top title background image
flash

960.dll

Status: finished
Submission Time: 2021-10-25 10:50:27 +02:00
Malicious
Trojan
Evader
Ursnif

Comments

Tags

  • DHL
  • dll
  • gozi
  • ITA

Details

  • Analysis ID:
    508541
  • API (Web) ID:
    876112
  • Analysis Started:
    2021-10-25 10:50:29 +02:00
  • Analysis Finished:
    2021-10-25 11:03:33 +02:00
  • MD5:
    96c1d2b40d981eb28aede953cf76e14a
  • SHA1:
    cbc35b375917f21ab85f989febdf8f6cb73dd7be
  • SHA256:
    0570fd54d98349e62675cf1e53aa2197ed6c0df811350bfae9f64196b0a49278
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 88
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
clean
0/100

Third Party Analysis Engines

malicious
Score: 10/91

IPs

IP Country Detection
40.97.128.194
United States
45.9.20.174
Russian Federation
52.97.212.242
United States
Click to see the 11 hidden entries
193.239.85.58
Romania
52.97.137.146
United States
52.97.178.34
United States
40.97.164.146
United States
52.97.149.82
United States
52.97.178.98
United States
52.97.219.162
United States
66.254.114.238
United States
52.97.149.242
United States
52.97.151.18
United States
13.82.28.61
United States

Domains

Name IP Detection
realitystorys.com
45.9.20.174
gderrrpololo.net
193.239.85.58
msn.com
13.82.28.61
Click to see the 8 hidden entries
outlook.com
40.97.164.146
redtube.com
66.254.114.238
HHN-efz.ms-acdc.office.com
52.97.178.34
FRA-efz.ms-acdc.office.com
52.97.149.242
www.msn.com
0.0.0.0
www.outlook.com
0.0.0.0
www.redtube.com
0.0.0.0
outlook.office365.com
0.0.0.0

