top title background image
flash

triage_dropped_file.exe

Status: finished
Submission Time: 2022-01-28 15:14:31 +01:00
Malicious
Trojan
Evader
FormBook

Comments

Tags

  • exe
  • formbook

Details

  • Analysis ID:
    562157
  • API (Web) ID:
    929679
  • Analysis Started:
    2022-01-28 15:15:49 +01:00
  • Analysis Finished:
    2022-01-28 15:28:37 +01:00
  • MD5:
    f6eaacd1b39028130602ee0892e67663
  • SHA1:
    12ba0b4e8c41ececa29814f9b64da351e5509fb0
  • SHA256:
    1e144fefc15a6a2643674f01b3324e29b5320d45a16a081e8aad8a969712cb9d
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
malicious
Score: 100
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious
Score: 35/67
malicious
Score: 8/37
malicious
Score: 19/27
malicious

IPs

IP Country Detection
188.114.96.7
European Union
104.21.22.47
United States

Domains

Name IP Detection
www.fengyat.club
188.114.96.7
www.inspectdecided.xyz
104.21.22.47
www.hstolchsjybyl.com
81.17.29.148

URLs

Name Detection
www.hstolchsjybyl.com/a83r/
http://www.fengyat.club/a83r/?k2MLx=CjCejP19lpOaTsMOx5tDhI8S8yyOisIWAU++//65IFIgHpMHnqLlfGYboARBAcbNtYvQ&v2=5jBLRl1pIZPlY
http://www.inspectdecided.xyz/a83r/?v2=5jBLRl1pIZPlY&k2MLx=ZSxafiwoPrw2VCRk9gX3wlOewDINgI1JCq9hgmGWZWQPOxIps9jFRiFeHjLrjNblu9Aw
Click to see the 27 hidden entries
http://www.founder.com.cn/cn/cThe
http://www.sakkal.com
http://www.zhongyicts.com.cn
http://www.urwpp.deDPlease
http://www.sandoll.co.kr
http://www.fonts.com
https://www.fengyat.club/a83r/?k2MLx=CjCejP19lpOaTsMOx5tDhI8S8yyOisIWAU
http://www.fontbureau.com/designers8
http://www.galapagosdesign.com/DPlease
http://www.jiyu-kobo.co.jp/
http://www.fontbureau.com/designers/frere-jones.html
http://www.founder.com.cn/cn
http://fontfabrik.com
http://www.galapagosdesign.com/staff/dennis.htm
http://www.apache.org/licenses/LICENSE-2.0
http://www.fontbureau.com/designers/cabarga.htmlN
http://www.typography.netD
http://www.sajatypeworks.com
http://www.carterandcone.coml
http://www.goodfont.co.kr
http://www.fontbureau.com/designers
http://www.tiro.com
http://www.fontbureau.com/designers?
http://www.founder.com.cn/cn/bThe
http://www.fontbureau.com/designers/?
http://www.fontbureau.com/designersG
http://www.fontbureau.com

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\triage_dropped_file.exe.log
ASCII text, with CRLF line terminators
#