f92a631f...4a14 | Network
Try VMRay Analyzer
VTI SCORE: 100/100
Dynamic Analysis Report
Classification:
Ransomware
Dropper
Threat Names:
Generic.Ransom.Matrix.D1CDCF50
VBS.Heur.Laburrak.11.Gen
Trojan.GenericKD.40672878
...

UsersPetraAppDataLocalTempNWGUQsM6.exe

Windows Exe (x86-32)

Created at 2020-09-03T10:55:00

Remarks (1/1)

(0x0200000E): The overall sleep time of all monitored processes was truncated from "5 minutes" to "50 seconds" to reveal dormant functionality.

General

Total Sent: 1.95 KB
Total Received: 52.52 KB
1 ports: 80
4 contacted IP addresses
4 URLs extracted
0 files downloaded
1 malicious hosts detected

DNS

5 DNS requests for 3 domains
1 nameserver contacted
0 total requests returned errors

HTTP/S

4 URLs contacted, 2 servers
4 sessions, sending 1.95 KB, receiving 52.52 KB
Function Logfile
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Before

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
After

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Screenshot
Expand-Icon
Exit-Icon
icon_left
icon_left
image