e1a3d8c2...7869 | Network
Try VMRay Analyzer
VTI SCORE: 100/100
Dynamic Analysis Report
Classification:
Downloader
Trojan
Spyware
Threat Names:
Gen:Variant.Ser.Razy.7042
Gen:Variant.Babar.17561
Mal/HTMLGen-A
...

Remarks (2/2)

(0x0200000E): The overall sleep time of all monitored processes was truncated from "7 minutes, 30 seconds" to "3 minutes, 10 seconds" to reveal dormant functionality.

(0x0200003A): A task was rescheduled ahead of time to reveal dormant functionality.

General

Total Sent: 745.63 KB
Total Received: 3.10 MB
6 ports: 53 , 80 , 443 , 445 , 447 , 8082
261 contacted IP addresses
0 URLs extracted
1 files downloaded
1 malicious hosts detected

DNS

3 DNS requests for 2 domains
1 nameserver contacted
0 total requests returned errors

HTTP/S

40 URLs contacted, 6 servers
9 sessions, sending 85.10 KB, receiving 3.08 MB
Function Logfile
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Before

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
After

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Screenshot
Expand-Icon
Exit-Icon
icon_left
icon_left
image