IOC Report
SecuriteInfo.com.Trojan-Downloader.Win32.Banload.9643.12431.exe

loading gif

Files

File Path
Type
Category
Malicious
SecuriteInfo.com.Trojan-Downloader.Win32.Banload.9643.12431.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
 malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\versionhistoryforcreatorpricelist[1].txt
Unicode text, UTF-8 (with BOM) text
dropped
C:\Users\user\Desktop\ExporterPriceLists.ini
Unicode text, UTF-8 text, with no line terminators
dropped
C:\Users\user\Desktop\help.txt
ASCII text, with CRLF line terminators
dropped

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\SecuriteInfo.com.Trojan-Downloader.Win32.Banload.9643.12431.exe
"C:\Users\user\Desktop\SecuriteInfo.com.Trojan-Downloader.Win32.Banload.9643.12431.exe"
 malicious
C:\Windows\SysWOW64\notepad.exe
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\user\Desktop\help.txt

URLs

Name
IP
Malicious
http://www.comco.sk/
unknown
http://www.mister-auto.de/de/search_s_refoem_
unknown
http://www.autodoc.gr/
unknown
http://www.autodoc.co.uk/search?keyword=
unknown
http://www.auto-doc.fr/
unknown
http://www.mister-auto.pt/
unknown
http://www.recambiosviaweb.com/
unknown
http://www.autodoc.lt/
unknown
http://www.mister-auto.hu/hu/search_s_refoem_
unknown
http://www.autodoc.ee/
unknown
http://www.auto-onderdelenshop.be/zoeken?keyword=
unknown
http://www.ebay.com/
unknown
http://www.autodoc.cz/
unknown
http://www.autodoc.se/search?keyword=
unknown
http://www.autodoc.si/
unknown
http://eshop.autocentrumm.sk/
unknown
http://www.autodoc.lv/search?keyword=
unknown
http://www.mister-auto.hu/
unknown
http://ttc.bovsoft.com/service/getcodefor_creatorpricelist.php?email=
unknown
http://www.mister-auto.pt/pt/search_s_refoem_
unknown
http://www.benl.ebay.be/sch/i.html?_nkw=
unknown
http://www.autoteileprofi.ch/ersatzteile-suche?keyword=
unknown
http://www.mister-auto.lu/
unknown
http://www.yakarouler.com/
unknown
http://www.ebay.at/
unknown
http://www.mister-auto.be/fr/search_s_refoem_
unknown
http://www.mister-auto.fi/
unknown
http://www.autodoc.dk/
unknown
http://www.mister-auto.de/
unknown
http://autodielyvm.sk/
unknown
http://www.autodoc.bg/
unknown
http://www.autodielygafa.sk/inshop/scripts/shop.aspx?ClearSearch=1&action=DoTecDocSearch&searchcode=
unknown
http://www.ebay.ch/
unknown
http://www.piecesauto24.com/rechercher?keyword=
unknown
http://www.autodoc.gr/search?keyword=
unknown
http://www.yakarouler.com/recherche?q=
unknown
http://autodily-hk.cz/
unknown
http://www.ebay.it/
unknown
http://www.mister-auto.gr/el/search_s_refoem_
unknown
http://www.onparts.gr/
unknown
http://www.oscaro.es/
unknown
http://www.mister-auto.gp/
unknown
