VTI SCORE: 100/100
Dynamic Analysis Report |
Classification: |
Ransomware
Downloader
Trojan
|
Threat Names: |
Gen:Variant.Midie.69961
Trojan.GenericKD.31534187
Trojan.AgentWDCR.SVC
...
|
243E.TMP.EXE.DEL105265203.DEL105731312.exe
Windows Exe (x86-32)
Created at 2020-01-29T14:57:00
Remarks (2/3)
(0x0200000E): The overall sleep time of all monitored processes was truncated from "10 minutes, 15 seconds" to "10 seconds" to reveal dormant functionality.
(0x0200003A): 2 tasks were rescheduled ahead of time to reveal dormant functionality.
Indicators
File (262)
»
Registry (4)
»
Mutex (1)
»
Mutex Name | Operations |
---|---|
{1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} | Access |
Domain (2)
»
Domain | Sources | Severity |
---|---|---|
ring2.ug | Function Log, PCAP |
Blacklisted
|
api.2ip.ua | Function Log |
Unknown
|
URL (8)
»
IP (2)
»
IP | Protocols | Sources |
---|---|---|
5.189.237.220 | TCP, HTTP | Function Log, PCAP |
77.123.139.189 | TCP, HTTPS | Function Log, PCAP |