top title background image
flash

wcfForestCo.exe

Status: finished
Submission Time: 2023-02-07 18:32:54 +01:00
Suspicious
Trojan

Comments

Tags

Details

  • Analysis ID:
    800715
  • API (Web) ID:
    1167938
  • Analysis Started:
    2023-02-07 18:34:56 +01:00
  • Analysis Finished:
    2023-02-07 18:39:39 +01:00
  • MD5:
    f938aa196e23b9094027f158bf80798e
  • SHA1:
    facb5b573302f9c34964a481bb8457643347f1ce
  • SHA256:
    2648c1a9757baa37580a9c4ca8f6975105d09bd2ecc5c14ada62f5eaea154fd3
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
suspicious
Score: 24
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

URLs

Name Detection
https://api.ipify.org
https://icanhazip.com5https://wtfismyip.com/textChttp://bot.whatismyipaddress.com/3http://checkip.dy
http://checkip.amazonaws.com/)https://ipinfo.io/ip

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\wcfForestCo.exe.log
ASCII text, with CRLF line terminators
#