=
We are hiring! Windows Kernel Developer (Remote), apply here!
flash

OojqjHGE0W.exe

Status: finished
Submission Time: 2022-05-19 14:34:43 +02:00
Malicious
Trojan
Evader
Ursnif

Comments

Tags

  • exe
  • signed

Details

  • Analysis ID:
    630152
  • API (Web) ID:
    997660
  • Analysis Started:
    2022-05-19 14:38:37 +02:00
  • Analysis Finished:
    2022-05-19 14:46:25 +02:00
  • MD5:
    4ed3fa33609a51baf209a5954bef6633
  • SHA1:
    aff82f0554f18c780561d6b8b1ca5a1001e42512
  • SHA256:
    988177454fe3a5ba8fcdf7f3124e2c56f312b776542d3763540c254df6fe6f76
  • Technologies:
Full Report Management Report IOC Report Engine Info Verdict Score Reports

malicious

System: Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211

malicious
100/100

malicious
19/41

IPs

IP Country Detection
13.107.40.203
United States

Domains

Name IP Detection
a-0003.fbs2-a-msedge.net
13.107.40.203
anm.msn.com
0.0.0.0
www.msn.com
0.0.0.0

URLs

Name Detection
https://mem.gfx.ms/meversion/?partner=msn&market=de-ch"
https://www.msn.com/de-ch/news/other/weniger-verbindungen-zwischen-z%c3%bcrich-und-bern-daf%c3%bcr-m
https://www.msn.com/de-ch/news/other/fremdes-b%c3%bcsi-gef%c3%bcttert-frau-soll-1250-franken-strafe-
Click to see the 17 hidden entries
https://outlook.com/
https://www.msn.com/de-ch/shopping
http://www.msn.com/de-ch/
http://ogp.me/ns#
https://i.geistm.com/l/HFCH_DTS_LP?bcid=61c4707a19d27603f32a58ba&bhid=6203eb0e7db0ad17f44b22d8&a
https://browser.events.data.msn.com/OneCollector/1.0/t.js?qsp=true&anoncknm=%22%22&name=%22M
https://cdn.hoergeraete.hoeren-heute.ch/horizon_reveal/?act=ACT0000040013ACT&utm_source=mcrs&amp
https://www.msn.com/de-ch/sport/other/der-fcz-verabschiedet-sich-von-doumbia-und-ceesay/ar-AAXsezM?o
https://www.msn.com/de-ch/news/other/stadtrat-handelt-in-z%c3%bcrich-west-mehr-preisg%c3%bcnstige-wo
https://deff.nelreports.net/api/report?cat=msn
https://www.msn.com/de-ch/news/other/autofahrer-38-rast-mit-94-km-h-durch-30er-zone/ar-AAXsnwd?ocid=
http://ogp.me/ns/fb#
https://www.msn.com/de-ch/news/other/olivia-und-noah-sind-die-beliebtesten-baby-vornamen-in-z%c3%bcr
https://www.msn.com/de-ch/news/other/z%c3%bcrcher-kantonsrat-pr%c3%bcft-nach-igelkot-vorfall-sicherh
http://www.msn.com/de-ch
https://i.geistm.com/l/HFCH_DTS_LP?bcid=61c4707a19d27603f32a58b8&bhid=62470ee6adad76040858398f&a
http://www.msn.com/