top title background image
flash

j82lgS5kgk.exe

Status: finished
Submission Time: 2022-01-15 02:46:14 +01:00
Malicious

Comments

Tags

  • 32
  • exe
  • trojan

Details

  • Analysis ID:
    553495
  • API (Web) ID:
    921017
  • Analysis Started:
    2022-01-15 02:46:15 +01:00
  • Analysis Finished:
    2022-01-15 02:52:05 +01:00
  • MD5:
    ae6cdc2be9207880528e784fc54501ed
  • SHA1:
    b4aff64bb1f0fee5d5c47c5f1275351c758b423a
  • SHA256:
    e71a997a58a54db0a879969fa1c3de5193b090bc59f3468f408785dbc0d9c7ac
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 48
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious
Score: 9/67
malicious
Score: 7/43

IPs

IP Country Detection
217.21.76.148
United Kingdom

Domains

Name IP Detection
sincheats.com
217.21.76.148

URLs

Name Detection
https://sincheats.com/gas/PS4SAVEWIZARD.dll
https://sincheats.com/gas/PS4SAVEWIZARD.exeKH
https://sincheats.com/gas/PS4SAVEWIZARD.exe
Click to see the 8 hidden entries
http://upx.sf.net
https://sincheats.com/gas/PS4SAVEWIZARD.dllWhttps://sincheats.com/gas/PS4SAVEWIZARD.exe
https://sincheats.com/gas/PS4SAVEWIZARD.dll3
https://sincheats.com/gas/PS4SAVEWIZARD.exe.manifest
https://sincheats.com/gas/PS4SAVEWIZARD.dll-oC:
https://sincheats.com/gas/PS4SAVEWIZARD.exe.manifest-oC:
https://sincheats.com/gas/PS4SAVEWIZARD.dllurlrc
https://sincheats.com/gas/PS4SAVEWIZARD.exe-oC:

Dropped files

Name File Type Hashes Detection
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_j82lgs5kgk.exe_d42a328ddfe8a7f19158220e406261856f9152_00000000_147602d8\Report.wer
Little-endian UTF-16 Unicode text, with CRLF line terminators
#
C:\ProgramData\Microsoft\Windows\WER\Temp\WERF404.tmp.WERInternalMetadata.xml
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
#
C:\ProgramData\Microsoft\Windows\WER\Temp\WERF5BA.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
#
Click to see the 2 hidden entries
C:\Windows\appcompat\Programs\Amcache.hve
MS Windows registry file, NT/2000 or above
#
\Device\ConDrv
ASCII text, with CR, LF line terminators
#