armybar.hopto.org/remoteload.dotm
https://hide.link/lfspz
http://23.94.174.158/document/invc_00000023444.wbk
https://url.welimitless.in/bvmms
http://198.23.156.247/receipt/receipt.doc
http://83.166.246.59/sgz2/rejoice/lowered.dot
https://tpow.zeroworld.xyz/home/application/views/sistem/notifikasi/usqg66westx.php
http://windowsdefendergateway.duckdns.org/documents.doc
https://greatblueinds.com/ajx-admin/ckeditor/plugins/wsc/dialogs/3o9vbeip3k.php
https://browserimprovements.com/check-opt-out?url=$
https://e-secure-log.ga/abu/next.php
https://myown.bio/vvg