top title background image
flash

http://www.classicpalace.ae/engine/rebm.exe

Status: finished
Submission Time: 2020-01-22 22:40:51 +01:00
Malicious
Trojan
Spyware
Evader
AgentTesla

Comments

Tags

Details

  • Analysis ID:
    202807
  • API (Web) ID:
    303292
  • Analysis Started:
    2020-01-22 22:40:52 +01:00
  • Analysis Finished:
    2020-01-22 22:53:51 +01:00
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
malicious
Score: 100
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious
Score: 37/70

IPs

IP Country Detection
79.9.36.233
Italy
199.79.62.243
United States

Domains

Name IP Detection
mail.arkimede.it
79.9.36.233
www.classicpalace.ae
0.0.0.0
classicpalace.ae
199.79.62.243

URLs

Name Detection
http://go.microsoft.
http://cert.int-x3.letse
https://4DLEBGw49gJm.com
Click to see the 6 hidden entries
http://cps.letsencrypt.org0
http://go.microsoft.LinkId=42127
http://www.classicpalace.ae/engine/rebm.exe
http://ocsp.int-x3.letsencrypt.org0/
http://cert.int-x3.letsencrypt.org/0/
http://cps.root-x1.letsencrypt.org0

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Roaming\10thITALY\10thITALY.exe
PE32 executable (GUI) Intel 80386, for MS Windows
#
C:\Users\user\AppData\Roaming\10thITALY\10thITALY.exe:Zone.Identifier
ASCII text, with CRLF line terminators
#
C:\Users\user\Desktop\download\rebm.exe
PE32 executable (GUI) Intel 80386, for MS Windows
#
Click to see the 4 hidden entries
C:\Users\user\AppData\Roaming\lhyxy1ad.fpa.zip
Zip archive data, at least v2.0 to extract
#
C:\Users\user\AppData\Roaming\lhyxy1ad.fpa\Chrome\Default\Cookies
SQLite 3.x database, last written using SQLite version 3024000
#
C:\Users\user\AppData\Roaming\lhyxy1ad.fpa\Firefox\Profiles\73x4od5b.default\cookies.sqlite
SQLite 3.x database, user version 9, last written using SQLite version 3023001
#
C:\Users\user\Desktop\cmdline.out
ASCII text, with CRLF line terminators
#