93986d4e...6dc4 | VTI
Try VMRay Analyzer
VTI SCORE: 91/100
Dynamic Analysis Report
Classification: Dropper, Spyware, Downloader

93986d4e88a8c12ff6844cb508223379756d44f9f8762e3298ef5a5c657a6dc4 (SHA256)

GlobalHack[RUEUNAVN][17.02.2019] .exe

Windows Exe (x86-32)

Created at 2019-02-17 13:35:00

Severity Category Operation Classification
4/5
Information Stealing Reads application data Spyware
1/5
Information Stealing Reads system data Spyware
1/5
Process Creates system object -
  • Creates mutex with name "427a1946-e0ff-4097-8c9e-ca2c1e22780b{6bb4f034-2706-11e5-9bbe-806e6f6e6963}".
1/5
Anti Analysis Resolves APIs dynamically -
1/5
Network Downloads data Downloader
1/5
Network Connects to HTTP server -
1/5
PE Drops PE file Dropper
Function Logfile
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Before

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
After

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Screenshot
Expand-Icon
Exit-Icon
icon_left
icon_left
image