VTI SCORE: 100/100
Dynamic Analysis Report |
Classification: Spyware, Ransomware, Downloader, Dropper, Trojan |
CUsersHPAppDataLocal03562a36-8263-4270-b004-3b05eb1758e3E285.tmp.exe
Windows Exe (x86-32)
Created at 2019-07-13T15:56:00
Remarks (2/3)
(0x200000e): The overall sleep time of all monitored processes was truncated from "30 seconds" to "10 seconds" to reveal dormant functionality.
(0x200003a): 2 tasks were rescheduled ahead of time to reveal dormant functionality.
Indicators
File (630)
»
Registry (67)
»
Mutex (2)
»
Mutex Name | Operations |
---|---|
A6CF1546B-343A2EC6-63D8DC88-FF4A8C5D-82A11F69 | Access |
{1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} | Access |
Domain (3)
»
Domain | Sources |
---|---|
api.2ip.ua | Function Log |
bronze1.hk | PCAP, Function Log |
bronze2.hk | PCAP, Function Log |
URL (10)
»
IP (5)
»