top title background image
flash

Ordine R20 T4077 TBA 2020, pdf.exe

Status: finished
Submission Time: 2020-10-27 11:34:57 +01:00
Malicious
Trojan
Evader
Nanocore

Comments

Tags

  • exe
  • NanoCore
  • nVpn
  • RAT

Details

  • Analysis ID:
    305766
  • API (Web) ID:
    513280
  • Analysis Started:
    2020-10-27 11:58:09 +01:00
  • Analysis Finished:
    2020-10-27 12:08:21 +01:00
  • MD5:
    93a661f911630ce9b4436a86fdd40b91
  • SHA1:
    7a68c8bc77410af675cbe3529df8d27c4da5bda1
  • SHA256:
    3459d3a07659440f0e31b4b59a53a6ed78914d64a467cab3dcd05de1555c1488
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
malicious
Score: 100
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

IPs

IP Country Detection
185.140.53.129
Sweden

Domains

Name IP Detection
graceland777.ddns.net
185.140.53.129

Dropped files

Name File Type Hashes Detection
C:\Program Files (x86)\DHCP Monitor\dhcpmon.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\Users\user\AppData\Local\Temp\tmp1798.tmp
XML 1.0 document, ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Roaming\D06ED635-68F6-4E9A-955C-4899F5F57B9A\run.dat
ISO-8859 text, with no line terminators, with escape sequences
#
Click to see the 6 hidden entries
C:\Users\user\AppData\Roaming\cdNKeLIAcbnc.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
#
C:\Program Files (x86)\DHCP Monitor\dhcpmon.exe:Zone.Identifier
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\Ordine R20 T4077 TBA 2020, pdf.exe.log
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\dhcpmon.exe.log
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Temp\tmp56B4.tmp
XML 1.0 document, ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Roaming\cdNKeLIAcbnc.exe:Zone.Identifier
ASCII text, with CRLF line terminators
#