20201109031215 - SMC.exe

Status: finished

Submission Time: 2020-11-09 16:59:39 +01:00

Malicious

Trojan

Spyware

Evader

AgentTesla GuLoader

Engine	Download Report	Detection	Info
	Full Report Management Report IOC Report	malicious Score: 100	System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

malicious

Score: 11/69

IP	Country	Detection
216.58.208.129	United States

Name	IP	Detection
smtp.yandex.ru	77.88.21.158
googlehosted.l.googleusercontent.com	216.58.208.129
smtp.yandex.com	0.0.0.0
Click to see the 1 hidden entries
doc-00-54-docs.googleusercontent.com	0.0.0.0

Name	Detection
http://1AYjOJayF1C.com
http://repository.certum.pl/ca.cer09
http://repository.certum.pl/ycasha2.cer0
Click to see the 28 hidden entries
http://crl.pki.goog/gsr2/gsr2
http://www.certum.pl/CPS0
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip
https://api.telegram.org/bot%telegramapi%/sendDocumentdocument---------------------------x
http://crl.pki.goog/gsr2/gsr2.crl0?
http://ocsp.pki.goog/gts1o1core08
http://crl.certum.pl/ca.crl0h
http://OwAqIz.com
http://subca.ocsp-certum.com01
http://crl.pki.goog/GTS1O1core.crl0
https://api.telegram.org/bot%telegramapi%/
http://ocsp.pki.goog/gts1o1core0
http://crls.yandex.net/certum/ycasha2.crl0-
http://127.0.0.1:HTTP/1.1
http://subca.ocsp-certum.com0.
https://api.ipify.orgGETMozilla/5.0
http://yandex.ocsp-responder.com03
https://pki.goog/repository/0
http://ocsp.pki.goog/gsr202
https://www.certum.pl/CPS0
http://pki.goog/gsr2/GTS1O1.crt0
https://doc-00-54-docs.googleusercontent.com/
http://yandex.crl.certum.pl/ycasha2.crl0q
http://crl.certum.pl/ctnca.crl0k
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip%tordir%%ha
http://repository.certum.pl/ctnca.cer09
http://DynDns.comDynDNS
https://doc-00-54-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/60tau9l6

20201109031215 - SMC.exe Options