Joe Sandbox Cloud Basic

Want to search on specific fields?


Try our:

Advanced Search

Want to search in depth on all Cloud Basic reports?

Try: Joe Sandbox View

Register Login
sloganpng
top title background image
flash

action_2.0.8.9.exe

Status: finished
Submission Time: 2020-07-19 20:44:56 +02:00
Malicious
Phishing
Trojan
Spyware
Evader

Comments

Tags

  • action

Details

  • Analysis ID:
    247186
  • API (Web) ID:
    390019
  • Analysis Started:
    2020-07-19 23:35:04 +02:00
  • Analysis Finished:
    2020-07-19 23:44:32 +02:00
  • MD5:
    11b3ae60c845189bbec476f762476e69
  • SHA1:
    28461e56f09813363ccc1fa686e48938afde7ec4
  • SHA256:
    b6f0422e0ce7fd8f2ad23bc2ff2fab72b331e252810ce7a4582217a3bea32c67
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Full Report Management Report IOC Report
malicious
Score: 100
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

Open Full Report
malicious
Score: 54/70
Open Full Report
malicious
Score: 19/39
malicious
Score: 26/31
malicious

IPs

IP Country Detection
2.0.8.9
 France

Domains

Name IP Detection
office365.bit
 0.0.0.0
specialnan.date
 0.0.0.0

URLs

Name Detection
http://office365.bit/js/start.phphttp://specialnan.date/js/start.php
http://specialnan.date/js/start.php
http://specialnan.date/js/start.php?action=cfg
Click to see the 2 hidden entries
http://office365.bit/js/start.phphttp://specialnan.date/js/start.phpD
http://office365.bit/js/start.php

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Roaming\Ziwiwe\ceow.exe
 PE32 executable (GUI) Intel 80386, for MS Windows
 #
C:\Users\user\AppData\Local\Temp\tmp7f55391f.bat
 DOS batch file, ASCII text
 #
Click to see the 1 hidden entries
C:\Users\user\AppData\Roaming\Evtisu\kutuh.qew
 data
 #