top title background image
flash

uk231b27we.lnk

Status: finished
Submission Time: 2023-02-01 07:45:07 +01:00
Malicious
Evader

Comments

Tags

  • Astaroth
  • BRA
  • geo
  • Guildma
  • lnk

Details

  • Analysis ID:
    795686
  • API (Web) ID:
    1162931
  • Analysis Started:
    2023-02-01 07:45:08 +01:00
  • Analysis Finished:
    2023-02-01 07:49:26 +01:00
  • MD5:
    992f5faaef370f7963b09123eaee18dd
  • SHA1:
    cf99a5906e22105ade1f367f0c289fafa9952a1c
  • SHA256:
    d7ddebfa36f629e5ef41b692140e2c06f23b5c8017040215eaf0247a7db3b2f7
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 68
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

IPs

IP Country Detection
172.67.221.22
United States
104.16.124.96
United States

Domains

Name IP Detection
gwae8.industryinfluence.shop
172.67.221.22
www.cloudflare.com
104.16.124.96

URLs

Name Detection
http://gwae8.industryinfluence.shop/?3/
http://gwae8.industryinfluence.shop/b
hTtP://gwae8.industryinfluence.shop/?3/
Click to see the 9 hidden entries
https://www.cloudflare.com/cdn-cgi/errorZ
https://www.cloudflare.com/
https://www.cloudflare.com/cdn-cgi/error
http://gwae8.industryinfluence.shop/
https://www.cloudflare.com/cdn-cgi/error(
https://www.cloudflare.com/cdn-cgi/errorZ.4
https://www.cloudflare.com/cdn-cgi/error&
https://www.cloudflare.com/cdn-cgi/error2.L
https://www.cloudflare.com/~

Dropped files

Name File Type Hashes Detection
C:\QxdHVBD\QxdHVBD.jS
ASCII text, with no line terminators
#