Automated Malware Analysis - Joe Sandbox Cloud Basic

ID	Detection	Sample Info	Download Report	Classification & Info
1432431	Malicious Sigma Snort AV: 70%	RDFchOT4i0.exe 2024-04-27 02:23:05 +02:00	Full Report Management Report IOC Report	Info Class
1432430	Malicious Yara Moobot, Okiru AV: 66%	no Icon DnauGgOFTX.elf 2024-04-27 02:18:08 +02:00	Full Report Management Report IOC Report	Info Class
1432429	Malicious Yara Mirai, Moobot, Okiru AV: 58%	no Icon zN4Dka55hZ.elf 2024-04-27 02:18:07 +02:00	Full Report Management Report IOC Report	Info Class
1432427	Clean	https://liumugan.com/click.php?key=u68h3lc85fvstvrsqxpm&cid=com39uqovn9vqlj36hdg&zone=3777459-3943232122-3786755655&campaign=321305220&type=Push&age=0&creative_id=376401&campaign_id=88260&site_id=4840&placement_id=42664961&preset_id=494 2024-04-27 02:02:40 +02:00	Full Report Management Report IOC Report	Info
1432426	Malicious Yara HTMLPhisher AV: 25%	https://thehitchhouse.pages.dev/ 2024-04-27 02:00:24 +02:00	Full Report Management Report IOC Report	Info Class
1432425	Malicious Yara TechSupportScam AV: None	https://friwin2.z13.web.core.windows.net/ 2024-04-27 01:55:26 +02:00	Full Report Management Report IOC Report	Info Class
1432424	Malicious Yara HTMLPhisher AV: None	https://pub-12c79d09670f4464af9de32e4799a256.r2.dev/12345.html 2024-04-27 01:50:24 +02:00	Full Report Management Report IOC Report	Info Class
1432423	Malicious AV: None	https://ai7wzovlc.duckdns.org/ 2024-04-27 01:45:22 +02:00	Full Report Management Report IOC Report	Info Class
1432422	Malicious AV: None	https://svuch3d.duckdns.org/ 2024-04-27 01:40:25 +02:00	Full Report Management Report IOC Report	Info Class
1432421	Malicious AV: None	https://6mw23o.duckdns.org/ 2024-04-27 01:35:23 +02:00	Full Report Management Report IOC Report	Info Class
1432420	Malicious AV: None	https://rlx10ld2n.duckdns.org/ 2024-04-27 01:30:21 +02:00	Full Report Management Report IOC Report	Info Class
1432419	Malicious Yara Snort Mars Stealer, PureLog Stealer, RedLine, AV: 65%	VucRf0jboS.exe 2024-04-27 01:30:11 +02:00	Full Report Management Report IOC Report	Info Class
1432418	Malicious AV: 47%	no Icon 13zzcbrXBm.elf 2024-04-27 01:30:11 +02:00	Full Report Management Report IOC Report	Info
1432417	Malicious Yara Gafgyt AV: 53%	no Icon 4GtFbR4O3j.elf 2024-04-27 01:29:05 +02:00	Full Report Management Report IOC Report	Info Class
1432416	Malicious Yara Gafgyt AV: 53%	no Icon vtuYyqk0Xt.elf 2024-04-27 01:29:05 +02:00	Full Report Management Report IOC Report	Info Class
1432415	Malicious AV: None	https://htceram.com/ 2024-04-27 01:25:23 +02:00	Full Report Management Report IOC Report	Info
1432414	Malicious AV: None	https://ixkv5pf.duckdns.org/ 2024-04-27 01:20:21 +02:00	Full Report Management Report IOC Report	Info Class
1432413	Malicious AV: None	https://www.steampowered.solutions/ 2024-04-27 01:15:19 +02:00	Full Report Management Report IOC Report	Info
1432412	Malicious AV: None	https://verfolgung-lieferung.net/ 2024-04-27 01:10:18 +02:00	Full Report Management Report IOC Report	Info Class
1432411	Malicious AV: None	https://wall.page/jcw7sZ 2024-04-27 01:08:31 +02:00	Full Report Management Report IOC Report	Info

Windows: InjectsWrites Registry keysDrops PE FilesHas more than one ProcessHas Email attachmentDisassembly is available

Android: Receives SMS Sends SMS Reboot Native CMD

Common: Generates Internet Traffic Generates HTTP Network Traffic Expired Sample Creates malicious files Contains malware configuration(s)

Customization Show ID column

Analyses Overview

Search started