c0ce6020...75aa | Network
Try VMRay Analyzer
VTI SCORE: 100/100
Dynamic Analysis Report
Classification:
Ransomware
Threat Names:
Djvu
STOP
Trojan.GenericKD.43348205
...

Remarks (2/2)

(0x02000004): The operating system was rebooted during the analysis because the sample installed a startup script, task or application for persistence.

(0x0200003A): A task was rescheduled ahead of time to reveal dormant functionality.

General

Total Sent: 1.97 KB
Total Received: 13.91 KB
2 ports: 80 , 443
2 contacted IP addresses
0 URLs extracted
1 files downloaded
1 malicious hosts detected

DNS

0 DNS requests for 0 domains
0 nameserver contacted
0 total requests returned errors

HTTP/S

2 URLs contacted, 2 servers
3 sessions, sending 1.97 KB, receiving 13.91 KB
Function Logfile
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Before

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
After

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Screenshot
Expand-Icon
Exit-Icon
icon_left
icon_left
image