VTI SCORE: 100/100
Dynamic Analysis Report |
Classification: Ransomware, Downloader, Trojan |
LS_APPDATA744de46e-2913-4f69-a0ea-d12dff2a5c90SAMPLE.exe
Windows Exe (x86-32)
Created at 2019-07-19T06:56:00
Remarks (2/3)
(0x200000e): The overall sleep time of all monitored processes was truncated from "40 seconds" to "10 seconds" to reveal dormant functionality.
(0x200003a): 2 tasks were rescheduled ahead of time to reveal dormant functionality.
Indicators
File (513)
»
Registry (14)
»
Mutex (1)
»
Mutex Name | Operations |
---|---|
{1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} | Access |
Domain (2)
»
Domain | Sources |
---|---|
api.2ip.ua | Function Log |
bruze2.ug | PCAP, Function Log |
URL (9)
»
IP (2)
»
IP | Protocols | Sources |
---|---|---|
77.123.139.189 | HTTP, TCP | Function Log, PCAP |
47.252.0.194 | HTTP, TCP | PCAP, Function Log |