top title background image
flash

server.exe

Status: finished
Submission Time: 2023-03-14 10:04:09 +01:00
Malicious
Trojan
Evader
Ursnif

Comments

Tags

  • agenziaentrate
  • exe
  • gozi
  • isfb
  • ITA
  • mef
  • mise
  • ursnif

Details

  • Analysis ID:
    826072
  • API (Web) ID:
    1193171
  • Analysis Started:
    2023-03-14 10:04:09 +01:00
  • Analysis Finished:
    2023-03-14 10:10:47 +01:00
  • MD5:
    7936264575923f443302a9bb14688ab7
  • SHA1:
    ea7a8b4d250529b84bfdfb80785603cee4d07bf9
  • SHA256:
    7efe8c83ab4ba8773421d7f897a1c490214118f7924d5a45868b070cae6899dd
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
malicious
Score: 100
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious
Score: 35/69
malicious
Score: 14/39

IPs

IP Country Detection
62.173.142.51
Russian Federation
94.103.183.153
Russian Federation

Domains

Name IP Detection
windowsupdatebg.s.llnwi.net
178.79.225.128
checklist.skype.com
0.0.0.0

URLs

Name Detection
http://62.173.142.51/drew/JmbbhiAvjQPEy2fkKH5/C20MAuPZ3pJbSKGRkKMPd5/SPaafj6VQ7HYu/DXcg7FNf/0ruIDzX_2BCbmxrV40i30pn/_2Fl7_2FNm/RIlbjnVOY4JvDGYwT/ix3pE9ifpnwW/elLfsP9FYx5/Hz_2B8UXu3bbwG/02zNVOFS_2BJ4kciO41Pm/zImHSH7GQInU2lqP/DXjN6xEv0EFAj_2/BIgT9NZXb86r_2B9_2/BglAnU64W/pXOd3Bpq_2B6reFFKiya/vrT62aiDk4ODnu2FLTN/8RaHDJKURayKv5wSn6_2Be/98LSI75Q/Y.jlk
http://94.103