flash

SKMBT_C284e20041410330.exe

Status: finished
Submission Time: 04.06.2020 08:49:51
Malicious
Trojan
Spyware
Evader
GuLoader

Comments

Tags

Details

  • Analysis ID:
    235580
  • API (Web) ID:
    367250
  • Analysis Started:
    04.06.2020 08:49:52
  • Analysis Finished:
    04.06.2020 08:55:57
  • MD5:
    be5b3246523f49207c34223d5207a35c
  • SHA1:
    537ca33f9399c6196ea38e4e6e3e8e9695ac5d20
  • SHA256:
    b666f8a605a45edebf5a3980675d00b84343a9b3c7a6d00fb90c37f40b55ac57
  • Technologies:
Full Report Engine Info Verdict Score Reports

System: Windows 10 64 bit (version 1803) with Office 2016, Adobe Reader DC 19, Chrome 70, Firefox 63, Java 8.171, Flash 30.0.0.113

malicious
100/100

malicious
18/73

malicious
5/48

IPs

IP Country Detection
193.142.59.105
Netherlands
45.74.14.71
United States

Domains

Name IP Detection
puppuslog.xyz
193.142.59.105
cor.sehablae.com
0.0.0.0
backgmbh.duckdns.org
45.74.14.71

URLs

Name Detection
https://cor.sehablae.com/mnaa.bin
http://puppuslog.xyz/mana/logs/fre.php

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Roaming\1CF93A\AA2F06.lck
very short file (no magic)
#
C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-58933367-3072710494-194312298-1002\4216a73197943a17d1161a6bdc4512b0_59407d34-c8c5-44df-a766-ba8a11cb1cb0
data
#