Trickbot 2019-05-16 | Network
Try VMRay Analyzer
VTI SCORE: 100/100
Dynamic Analysis Report
Classification: Keylogger, Spyware, Backdoor, Trojan

Remarks (2/3)

(0x200000e): The overall sleep time of all monitored processes was truncated from "21 hours, 36 minutes, 10 seconds" to "1 minute, 34 seconds" to reveal dormant functionality.

(0x200003a): A task was rescheduled ahead of time to reveal dormant functionality.

General

Total Sent: 100.07 KB
Total Received: 2.32 MB
6 ports: 0 , 80 , 443 , 447 , 448 , 8082
11 contacted IP addresses
0 files downloaded
1 malicious hosts detected
0 URLs extracted from embedded links

DNS

3 DNS requests for 3 domains
1 nameserver contaced
0 total requests returned errors

HTTP/S

76 URLs contacted, 8 servers
20 sessions, sending 89.08 KB, receiving 2.32 MB
Function Logfile
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Before

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
After

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Screenshot
Expand-Icon
Exit-Icon
icon_left
icon_left
image