=

We are hiring! Windows Kernel Developer (Remote), apply here!

dinhVFAbgo.exe

Status: finished

Submission Time: 2022-05-14 16:17:10 +02:00

Malicious

Evader

Comments

Tags

Details

Analysis ID:
626617
API (Web) ID:
994121
Analysis Started:

2022-05-14 16:17:10 +02:00
Analysis Finished:

2022-05-14 16:23:40 +02:00
MD5:
de3eafb5fa64237cb2d54949c432f19c
SHA1:
bbb3d8d70e1416241b469c3f58596986957ac39d
SHA256:
93d2edbc498f6f8689223bcb079143a97627efe9c1f7b23687a94a1eaf223d78
Technologies:

Engines
IOCs

Full Report	Management Report	IOC Report	Engine	Info	Verdict	Score	Reports
				System: Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211		56/100
						7/68

IPs

IP	Country	Detection
59.110.190.41	China

Domains

Name	IP	Detection
wtyjqpaszl-torjan.oss-cn-beijing.aliyuncs.com	59.110.190.41

URLs

Name	Detection
https://wtyjqpaszl-torjan.oss-cn-beijing.aliyuncs.com/TorJanFile/UpdateInit/Agent.exe
https://wtyjqpaszl-torjan.oss-cn-beijing.aliyuncs.com/TorJanFile/ProtectDriver/x64_Defender.dat
https://wtyjqpaszl-torjan.oss-cn-beijing.aliyuncs.com/TorJanFile/ProtectDriver/x64_FsFilter.dat
Click to see the 5 hidden entries
https://wtyjqpaszl-torjan.oss-cn-beijing.aliyuncs.com/TorJanFile/SHA128Driver/x64_Defender.dathttps:
https://wtyjqpaszl-torjan.oss-cn-beijing.aliyuncs.com/TorJanFile/SHA128Driver/x64_FsFilter.dat
https://wtyjqpaszl-torjan.oss-cn-beijing.aliyuncs.com/TorJanFile/UpdateInit/Update.ini
https://wtyjqpaszl-torjan.oss-cn-beijing.aliyuncs.com/TorJanFile/SHA128Driver/x64_Defender.dat
https://wtyjqpaszl-torjan.oss-cn-beijing.aliyuncs.com/TorJanFile/UpdateInit/Update.inihttps://wtyjqp