=

We are hiring! Windows Kernel Developer (Remote), apply here!

SdEkI4IDqd.exe

Status: finished

Submission Time: 2022-01-25 13:15:48 +01:00

Malicious

Trojan

Evader

GuLoader

Comments

Tags

Details

Analysis ID:
559536
API (Web) ID:
927059
Analysis Started:

2022-01-25 13:18:52 +01:00
Analysis Finished:

2022-01-25 13:35:07 +01:00
MD5:
003a7c37f9c06d75aaaa6f9b25dc3c41
SHA1:
a847ef8c72d26731963b189caff925a8a757d563
SHA256:
4f29b22b6b787babc2f984172f8ae0e3999b7621aeb6775ce023f2ef5db0b2e7
Technologies:

Engines
IOCs

Full Report	Management Report	IOC Report	Engine	Info	Verdict	Score	Reports
				System: Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211		72/100
				System: Windows 10 64 bit 20H2 Native physical Machine for testing VM-aware malware (Office 2019, IE 11, Chrome 93, Firefox 91, Adobe Reader DC 21, Java 8 Update 301 Run Condition: Suspected Instruction Hammering		68/100
						5/43

URLs

Name	Detection
https://dariamob.ro/wed/eee_XScUCMEVL47.bin
http://nsis.sf.net/NSIS_ErrorError

Dropped files

Name	File Type	Hashes	Detection
C:\Users\user\AppData\Local\Temp\OVERROMANTICIZED.dat	DOS executable (COM)	#
C:\Users\user\AppData\Local\Temp\gamer.txt	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Temp\nsv7EA4.tmp\System.dll	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows	#