VTI SCORE: 100/100
Dynamic Analysis Report |
Classification: Ransomware, Downloader, Trojan |
penelop0611_2019-11-06_10-30.exe_.exe
Windows Exe (x86-32)
Created at 2019-11-07T12:51:00
Remarks (2/3)
(0x200000e): The overall sleep time of all monitored processes was truncated from "10 minutes, 15 seconds" to "10 seconds" to reveal dormant functionality.
(0x200003a): 2 tasks were rescheduled ahead of time to reveal dormant functionality.
Indicators
File (589)
»
Registry (45)
»
Mutex (2)
»
Domain (3)
»
Domain | Sources |
---|---|
ring1.ug | PCAP, Function Log |
api.2ip.ua | Function Log |
acrelop.com | Function Log |
URL (10)
»
IP (2)
»
IP | Protocols | Sources |
---|---|---|
5.101.51.166 | HTTP, TCP | PCAP, Function Log |
77.123.139.189 | HTTPS, TCP | Function Log, PCAP |