flash

bxfomd2r.cjb.exe

Status: finished
Submission Time: 18.05.2020 09:37:55
Malicious
Trojan
Spyware
Evader
AgentTesla

Comments

Tags

Details

  • Analysis ID:
    230958
  • API (Web) ID:
    358234
  • Analysis Started:
    18.05.2020 09:37:56
  • Analysis Finished:
    18.05.2020 09:44:29
  • MD5:
    e45462327ac82abf12b65ffad6c9e0cb
  • SHA1:
    a072f1d825af90f7ab5ada5bbba4a4c75a4e26e9
  • SHA256:
    abdb53cf53c46e0ce06b1058847e47e3fbc0261eb86c3f005ee531c2a7e49397
  • Technologies:
Full Report Engine Info Verdict Score Reports

malicious

System: Windows 10 64 bit (version 1803) with Office 2016, Adobe Reader DC 19, Chrome 70, Firefox 63, Java 8.171, Flash 30.0.0.113

malicious
92/100

malicious
18/71

malicious
21/31

IPs

IP Country Detection
94.101.95.8
Turkey

Domains

Name IP Detection
mail.mkkarakosemobilya.com
94.101.95.8

URLs

Name Detection
https://PMzyK1FluOAeH.net
http://download.divx.com/player/divxdotcom/DivXWebPlayerInstaller.exe
http://mail.mkkarakosemobilya.com

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\bxfomd2r.cjb.exe.log
ASCII text, with CRLF line terminators
#