http://www.autodoc.lv/
unknown
http://www.mister-auto.ch/
unknown
http://www.autodoc.co.no/
unknown
http://www.autonvaraosatpro.fi/
unknown
http://www.mister-auto.com/
unknown
http://www.mister-auto.at/de/search_s_refoem_
unknown
http://www.espertoautoricambi.it/ersatzteile-suche?keyword=
unknown
http://www.oscaro.es/Catalog/PartsList/Find?toFind=
unknown
http://www.autodoc.fi/search?keyword=
unknown
http://www.autodoc.de/
unknown
http://www.autodoc24.ro/search?keyword=
unknown
http://www.autoteiledirekt.de/
unknown
http://www.onparts.gr/antallaktika/search?s=
unknown
http://www.ebay.de/
unknown
http://www.auto-doc.fr/search?keyword=
unknown
http://eshop.autotechna.sk/
unknown
http://www.autodoc.sk/
unknown
http://www.autoteileprofi.de/
unknown
http://www.bildeleekspert.dk/
unknown
http://www.autodielygafa.sk/
unknown
http://www.autodielyonline24.sk
unknown
https://www.autohut.ro
unknown
http://www.piecesautopro.be/
unknown
http://www.autodoc.dk/search?keyword=
unknown
http://autodielyvm.sk/inshop/scripts/shop.aspx?ClearSearch=1&action=DoTecDocSearch&searchcode=
unknown
http://www.fifoautoshop.sk/cautare_articol/
unknown
http://www.mister-auto.dk/
unknown
http://www.mister-auto.bg/
unknown
http://www.mister-auto.ch/de/search_s_refoem_
unknown
http://www.autodoc.hu/
unknown
http://www.autodoc.bg/search?keyword=
unknown
http://ttc.bovsoft.com/download/versionhistoryforcreatorpricelist.txtopenj
unknown
http://www.ebay.at/sch/i.html?_nkw=
unknown
http://www.mister-auto.no/
unknown
http://www.autodoc.lu/
unknown
http://www.ebay.ie/
unknown
http://www.autodoc.es/search?keyword=
unknown
http://www.autodoc.fi/
unknown
http://www.mister-auto.ro/
unknown
http://www.mister-auto.se/sv/search_s_refoem_
unknown
http://www.mister-auto.ie/
unknown
http://www.mister-auto.mq/fr/search_s_refoem_
unknown
http://www.mister-auto.cz/cs/search_s_refoem_
unknown
http://www.autodoc.pl/search?keyword=
unknown
http://www.mister-auto.com/search_s_refoem_
unknown
http://www.autodoc.de/search?keyword=
unknown
http://www.mister-auto.cz/
unknown
http://www.comco.sk/vyhladavanie-a7?q=
unknown
http://www.autodoc.pl/
unknown
http://www.mister-auto.fi/fi/search_s_refoem_
unknown
http://chastite.bg/
unknown
http://www.autodoc.co.uk/
unknown
http://www.ebay.de/sch/i.html?_nkw=
unknown
http://www.autodielyonline24.sk/spares-search.html?keyword=
unknown
http://www.autokarma.ro/
unknown
http://www.autokarma.ro/cautare-dupa-cod-produs?search=
unknown
http://ttc.bovsoft.com/download/versionhistoryforcreatorpricelist.txtopenU
unknown
http://www.ebay.nl/sch/i.html?_nkw=
unknown
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
bovsoft.com
51.75.19.11
ttc.bovsoft.com
51.75.19.11

