flash

GV6fciJUF1.exe

Status: finished
Submission Time: 16.11.2020 15:51:54
Malicious
Ransomware
Trojan
Evader
GuLoader

Comments

Tags

Details

  • Analysis ID:
    318066
  • API (Web) ID:
    537936
  • Analysis Started:
    16.11.2020 15:51:54
  • Analysis Finished:
    16.11.2020 15:59:27
  • MD5:
    bfaaa05064bf433bb5f472949afb4bda
  • SHA1:
    883a59675cf0e46082ba6b252d92f0c3a7d8e463
  • SHA256:
    67e79aee5a167c0042612414b8779ff58d9c9c8b4ad1cb1ff41aa9df15a67a8e
  • Technologies:
Full Report Management Report Engine Info Verdict Score Reports

System: Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211

malicious
100/100

malicious
43/70

malicious
24/31

malicious

Domains

Name IP Detection
onedrive.live.com
0.0.0.0

URLs

Name Detection
https://login.lig
https://logincdn.msauth.net/16.000/content/js/ConvergedLoginPaginatedStrings.en_LF5wadGUj8ZgZU2sWOZt
http://myurl/myfile.bin
Click to see the 22 hidden entries
https://onedrive.live.com/ky
https://onedrive.live.com/-9769-133e6dd
https://login.li
https://onedrive.live.com/DL1BZMCy7gkjqiuFbh4BiH6i06Gt8j0MBnlEzhZAmfV4QjcdMO7qRELnwUjGSDr5RjpBl7rWzg
https://onedrive.live.com/ex
https://onedrive.live.com/download?cid=E3DDC3980F743711&resid=E3DDC3980F743711%21784&authkey=AGURDZX
https://login.live.
https://onedrive.live.com/44
https://p.sfx.ms/login/v1/header.html?id=250206&mkt=EN-US&cbcxt=sky
https://onedrive.live.com/download?cid=EQh
https://onedrive.live.com/download?cid=E3DDC3980F743711&resid=E3qi
https://onedrive.live.com/
https://sc.imp.live.com/content/dam/imp/surfaces/mail_signin/v3/sky/EN-US.html?id=250206&mkt=EN-US&c
https://logincdn.msauth.net/
https://onedrive.live.com/download?cid=E3DDC3980F743711&resid=E3DDC3980F743711%21784&authkey=AGU
https://onedrive.live.com/zP
https://onedrive.live.com/tyLS6JLI5fNdE?
https://logincdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_m_AEFbtYqJeKR6sGUe93pA2.js
https://onedrive.live.com/download?cid=E3DDC3980F743711&resid=E
https://logincdn.msauth.net/shared/1.0/
https://onedrive.live.com/downlo
https://onedrive.live.com/download?cid=E3DDC3980F743711&resid=E3DDC

Dropped files

Name File Type Hashes Detection
C:\Users\user\BEFRIS\Europaeisk.exe
PE32 executable (GUI) Intel 80386, for MS Windows
#