URLs

Name Detection
https://gderrrpololo.net/glik/H_2BU2vlvgAc6fNWXN/CkVnC9pWV/PQs_2BerZBb_2Fu3B6Aq/oivzxSSSPseSKwrMhj4/
https://gderrrpololo.net:443/glik/H_2BU2vlvgAc6fNWXN/CkVnC9pWV/PQs_2BerZBb_2Fu3B6Aq/oivzxSSSPseSKwrM
https://blogs.msn.com/
Click to see the 97 hidden entries
https://ci.rdtcdn.com/m=eOhlbe/media/pics/sites/006/397/313/cover1604545741/1604545741.jpg
https://realitystorys.com:443/glik/j0uD7cpVL/fJVQUlr3ehcF5zsc_2BI/46lZuDSf8vuUqMOrSF_/2Bn07srcC8zAR_
https://ci.rdtcdn.com/m=bIijsHVg5p/media/videos/201710/10/2532850/original/5.webp
https://di-ph.rdtcdn.com/m=e_rU8f/pics/pornstars/000/004/440/thumb_198761.jpg
https://ci.rdtcdn.com/m=eah-8f/media/videos/201903/25/15183741/original/10.jpg
https://di-ph.rdtcdn.com/videos/202103/31/385940551/original/(m=bIa44NVg5p)(mh=vR0xTuK55_NB-jVC)10.w
https://ci-ph.rdtcdn.com/videos/202103/09/384862481/original/(m=eah-8f)(mh=N1FgEGpnra8PncC0)9.jpg
https://ci-ph.rdtcdn.com/videos/202102/08/383245152/original/(m=bIaMwLVg5p)(mh=6POpU-U4_ESglAt4)0.we
https://jp.redtube.com/
https://outlook.office365.com/q
https://di-ph.rdtcdn.com/videos/202102/08/383245152/original/(m=eah-8f)(mh=cZPqrA9hZ99ftU69)0.jpg
https://ci.rdtcdn.com/m=bIijsHVg5p/media/videos/201703/30/2078064/original/10.webp
http://realitystorys.com/public/scripts/lib/vector-map/jquery.vmap.js?1234
https://ci-ph.rdtcdn.com/videos/202106/08/389275121/original/(m=bIaMwLVg5p)(mh=9VsL0_ADV5-KFs6q)0.we
https://cdn1d-static-shared.phncdn.com/timings-1.0.0.js
https://di-ph.rdtcdn.com/videos/202104/06/386229241/original/(m=eW0Q8f)(mh=6JEGHjunXqyqDdag)7.jpg
https://realitystorys.com/
https://de.redtube.com/
https://ci-ph.rdtcdn.com/videos/202105/26/388644501/original/(m=eah-8f)(mh=ZzzPCKxx0mME-vAY)16.jpg
https://outlook.office365.com/i
https://cv-ph.rdtcdn.com/videos/202106/07/389209821/360P_360K_389209821_fb.mp4?kDfz-oDxwXjffrt-qpr2a
https://ci-ph.rdtcdn.com/videos/202102/26/384301112/original/(m=eGJF8f)(mh=saI52qs4Vl3V9g8Z)6.jpg
https://outlook.com/signup/glik/8yS2mbsfFf6cejeIn84i0HX/qo3uW_2BzE/mdlTEAbx_2BoHh_2F/RKn_2Bjg9_2B/Gp
https://ci-ph.rdtcdn.com/videos/202103/13/385072001/original/(m=eah-8f)(mh=DlDDUfjRld1muM0Q)11.jpg
https://di-ph.rdtcdn.com/videos/202103/23/385577021/original/(m=eGJF8f)(mh=0KSziH9PrcJnrmpk)
https://cv-ph.rdtcdn.com/videos/202109/29/395529531/360P_360K_395529531_fb.mp4?Uztl3Wrp-MWt4BBFLH8Dz
https://di-ph.rdtcdn.com/videos/202107/01/390513131/original/(m=eah-8f)(mh=4gy9DgNgQSiiR8P5)0.jpg
https://ci-ph.rdtcdn.com/videos/202109/13/394653751/original/(m=eGJF8f)(mh=t8GvJZxc8vHfgpKt)
https://ci.rdtcdn.com/m=eGJF8f/media/videos/201709/26/2487219/original/5.jpg
https://ci-ph.rdtcdn.com/m=bIWpYLVg5p/pics/pornstars/000/005/811/thumb_941122.webp
https://ci-ph.rdtcdn.com/videos/202105/16/388094131/original/(m=eGJF8f)(mh=nFYmlFradOxk5Jyq)
https://ci-ph.rdtcdn.com/videos/202105/14/388018201/original/(m=eah-8f)(mh=-MQW8r1SMXXSF72j)0.jpg
https://ci-ph.rdtcdn.com/videos/202011/16/370748232/original/(m=eah-8f)(mh=JacUHhK-Ij_nepxQ)3.jpg
https://ci-ph.rdtcdn.com/videos/202101/14/381749172/original/(m=eGJF8f)(mh=OPe9q8w6QbYIf9-g)9.jpg
https://ci-ph.rdtcdn.com/videos/202106/08/389275121/original/(m=eGJF8f)(mh=iw4q0oSycEuLaZ1F)0.jpg
