top title background image
flash

zloader_1.16.10.0.exe

Status: finished
Submission Time: 2020-07-19 21:32:48 +02:00
Malicious
Evader

Comments

Tags

  • zloader

Details

  • Analysis ID:
    247356
  • API (Web) ID:
    390343
  • Analysis Started:
    2020-07-20 03:57:36 +02:00
  • Analysis Finished:
    2020-07-20 04:04:37 +02:00
  • MD5:
    d61d30d90cb3a6920b13ba9e91fd49d5
  • SHA1:
    03e1a0bfd1b339e928b583b91897d812db080c39
  • SHA256:
    ed8328548179948fb69a7326022255984c289763041bdccd38cc0968a005e7d7
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
malicious
Score: 92
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious
Score: 52/71
malicious
Score: 17/39
malicious
Score: 26/31
malicious

IPs

IP Country Detection
1.16.10.0
Korea Republic of

Domains

Name IP Detection
by-airmail-pay.com
0.0.0.0
mypostagepaid.com
0.0.0.0

URLs

Name Detection
http://mypostagepaid.com/stuk.php(
http://by-airmail-pay.com/stuk.php
http://by-airmail-pay.y.com/stuk.php
Click to see the 18 hidden entries
http://by-airmail-pay.com/stuk.phpcp
http://mypostagepaid.com/stuk.phpT
http://mypostagepaid.com/stuk.phpSq
http://by-airmail-pay.com/stuk.php=p
http://mypostagepaid.com/stuk.php)p
http://mypostagepaid.com/stuk.phphm
http://by-airmail-pay.com/stuk.phppay.com/stuk.php
http://mypostagepaid.com/stuk.phpvk3ygzuzs9nvimapmz7segpl723s9vfvti2z18re83mylwgpcdxb15ubbqqvvga1cea
http://mypostagepaid.com/stuk.php
http://by-airmail-pay.com/stuk.phpSq
http://mypostagepaid.com/stuk.phpqq
http://mypostagepaid.com/stuk.phpaid.com/stuk.phphm
http://mypostagepaid.com/stuk.phpcp
http://by-svchost.exe
http://by-airmail-pay.com/stuk.php72SH
http://by-airmail-pay.com/stuk.phpr
http://mypostagepaid.com/stuk.phpgq
http://by-airmail-pay.com/stuk.php4