top title background image
flash

TNT Documents.exe

Status: finished
Submission Time: 2021-12-02 18:50:34 +01:00
Malicious
Trojan
Evader
FormBook

Comments

Tags

  • exe
  • Formbook
  • TNT

Details

  • Analysis ID:
    532859
  • API (Web) ID:
    900380
  • Analysis Started:
    2021-12-02 18:56:47 +01:00
  • Analysis Finished:
    2021-12-02 19:10:41 +01:00
  • MD5:
    f943d9ee79559042bfff9b4e55270cfa
  • SHA1:
    7dca5c03f55ab6cbebd6bb3a8203d5c1d7516567
  • SHA256:
    2c26343342361efe4ada7dd077f832792eb77f184ec9a6c5b8c3a8ad35dd5aaa
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
malicious
Score: 100
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious
Score: 21/45
malicious

IPs

IP Country Detection
119.18.54.99
India
51.255.30.106
France
209.17.116.163
United States
Click to see the 1 hidden entries
34.102.136.180
United States

Domains

Name IP Detection
metronixmedical.com
119.18.54.99
cortepuroiberico.com
51.255.30.106
www.specialtyplastics.online
209.17.116.163
Click to see the 11 hidden entries
projectcentered.com
158.69.116.156
www.pirosconsulting.com
0.0.0.0
www.metronixmedical.com
0.0.0.0
www.pentagonpublishers.com
0.0.0.0
www.floridanratraining.com
0.0.0.0
www.viavelleiloes.online
0.0.0.0
www.cortepuroiberico.com
0.0.0.0
www.coached.info
0.0.0.0
www.projectcentered.com
0.0.0.0
www.functionalsoft.com
74.208.236.210
coached.info
34.102.136.180

URLs

Name Detection
http://www.cortepuroiberico.com/how6/?iN9tFB=6MRiWtHRwAFwDvhVcJAGZD0p4fLcIEcyVDy1Zth0WcmsI64tqWfeZe6Y2j9BcQs7bzR6A9198A==&4h=7n_DRJGxnRd
http://www.metronixmedical.com/how6/?iN9tFB=eO7AK5UTSuqTcoXAE4JKPt5tOBv6nnmPk0M2G0ISpIO4jWwGwHlgDwMnGXB5SfKol3UegXCZpg==&4h=7n_DRJGxnRd
www.floridanratraining.com/how6/
Click to see the 66 hidden entries
http://www.specialtyplastics.online/how6/?iN9tFB=xCGPRvAkK+xY+IPwAFenqNjQ2EZcc1A/OJpQ1mtXoxRJ135kHr2e9wYqnwHz38WooRcfQb4d5g==&4h=7n_DRJGxnRd
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
http://www.sakkal.com
http://www.fontbureau.com=
http://www.fontbureau.com/designerss
http://www.autoitscript.com/autoit3/J
http://www.apache.org/licenses/LICENSE-2.0
http://www.zhongyicts.com.cn
http://www.fontbureau.com
http://www.fontbureau.comcomo?
http://www.jiyu-kobo.co.jp/M
http://www.jiyu-kobo.co.jp/F
http://www.jiyu-kobo.co.jp/jp/
http://www.urwpp.deDPlease
http://www.urwpp.de
http://www.fontbureau.comd
http://www.fonts.comX
http://www.carterandcone.coml
http://www.fontbureau.com/designers/cabarga.htmlN
http://www.founder.com.cn/cn
http://www.fontbureau.com/designers/frere-jones.html
http://www.monotype.
http://www.jiyu-kobo.co.jp/.comp
http://www.tiro.comU
http://www.jiyu-kobo.co.jp/
http://www.urwpp.der
http://www.fontbureau.como
http://www.zhongyicts.com.cno.
http://www.fontbureau.com/designers8
http://www.fontbureau.comals
http://www.tiro.comic
http://www.fontbureau.com/designers/
http://www.fontbureau.comitud
http://www.zhongyicts.com.cn9
http://www.typography.netD
http://www.sajatypeworks.com
http://www.founder.com.cn/cnG
http://www.goodfont.co.kr
http://www.founder.c
http://www.fontbureau.com/designers
http://www.tiro.com
http://www.jiyu-kobo.co.jp/soft
http://www.founder.com.cn/cn/cThe
http://www.founder.com.cn/cnar
http://www.coached.info/how6/?iN9tFB=ViiEyPWfYSojbIItq3CvR44gsAi5K3j61FSCtvXBJNhPIgkqJAzuFuyRGTnTAJ9C7DX1GVbTZg==&4h=7n_DRJGxnRd
http://www.sajatypeworks.comus4
http://www.fontbureau.com/designers?
http://www.founder.com.cn/cn/bThe
http://www.fontbureau.com/designers/?
http://www.fontbureau.comI.TTF
http://www.founder.com.cn/cnaX
http://www.galapagosdesign.com/staff/dennis.htm
http://fontfabrik.com
http://fontfabrik.comx
http://www.jiyu-kobo.co.jp/slnt
http://www.urwpp.de2
http://www.fontbureau.com/
http://www.galapagosdesign.com/DPlease
http://www.jiyu-kobo.co.jp/Y0
http://www.fontbureau.comF(
http://www.founder.com.cn/cna
http://www.jiyu-kobo.co.jp/(
http://www.fonts.com
http://www.sandoll.co.kr
http://www.sajatypeworks.coma
http://www.fontbureau.com/designersG

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\TNT Documents.exe.log
ASCII text, with CRLF line terminators
#