05d242bbea10317c3c0ca92e28bd82df File Analysis Results

Metadata

APTNotes
Cyber threat intelligence reports associated with 05d242bbea10317c3c0ca92e28bd82df.

Domains
Domains the malware sample communicates with.

Domain	IP
connect.facebook.net	N/A
control-room.net	N/A
fonts.googleapis.com	N/A
fonts.gstatic.com	N/A
isrg.trustid.ocsp.identrust.com	N/A
maxcdn.bootstrapcdn.com	N/A
ocsp.int-x3.letsencrypt.org	N/A
ocsp.pki.goog	N/A
www.facebook.com	N/A

Hosts
Hosts the malware sample communicates with.

HTTP Requests
HTTP requests the malware sample makes.

Host	URL	User-Agent
185.119.173.184 (control-room.net)	/	Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko
N/A
N/A
N/A
172.217.7.163 (ocsp.pki.goog)	/gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjqTAc%2FHIGOD%2BaUx0%3D	2F 2A 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 [/*..User-Agent
N/A
N/A
N/A
172.217.7.163 (ocsp.pki.goog)	/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEFIYTNt4zV3zY5gRv8%2BD8WI%3D	Microsoft-CryptoAPI/6.1
N/A
N/A
N/A
172.217.7.163 (ocsp.pki.goog)	/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEFESokLDVPaUtkcrMnT4GJI%3D	Microsoft-CryptoAPI/6.1
N/A
N/A
N/A
172.217.7.163 (ocsp.pki.goog)	/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEBpNLBjUFLmji%2FUYotl0OMo%3D	Microsoft-CryptoAPI/6.1
N/A
N/A
N/A

AV Detections
AV detection names associated with the malware sample.

Mutants
Mutants created by the malware sample.

Registry keys
Registry keys created by the malware sample.

Comments
User comments about 05d242bbea10317c3c0ca92e28bd82df.

File: 05d242bbea10317c3c0ca92e28bd82df