Absonkaine.exe
Created at 2019-04-17T20:27:00
VMRay Threat Indicators (10 rules, 41 matches)
Severity | Category | Operation | Count | Classification | |
---|---|---|---|---|---|
5/5
|
File System | Encrypts content of user files | 1 | Ransomware | |
|
|||||
5/5
|
Local AV | Malicious content was detected by heuristic scan | 1 | - | |
|
|||||
4/5
|
OS | Modifies Windows automatic backups | 1 | - | |
|
|||||
2/5
|
Information Stealing | Reads sensitive browser data | 1 | - | |
|
|||||
1/5
|
Process | Creates system object | 2 | - | |
|
|||||
|
|||||
1/5
|
Process | Creates process with hidden window | 2 | - | |
|
|||||
|
|||||
1/5
|
Persistence | Installs system startup script or application | 5 | - | |
|
|||||
|
|||||
|
|||||
|
|||||
|
|||||
1/5
|
Masquerade | Changes folder appearance | 23 | - | |
|
|||||
|
|||||
|
|||||
|
|||||
|
|||||
|
|||||
|
|||||
|
|||||
|
|||||
|
|||||
|
|||||
|
|||||
|
|||||
|
|||||
|
|||||
|
|||||
|
|||||
|
|||||
|
|||||
|
|||||
|
|||||
|
|||||
|
|||||
1/5
|
Process | Reads from memory of another process | 4 | - | |
|
|||||
|
|||||
|
|||||
|
|||||
1/5
|
File System | Creates an unusually large number of files | 1 | - | |
|
Screenshots
Monitored Processes
Sample Information
Analysis Information
Creation Time | 2019-04-17 22:27 (UTC+2) |
Analysis Duration | 00:04:50 |
Number of Monitored Processes | 17 |
Execution Successful | |
Reputation Enabled | |
WHOIS Enabled | |
Local AV Enabled | |
YARA Enabled | |
Number of AV Matches | 1 |
Number of YARA Matches | 0 |
Termination Reason | Timeout |
Tags |