top title background image
flash

6Rn5G1VWPB.exe

Status: finished
Submission Time: 2021-05-12 16:38:43 +02:00
Malicious
Trojan
Spyware
Evader
AgentTesla

Comments

Tags

Details

  • Analysis ID:
    412365
  • API (Web) ID:
    779976
  • Analysis Started:
    2021-05-12 16:39:38 +02:00
  • Analysis Finished:
    2021-05-12 16:49:15 +02:00
  • MD5:
    c12fea2da39e5173fa674ab5e22a928f
  • SHA1:
    ef3754b85ecd9f789bc9bbf8a8c6b36be41cc996
  • SHA256:
    19f2d4a6fe01ce9e0bc8362933e41f0d707df28bf9ab662db7dc7504aef3845a
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
malicious
Score: 100
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious
Score: 17/62

IPs

IP Country Detection
86.109.178.195
Spain

Domains

Name IP Detection
mail.garciadelacruz.com
86.109.178.195

URLs

Name Detection
http://servermanager.miixit.org/report/reporter_index.php?name=
https://api.ipify.org%$
http://servermanager.miixit.org/hits/hit_index.php?k=
Click to see the 18 hidden entries
http://servermanager.miixit.org/downloads/
https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip
http://servermanager.miixit.org/index_ru.htmlk
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
http://ThqqlGVRjff9puHH.com
http://servermanager.miixit.org/
https://api.ipify.org%GETMozilla/5.0
http://127.0.0.1:HTTP/1.1
http://mail.garciadelacruz.com
http://servermanager.miixit.org/index_ru.html
http://servermanager.miixit.org/E
https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=CJU3DBQXBUQPC
http://servermanager.miixit.org/hits/hit_index.php?k=1
http://EPtbzE.com
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip%tordir%%ha
http://checkip.dyndns.org/
http://DynDns.comDynDNS

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\6Rn5G1VWPB.exe.log
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Roaming\ikffln5u.f20\Chrome\Default\Cookies
SQLite 3.x database, last written using SQLite version 3032001
#