top title background image
flash

Original Doc Ref SN02853801324189923.exe

Status: finished
Submission Time: 2021-12-20 14:21:09 +01:00
Malicious
Trojan
Spyware
Evader
GuLoader FormBook

Comments

Tags

  • exe
  • guloader
  • xloader

Details

  • Analysis ID:
    542742
  • API (Web) ID:
    910264
  • Analysis Started:
    2021-12-20 14:21:10 +01:00
  • Analysis Finished:
    2021-12-20 14:32:47 +01:00
  • MD5:
    2b40b86c870ab6b0e9b08f26bd231e1a
  • SHA1:
    78a6fc51761c25fe571fec37ca4beaa13d7b5d48
  • SHA256:
    6c9c9bd77d704ca8c48a0125289e0e15e75f62f09d40ffad58a24bd96c3a57c0
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
malicious
Score: 100
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious
Score: 22/68

IPs

IP Country Detection
172.217.168.46
United States
172.217.168.1
United States

Domains

Name IP Detection
drive.google.com
172.217.168.46
googlehosted.l.googleusercontent.com
172.217.168.1
doc-10-80-docs.googleusercontent.com
0.0.0.0

URLs

Name Detection
www.thesocialmediacreator.com/i638/
https://doc-10-80-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/v1hb64q8i4krmmckqtjah3e0j55ac599/1640006700000/05208698352720309252/*/1vqWz_R4BQMLYr0EwMvVJ53NsyRGjMpKl?e=download
http://www.autoitscript.com/autoit3/J
Click to see the 5 hidden entries
https://doc-10-80-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/v1hb64q8
https://doc-10-80-docs.googleusercontent.com/
https://doc-10-80-docs.googleusercontent.com/g
https://doc-10-80-docs.googleusercontent.com/z
https://csp.withgoogle.com/csp/report-to/gse_l9ocaq

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Temp\IXP000.TMP\Semiha.exe
PE32 executable (GUI) Intel 80386, for MS Windows
#