top title background image
flash

RFQ 001030112021·pdf.exe

Status: finished
Submission Time: 2021-12-01 11:55:11 +01:00
Malicious
Ransomware
Trojan
Spyware
Evader
GuLoader

Comments

Tags

Details

  • Analysis ID:
    531794
  • API (Web) ID:
    899316
  • Analysis Started:
    2021-12-01 11:55:11 +01:00
  • Analysis Finished:
    2021-12-01 12:02:04 +01:00
  • MD5:
    754fa9ff30ec6e1cd7a29837adeb7a8b
  • SHA1:
    09472c720424ab26d13b7dd8cc2e199a826a88d1
  • SHA256:
    957ac63b9471fe11ba63a0bca4759741b305525ef1c4a2e4be262ed4464a2935
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 100
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious
Score: 8/93
malicious
Score: 6/35
malicious
Score: 8/45

IPs

IP Country Detection
63.250.34.171
United States
216.58.198.33
United States
142.250.180.110
United States

Domains

Name IP Detection
drive.google.com
142.250.180.110
googlehosted.l.googleusercontent.com
216.58.198.33
doc-00-50-docs.googleusercontent.com
0.0.0.0

URLs

Name Detection
http://63.250.34.171/tickets.php?id=277N
http://63.250.34.171/tickets.php?id=277
https://doc-00-50-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/tmgkbuuo
Click to see the 8 hidden entries
https://doc-00-50-docs.googleusercontent.com/t
https://doc-00-50-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/tmgkbuuoqg7e2eb3u8b2c66mt8m0nijc/1638356250000/03026244708369606156/*/1f5uP5o0CfHZv_GAVqkAqahPOSxgGlgCb?e=download
https://drive.google.com/
https://doc-00-50-docs.googleusercontent.com/p
https://doc-00-50-docs.googleusercontent.com/:
https://doc-00-50-docs.googleusercontent.com/
https://doc-00-50-docs.googleusercontent.com/)
https://csp.withgoogle.com/csp/report-to/gse_l9ocaq

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Roaming\C79A3B\B52B3F.lck
very short file (no magic)
#
C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3853321935-2125563209-4053062332-1002\bc49718863ee53e026d805ec372039e9_d06ed635-68f6-4e9a-955c-4899f5f57b9a
data
#