|
|
5/5
|
File System
|
Encrypts content of user files
|
Ransomware
|
|
|
-
Encrypts the content of multiple user files. This is an indicator for ransomware.
|
|
|
3/5
|
Browser
|
Reads data related to saved browser credentials
|
-
|
|
|
-
Reads saved credentials for "Mozilla Firefox".
|
|
|
3/5
|
Persistence
|
Modifies startup configuration
|
-
|
|
|
-
Modifies the boot configuration by editing "c:\autoexec.bat".
|
|
|
2/5
|
Browser
|
Reads data related to browser cookies
|
-
|
|
|
-
Accesses Cookies for "Mozilla Firefox".
|
|
|
2/5
|
Anti Analysis
|
Resolves APIs dynamically to possibly evade static detection
|
-
|
|
|
-
Resolves an unusually high number of APIs.
|
|
|
1/5
|
Process
|
Creates system object
|
-
|
|
|
-
Creates mutex with name "hoJUpcvgHA".
|
|
|
1/5
|
File System
|
Creates an unusually large number of files
|
-
|
|
|
-
Creates an unusually large number of files.
|
|
|
1/5
|
Network
|
Connects to remote host
|
-
|
|
|
-
Outgoing UDP message to host "167.114.195.225:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.226:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.227:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.228:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.229:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.230:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.231:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.232:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.233:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.234:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.235:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.236:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.237:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.238:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.239:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.240:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.241:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.242:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.243:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.244:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.245:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.246:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.247:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.248:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.249:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.250:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.251:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.252:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.253:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.254:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.1:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.2:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.3:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.4:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.5:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.6:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.7:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.8:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.9:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.10:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.11:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.12:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.13:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.14:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.15:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.16:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.17:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.18:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.19:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.20:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.21:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.22:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.23:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.24:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.25:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.26:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.27:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.28:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.29:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.30:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.31:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.32:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.33:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.34:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.35:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.36:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.37:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.38:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.39:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.40:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.41:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.42:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.43:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.44:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.45:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.46:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.47:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.48:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.49:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.50:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.51:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.52:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.53:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.54:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.55:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.56:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.57:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.58:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.59:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.60:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.61:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.62:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.63:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.64:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.65:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.66:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.67:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.68:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.69:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.70:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.71:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.72:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.73:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.74:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.75:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.76:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.77:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.78:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.79:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.80:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.81:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.82:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.83:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.84:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.85:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.86:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.87:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.88:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.89:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.90:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.91:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.92:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.93:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.94:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.95:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.96:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.97:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.98:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.99:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.100:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.101:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.102:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.103:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.104:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.105:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.106:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.107:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.108:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.109:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.110:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.111:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.112:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.113:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.114:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.115:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.116:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.117:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.118:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.119:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.120:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.121:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.122:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.123:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.124:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.125:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.126:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.127:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.128:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.129:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.130:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.131:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.132:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.133:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.134:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.135:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.136:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.137:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.138:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.139:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.140:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.141:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.142:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.143:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.144:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.145:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.146:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.147:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.148:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.149:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.150:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.151:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.152:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.153:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.154:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.155:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.156:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.157:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.158:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.159:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.160:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.161:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.162:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.163:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.164:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.165:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.166:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.167:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.168:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.169:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.170:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.171:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.172:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.173:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.174:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.175:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.176:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.177:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.178:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.179:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.180:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.181:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.182:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.183:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.184:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.185:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.186:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.187:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.188:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.189:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.190:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.191:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.192:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.193:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.194:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.195:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.196:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.197:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.198:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.199:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.200:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.201:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.202:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.203:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.204:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.205:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.206:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.207:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.208:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.209:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.210:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.211:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.212:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.213:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.214:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.215:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.216:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.217:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.218:6901".
|
|
|
-
Outgoing UDP message to host "167.114.195.219:6901".
|