IPs

IP
Domain
Country
Malicious
51.75.19.11
bovsoft.com
France

Registry

Path
Value
Malicious
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
LangID
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
C:\Windows\system32\NOTEPAD.EXE.FriendlyAppName
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
C:\Windows\system32\NOTEPAD.EXE.ApplicationCompany

Memdumps

Base Address
Regiontype
Protect
Malicious
2520000
direct allocation
page execute and read and write
32CE000
heap
page read and write
23D6000
direct allocation
page read and write
549E000
stack
page read and write
32EB000
heap
page read and write
428A000
direct allocation
page read and write
3302000
heap
page read and write
43DE000
stack
page read and write
2465000
direct allocation
page read and write
93E000
heap
page read and write
2590000
heap
page read and write
4F8E000
stack
page read and write
23E8000
direct allocation
page read and write
24A4000
direct allocation
page read and write
6C6000
unkown
page read and write
4312000
direct allocation
page read and write
A0E000
heap
page read and write
531F000
stack
page read and write
32A0000
heap
page read and write
5320000
heap
page read and write
92A000
heap
page read and write
199000
stack
page read and write
521D000
stack
page read and write
6D9000
unkown
page read and write
33B5000
heap
page read and write
6ABE000
stack
page read and write
977000
heap
page read and write
2FEA000
stack
page read and write
245D000
direct allocation
page read and write
973000
heap
page read and write
433F000
direct allocation
page read and write
4FD0000
heap
page read and write
2510000
heap
page read and write
9E3000
heap
page read and write
4420000
trusted library allocation
page read and write
401000
unkown
page execute read
4130000
heap
page read and write
242E000
direct allocation
page read and write
972000
heap
page read and write
32C5000
heap
page read and write
4305000
direct allocation
page read and write
4303000
direct allocation
page read and write
9D6000
heap
page read and write
56DF000
stack
page read and write
24B2000
direct allocation
page read and write
2417000
direct allocation
page read and write
559F000
stack
page read and write
2427000
direct allocation
page read and write
9B6000
heap
page read and write
4226000
direct allocation
page read and write
24F3000
direct allocation
page read and write
A0E000
heap
page read and write
33A0000
heap
page read and write
32D2000
heap
page read and write
6EB0000
trusted library allocation
page read and write
2C9E000
stack
page read and write
2456000
direct allocation
page read and write
23E6000
direct allocation
page read and write
23F5000
direct allocation
page read and write
431C000
direct allocation
page read and write
760000
heap
page read and write
2486000
direct allocation
page read and write
72D000
unkown
page readonly
4220000
direct allocation
page read and write
33B0000
heap
page read and write
3250000
heap
page read and write
99F000
heap
page read and write
240E000
direct allocation
page read and write
6C6000
unkown
page write copy
9D1000
heap
page read and write
29D0000
heap
page read and write
4F90000
heap
page read and write
247F000
direct allocation
page read and write
23D0000
direct allocation
page read and write
9C6000
heap
page read and write
6D2000
unkown
page read and write
2410000
direct allocation
page read and write
400000
unkown
page readonly
2478000
direct allocation
page read and write
6CB000
unkown
page read and write
42F2000
direct allocation
page read and write
55DE000
stack
page read and write
4E16000
heap
page read and write
545F000
stack
page read and write
24D6000
direct allocation
page read and write
9EA000
heap
page read and write
9D4000
heap
page read and write
A0E000
heap
page read and write
4FD4000
heap
page read and write
800000
heap
page read and write
9C9000
heap
page read and write
96C000
heap
page read and write
9EC000
heap
page read and write
9CA000
heap
page read and write
9BA000
heap
page read and write
9B8000
heap
page read and write
2C59000
direct allocation
page read and write
98A000
heap
page read and write
32CB000
heap
page read and write
9BA000
heap
page read and write
24B9000
direct allocation
page read and write
729000
unkown
page readonly
249C000
direct allocation
page read and write
32CE000
heap
page read and write
975000
heap
page read and write
32CF000
heap
page read and write
93A000
heap
page read and write
750000
heap
page read and write
248D000
direct allocation
page read and write
2400000
direct allocation
page read and write
9C3000
heap
page read and write
4326000
direct allocation
page read and write
24C8000
direct allocation
page read and write
9E5000
heap
page read and write
6DF000
unkown
page read and write
4277000
direct allocation
page read and write
984000
heap
page read and write
2471000
direct allocation
page read and write
9DF000
heap
page read and write
6E2000
unkown
page readonly
2FA8000
stack
page read and write
2593000
heap
page read and write
427B000
direct allocation
page read and write
4190000
trusted library allocation
page read and write
964000
heap
page read and write
977000
heap
page read and write
4E10000
heap
page read and write
439E000
stack
page read and write
2D9F000
stack
page read and write
9D9000
heap
page read and write
98B000
heap
page read and write
6AFF000
stack
page read and write
4260000
direct allocation
page read and write
925000
heap
page read and write
984000
heap
page read and write
91000
stack
page read and write
4E19000
heap
page read and write
975000
heap
page read and write
4F4D000
stack
page read and write
920000
heap
page read and write
6B3E000
stack
page read and write
6D5000
unkown
page read and write
535E000
stack
page read and write
6B7F000
stack
page read and write
4C20000
heap
page read and write
24AB000
direct allocation
page read and write
A0E000
heap
page read and write
32D2000
heap
page read and write
2447000
direct allocation
page read and write
9DB000
heap
page read and write
9D4000
heap
page read and write
2C52000
direct allocation
page read and write
2A3F000
heap
page read and write
2A2F000
heap
page read and write
4DF0000
heap
page read and write
9B2000
heap
page read and write
4235000
direct allocation
page read and write
4320000
direct allocation
page read and write
32A7000
heap
page read and write
994000
heap
page read and write
6DB000
unkown
page write copy
32D3000
heap
page read and write
4301000
direct allocation
page read and write
975000
heap
page read and write
A0A000
heap
page read and write
930000
heap
page read and write
9DB000
heap
page read and write
2495000
direct allocation
page read and write
4FC0000
trusted library allocation
page read and write
A0A000
heap
page read and write
4DD0000
trusted library allocation
page read and write
There are 161 hidden memdumps, click here to show them.