d31742a3...fee2

d31742a3...fee2 | VMRay Analyzer Report

Try VMRay Analyzer

VTI SCORE: 100/100

Dynamic Analysis Report

Classification:

Worm

Threat Names:

Olympic Destroyer

Generic.Ransom.Small.A8C082EF

Mal/Generic-S

ssvchost.exe

Windows Exe (x86-32)

Created at 2020-02-20T00:39:00

Remarks (1/1)

Auto Reboot Triggered (0x02000007): The operating system was rebooted during the analysis because the sample modified the master boot record (MBR).

Function Logfile

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".

Before

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".

After

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".

Screenshot