File: 52f9d69b90dd59d5978bb3ddc0c75016
Metadata
| 9jsm3m1s68ri3thahv4c7yztp.docx | |
| docx | 15618 bytes |
| Analyzed on May 28 2017 08:38:39 | |
| 52f9d69b90dd59d5978bb3ddc0c75016 | |
| a26a3d38eee4f30b5625ab71e0416257b320e182 | |
| 5a63dff0ac0a1eb77a9c6e624062c44c003c7e46e02083463e329aa48c978915 | |
| 2400bde1290f975396076c9975650b4256f98c645e07a740fc8c5aa406a264be95618f65ce87ccaca1740351c6d37ea6e75d783034bc9b263007e3f622337646 | |
| N/A | |
| N/A | |
| N/A | |
APTNotes
Cyber threat intelligence reports associated with 52f9d69b90dd59d5978bb3ddc0c75016.
Cyber threat intelligence reports associated with 52f9d69b90dd59d5978bb3ddc0c75016.
Domains
Domains the malware sample communicates with.
Domains the malware sample communicates with.
| Domain | IP |
|---|---|
| magicclouddrive.com | 52.35.180.52 |
Hosts
Hosts the malware sample communicates with.
Hosts the malware sample communicates with.
HTTP Requests
HTTP requests the malware sample makes.
HTTP requests the malware sample makes.
| Host | URL | User-Agent |
|---|---|---|
| 52.35.180.52 (magicclouddrive.com) | /static/images/9jsm3m1s68ri3thahv4c7yztp/submit.aspx | Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; ms-office; MSOffice 14) |
| N/A | ||
| N/A | ||
| N/A |
AV Detections
AV detection names associated with the malware sample.
AV detection names associated with the malware sample.
Mutants
Mutants created by the malware sample.
Mutants created by the malware sample.
| "\Sessions\1\BaseNamedObjects\IESQMMUTEX_0_208" |
| "Local\10MU_ACBPIDS_S-1-5-5-0-61147" |
| "Local\c:!users!l4subtm!appdata!local!microsoft!windows!history!history.ie5!" |
| "Local\10MU_ACB10_S-1-5-5-0-61147" |
| "RasPbFile" |
| "Local\WininetConnectionMutex" |
| "Global\MTX_MSO_Formal1_S-1-5-21-4162757579-3804539371-4239455898-1000" |
| "Local\WininetStartupMutex" |
| "Local\ZoneAttributeCacheCounterMutex" |
| "Global\552FFA80-3393-423d-8671-7BA046BB5906" |
| "Local\c:!users!l4subtm!appdata!local!microsoft!windows!temporary internet files!content.ie5!" |
| "Global\MTX_MSO_AdHoc1_S-1-5-21-4162757579-3804539371-4239455898-1000" |
| "Local\c:!users!l4subtm!appdata!roaming!microsoft!windows!cookies!" |
| "Local\ZonesCounterMutex" |
| "Local\WininetProxyRegistryMutex" |
| "Local\ZonesLockedCacheCounterMutex" |
| "Local\ZonesCacheCounterMutex" |
| "\Sessions\1\BaseNamedObjects\Local\10MU_ACBPIDS_S-1-5-5-0-61147" |
| "\Sessions\1\BaseNamedObjects\Global\552FFA80-3393-423d-8671-7BA046BB5906" |
| "\Sessions\1\BaseNamedObjects\Local\10MU_ACB10_S-1-5-5-0-61147" |
Registry keys
Registry keys created by the malware sample.
Registry keys created by the malware sample.
Comments
User comments about 52f9d69b90dd59d5978bb3ddc0c75016.
User comments about 52f9d69b90dd59d5978bb3ddc0c75016.
