97f21606...e8f4

VTI SCORE: 100/100

Dynamic Analysis Report

Classification:

Ransomware

Dropper

Threat Names:

Generic.Ransom.AIT.Ouroboros.C50292DF

Mal/Generic-S

bjqwuj.exe

Windows Exe (x86-32)

Created at 2020-07-24T13:23:00

Remarks (1/1)

Auto Reboot Triggered (0x02000004): The operating system was rebooted during the analysis because the sample installed a startup script, task or application for persistence.

General

Total Sent: 10.97 KB

Total Received: 65.87 KB

2 ports: 80 , 443

5 contacted IP addresses

0 URLs extracted

0 files downloaded

0 malicious hosts detected

DNS

1 DNS requests for 1 domains

1 nameserver contacted

0 total requests returned errors

HTTP/S

2 URLs contacted, 2 servers

8 sessions, sending 7.78 KB, receiving 59.20 KB

Function Logfile

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".

Remarks (1/1)

General

DNS

HTTP/S

Before

After