File: dbeda80756f7638f1bf44357a01a1c26
Metadata
| Planilha_093472843_Mes_Fevereiro.wsf | |
| HTML document, ASCII text, with CRLF line terminators | 1857 bytes |
| Analyzed on February 23 2017 18:44:16 | |
| dbeda80756f7638f1bf44357a01a1c26 | |
| 7baeb2f6aed0816eb383115e9d31c4d3b205c40f | |
| 58b336fc55f0d48f53b15a8e7666415d600817b05d73e4e9503e19e97cbad8cc | |
| 7a5cc36c382283b4a8e294083bdf44fe868958f1523b1e1c094ba94d5821c3071807c3b68e7aefd42073b213259b917162387afe37ddf31db529bb481eff0b90 | |
| N/A | |
| N/A | |
| N/A | |
APTNotes
Cyber threat intelligence reports associated with dbeda80756f7638f1bf44357a01a1c26.
Cyber threat intelligence reports associated with dbeda80756f7638f1bf44357a01a1c26.
Domains
Domains the malware sample communicates with.
Domains the malware sample communicates with.
Hosts
Hosts the malware sample communicates with.
Hosts the malware sample communicates with.
HTTP Requests
HTTP requests the malware sample makes.
HTTP requests the malware sample makes.
| Host | URL | User-Agent |
|---|---|---|
| 79.137.65.212 | /processsysytemexplorer64.zip | Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) |
| N/A | ||
| N/A | ||
| N/A |
AV Detections
AV detection names associated with the malware sample.
AV detection names associated with the malware sample.
Mutants
Mutants created by the malware sample.
Mutants created by the malware sample.
| "\Sessions\1\BaseNamedObjects\Local\_!MSFTHISTORY!_" |
| "\Sessions\1\BaseNamedObjects\Local\c:!users!5dquzme!appdata!roaming!microsoft!windows!cookies!" |
| "\Sessions\1\BaseNamedObjects\Local\c:!users!5dquzme!appdata!local!microsoft!windows!history!history.ie5!" |
| "\Sessions\1\BaseNamedObjects\Local\WininetStartupMutex" |
| "\Sessions\1\BaseNamedObjects\Local\WininetConnectionMutex" |
| "\Sessions\1\BaseNamedObjects\Local\WininetProxyRegistryMutex" |
| "\Sessions\1\BaseNamedObjects\Local\!IETld!Mutex" |
| "\Sessions\1\BaseNamedObjects\Local\c:!users!5dquzme!appdata!roaming!microsoft!windows!ietldcache!" |
| "\Sessions\1\BaseNamedObjects\RasPbFile" |
| "\Sessions\1\BaseNamedObjects\Local\c:!users!5dquzme!appdata!local!microsoft!windows!temporary internet files!content.ie5!" |
| "\Sessions\1\BaseNamedObjects\Local\ZonesCounterMutex" |
| "\Sessions\1\BaseNamedObjects\Local\ZoneAttributeCacheCounterMutex" |
| "\Sessions\1\BaseNamedObjects\Local\ZonesCacheCounterMutex" |
| "\Sessions\1\BaseNamedObjects\Local\ZonesLockedCacheCounterMutex" |
| "\Sessions\1\BaseNamedObjects\IESQMMUTEX_0_208" |
| "\Sessions\1\BaseNamedObjects\A64BF0173DF70C39" |
Registry keys
Registry keys created by the malware sample.
Registry keys created by the malware sample.
Comments
User comments about dbeda80756f7638f1bf44357a01a1c26.
User comments about dbeda80756f7638f1bf44357a01a1c26.