https://di-ph.rdtcdn.com/videos/202108/17/393095421/original/(m=bIa44NVg5p)(mh=9wzOFMmr5XN5J7cV)0.we
https://cv-ph.rdtcdn.com/videos/202103/23/385577021/360P_360K_385577021_fb.mp4?FjfUrYaNreh_9JH8_VpMM
https://ci-ph.rdtcdn.com/videos/202107/29/392093021/original/(m=eGJF8f)(mh=_R1W9gxWu87scWvA)
https://ci.rdtcdn.com/m=eGJF8f/media/videos/201710/26/2577860/original/12.jpg
https://ci-ph.rdtcdn.com/videos/202102/26/384301112/original/(m=eGJF8f)(mh=saI52qs4Vl3V9g8Z)
https://ev-ph.rdtcdn.com/videos/202105/16/388094131/360P_360K_388094131_fb.mp4?validfrom=1635148457&
https://ci.rdtcdn.com/m=eGJF8f/media/videos/201809/13/10324721/original/14.jpg
https://ei.rdtcdn.com/www-static/cdn_files/redtube/icons/favicon.png?v=a12ed1ca8d50ef1f3db5086440a05
https://di-ph.rdtcdn.com/videos/202102/08/383211972/original/(m=eGJF8f)(mh=eQWTlunpCk2anDJN)
https://www.outlook.com/signup/glik/s7AY7PNKNY7qoI_2BQr_2/BZrJDH2AScHXXByF/lD8dU2j4Sz1navR/de62_2FxkmbHTb2DE_/2B9nyZAdK/1Bnrt2ZafL_2BtJKsOx_/2FZTL81isnTUwK2z_2B/Q2W7QHrnJ3PuwYSNC0UWpC/BHAFi4MsU9tG5/N8otBSYv/LMshoRmXJ022tnTrIf0EFoa/LVLPQxYJwE/_2B_2BW9x3Z4tmtsH/Q3d5_2Fmn0vumeiAYRZWF/Tp.lwe
https://di-ph.rdtcdn.com/videos/202102/04/383019252/original/(m=eah-8f)(mh=KuAmT5sQGKXyc_4n)13.jpg
https://di-ph.rdtcdn.com/videos/202009/10/350779682/original/(m=eGJF8f)(mh=WrC9TE6PvGxLAxtZ)
https://di-ph.rdtcdn.com/m=e_rU8f/pics/pornstars/000/004/699/thumb_149711.jpg
https://cv-ph.rdtcdn.com/videos/202005/31/319173851/360P_360K_319173851_fb.mp4?Es6P879pCBwn1DyxUgttG
https://ev-ph.rdtcdn.com/videos/202102/26/384301112/360P_360K_384301112_fb.mp4?validfrom=1635148457&
https://di-ph.rdtcdn.com/videos/202106/07/389209821/original/(m=bIa44NVg5p)(mh=NyOu0if_TSONkes5)8.we
https://outlook.com/signup/glik/s7AY7PNKNY7qoI_2BQr_2/BZrJDH2AScHXXByF/lD8dU2j4Sz1navR/de62_2FxkmbHTb2DE_/2B9nyZAdK/1Bnrt2ZafL_2BtJKsOx_/2FZTL81isnTUwK2z_2B/Q2W7QHrnJ3PuwYSNC0UWpC/BHAFi4MsU9tG5/N8otBSYv/LMshoRmXJ022tnTrIf0EFoa/LVLPQxYJwE/_2B_2BW9x3Z4tmtsH/Q3d5_2Fmn0vumeiAYRZWF/Tp.lwe
https://di-ph.rdtcdn.com/videos/202101/13/381691962/original/(m=eah-8f)(mh=XsKdk0VhGnqfMNsI)10.jpg
https://ci-ph.rdtcdn.com/videos/202103/15/385156301/original/(m=eGJF8f)(mh=uw_oNM4356i0OC-H)
https://di-ph.rdtcdn.com/videos/202102/13/383543112/original/(m=eW0Q8f)(mh=gthrNrf7qrf__ZU7)0.jpg
https://ci-ph.rdtcdn.com/videos/202107/15/391285991/original/(m=bIaMwLVg5p)(mh=aQ_ceq6BEbD3of1_)0.we
https://di-ph.rdtcdn.com/videos/202102/04/383019252/original/(m=eW0Q8f)(mh=evFKzprxbWQCN3tq)13.jpg
https://ci-ph.rdtcdn.com/m=bIWpYLVg5p/pics/pornstars/000/005/343/thumb_1439151.webp
https://ei.rdtcdn.com/www-static/cdn_files/redtube/images/pc/category/amateur_001.jpg
https://www.redtube.com/?page=2
https://di-ph.rdtcdn.com/videos/202103/09/384862481/original/(m=bIa44NVg5p)(mh=gIYTB6lFDorHCQMN)9.we
https://ci.rdtcdn.com/m=eah-8f/media/videos/202007/20/34290851/original/13.jpg
https://deff.nelreports.net/api/report?cat=msn
https://ci.rdtcdn.com/m=bIaMwLVg5p/media/videos/202007/20/34290851/original/13.webp
https://outlook.office365.com/signup/glik/8yS2mbsfFf6cejeIn84i0HX/qo3uW_2BzE/mdlTEAbx_2BoHh_2F/RKn_2Bjg9_2B/GpRSEAQStC8/AWvnHdkDVRk4pS/zTEjMNN4_2BuAHlHRWFj6/qyhebbHboW8W6Ck4/3vCEUwN7AybcBJ4/LN0YbNNZfxBWgibNwY/59pU95udY/Toh_2F7o8SeIy1MyLqpt/1FpR74WLyFx3Tky/N32mc.lwe
https://ev-ph.rdtcdn.com/videos/202105/04/387540961/360P_360K_387540961_fb.mp4?validfrom=1635148457&
https://ci-ph.rdtcdn.com/videos/202102/15/383636032/original/(m=eW0Q8f)(mh=GUfABxxa28GkdD6z)0.jpg
https://outlook.office365.com/signup/glik/s7AY7PNKNY7qoI_2BQr_2/BZrJDH2AScHXXByF/lD8dU2j4Sz1navR/de6
https://cv-ph.rdtcdn.com/videos/202107/15/391285991/360P_360K_391285991_fb.mp4?0OdpWjb_a1Ph_WUDDrrDF
https://ci-ph.rdtcdn.com/videos/202103/08/384812852/original/(m=bIa44NVg5p)(mh=ez7sxhiDrUcN2KKo)9.we
https://di-ph.rdtcdn.com/videos/202102/13/383543112/original/(m=bIaMwLVg5p)(mh=_eNmFzlu9e0o3mck)0.we
https://ci.rdtcdn.com/m=ejrk8f/media/videos/201612/17/1871313/original/15.jpg
https://ci.rdtcdn.com/m=eGJF8f/media/videos/201903/25/15183741/original/
https://ci-ph.rdtcdn.com/videos/202105/14/388018201/original/(m=eW0Q8f)(mh=msATufbIyMw46S0a)0.jpg
https://di-ph.rdtcdn.com/videos/202103/09/384862481/original/(m=eW0Q8f)(mh=7BFiTHkYBZ8Dz-i-)9.jpg
https://di-ph.rdtcdn.com/videos/202106/08/389275121/original/(m=bIa44NVg5p)(mh=Nnt2Nw1mwFioCE-c)0.we
http://realitystorys.com/public/scripts/lib/vector-map/country/jquery.vmap.world.js?1234
https://di-ph.rdtcdn.com/videos/202103/15/385156301/original/(m=bIaMwLVg5p)(mh=29OBBK3j4lLnvUBd)0.we
https://outlook.office365.com/U
https://ci-ph.rdtcdn.com/videos/202102/08/383207032/original/(m=eW0Q8f)(mh=3HTat6JZ3XDW9oZD)0.jpg
https://outlook.office365.com/P
https://ci-ph.rdtcdn.com/videos/202103/31/385940551/original/(m=bIa44NVg5p)(mh=vR0xTuK55_NB-jVC)10.w
https://ci-ph.rdtcdn.com/videos/202103/31/385940551/original/(m=eGJF8f)(mh=wSHQLg-hs8HE2sf8)10.jpg
https://msn.com/mail/glik/dRJ3X7Di_2BePTH4tLHLuE/izm6mTkxDuFgv/shvskpoy/jHw_2FjQeCqSlPtcb7wQTtf/zeiYfpm5xd/kxMZz_2BaxESH9DOv/hHmXse9AqOyF/aYyDdCtk5pR/wrh8u_2FhJNkPD/ExYs1Rf4SfgAM_2FUA4Bq/VgPLh0aqAL20bGIw/HjWFrx4VEUEV1GO/t6PdRK8deDEde7wh0H/jqe0eLKR6/1QRFTiX03b0ut/xE.lwe
https://static.trafficjunky.com/invocation/embeddedads/
https://di-ph.rdtcdn.com/videos/202104/06/386229241/original/(m=eah-8f)(mh=zThl9eYSh6r42EDr)7.jpg
https://outlook.office365.com/?
https://di-ph.rdtcdn.com/videos/202104/23/387012601/original/(m=eGJF8f)(mh=Pij2JCh-F-ekeiII)
https://ci-ph.rdtcdn.com/videos/202007/23/335592782/original/(m=eGJF8f)(mh=MsiWwEGygqswrimV)
https://ci-ph.rdtcdn.com/videos/202009/07/349562681/original/(m=eGJF8f)(mh=hHD7AJUqK1Qky-HR)14.jpg
https://di-ph.rdtcdn.com/m=bIWpYLVg5p/pics/pornstars/000/253/121/thumb_1054472.webp
https://ci-ph.rdtcdn.com/videos/202103/08/384812852/original/(m=eW0Q8f)(mh=tkRlzWuo9cCyomfR)9.jpg
https://ci.rdtcdn.com/m=ejrk8f/media/videos/201703/30/2078064/original/10.jpg
https://realitystorys.com/glik/AcGYrTChCv8_2BhbtW1lg/NGR_2By7_2Bva21p/02aNCV6pK756tfH/bwcdztTd9anUTT
https://di-ph.rdtcdn.com/videos/202107/15/391285991/original/(m=bIaMwLVg5p)(mh=aQ_ceq6BEbD3of1_)0.we
https://di-ph.rdtcdn.com/videos/202009/10/350779682/original/(m=bIa44NVg5p)(mh=p6qAJQiOTkk74BZu)5.we
https://ci-ph.rdtcdn.com/videos/202102/15/383636032/original/(m=eGJF8f)(mh=NUtB_xEbIzwUIYcq)