比较分析...

分析任务

分析类型 虚拟机标签 开始时间 结束时间 持续时间
文件 (Windows) win7-sp1-x64-shaapp03-1 2021-04-09 01:31:39 2021-04-09 01:32:13 34 秒

魔盾分数

2.9

可疑的

文件详细信息

文件名 4KVideoDownloaderPortable.exe
文件大小 283244 字节
文件类型 PE32 executable (GUI) Intel 80386, for MS Windows
MD5 e59529e71ef88d63ec90164375a49034
SHA1 b831e17519c738b1f1055dd0a425c5015ed44192
SHA256 64c50e73711b7c9aafb370032a3bf852bda91dcc8e0319b2306bac59aa4b7c89
SHA512 8bc1b6d4b9c9d8ad059f86b992c75505dbf610b0d17c272700811739c75e21a66f677f0cf6e7085c0946e5e0a5ec4dac8a1bcd936ec57c6718065b7aca33f569
CRC32 C999070F
Ssdeep 3072:4weqOYEUXPnk94MVIfdUjlwcnsjnF6QM5Dk+5sWt99Q:5EUXvPfguDjnF6QMFk+WWtbQ
Yara 登录查看Yara规则
样本下载 提交漏报
登录查看威胁特征

运行截图

访问主机纪录 (可点击查询WPING实时安全评级)

无主机纪录.

域名解析 (可点击查询WPING实时安全评级)

域名 安全评级 响应
acroipm.adobe.com CNAME acroipm.adobe.com.edgesuite.net
CNAME a1983.dscd.akamai.net
A 23.196.47.49
A 23.196.47.9

摘要

登录查看详细行为信息

PE 信息

初始地址 0x00400000
入口地址 0x004039e3
声明校验值 0x00000000
实际校验值 0x0004b31f
最低操作系统版本要求 5.0
编译时间 2012-02-25 03:19:59
载入哈希 32f3282581436269b3a75b6675fe3e08
图标
图标精确哈希值 8aeffbfc40c671fc21b1fa02e89a7337
图标相似性哈希值 68109644fa27bb0ea301f71016f42d4a

版本信息

LegalCopyright
InternalName
FileVersion
CompanyName
LegalTrademarks
Comments
ProductName
ProductVersion
FileDescription
OriginalFilename
Translation

PE 数据组成

名称 虚拟地址 虚拟大小 原始数据大小 特征 熵(Entropy)
.text 0x00001000 0x00006f10 0x00007000 IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 6.50
.rdata 0x00008000 0x00002a92 0x00002c00 IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 4.39
.data 0x0000b000 0x00067ebc 0x00000200 IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 1.47
.ndata 0x00073000 0x00141000 0x00000000 IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 0.00
.rsrc 0x001b4000 0x00027d10 0x00027e00 IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 5.21
.reloc 0x001dc000 0x00000f8a 0x00001000 IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 2.42

覆盖

偏移量 0x00032000
大小 0x0001326c

资源

名称 偏移量 大小 语言 子语言 熵(Entropy) 文件类型
RT_ICON 0x001da418 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US 4.30 GLS_BINARY_LSB_FIRST
RT_ICON 0x001da418 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US 4.30 GLS_BINARY_LSB_FIRST
RT_ICON 0x001da418 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US 4.30 GLS_BINARY_LSB_FIRST
RT_ICON 0x001da418 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US 4.30 GLS_BINARY_LSB_FIRST
RT_ICON 0x001da418 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US 4.30 GLS_BINARY_LSB_FIRST
RT_ICON 0x001da418 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US 4.30 GLS_BINARY_LSB_FIRST
RT_ICON 0x001da418 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US 4.30 GLS_BINARY_LSB_FIRST
RT_ICON 0x001da418 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US 4.30 GLS_BINARY_LSB_FIRST
RT_DIALOG 0x001db370 0x00000050 LANG_ENGLISH SUBLANG_ENGLISH_US 2.63 data
RT_DIALOG 0x001db370 0x00000050 LANG_ENGLISH SUBLANG_ENGLISH_US 2.63 data
RT_DIALOG 0x001db370 0x00000050 LANG_ENGLISH SUBLANG_ENGLISH_US 2.63 data
RT_DIALOG 0x001db370 0x00000050 LANG_ENGLISH SUBLANG_ENGLISH_US 2.63 data
RT_DIALOG 0x001db370 0x00000050 LANG_ENGLISH SUBLANG_ENGLISH_US 2.63 data
RT_DIALOG 0x001db370 0x00000050 LANG_ENGLISH SUBLANG_ENGLISH_US 2.63 data
RT_DIALOG 0x001db370 0x00000050 LANG_ENGLISH SUBLANG_ENGLISH_US 2.63 data
RT_DIALOG 0x001db370 0x00000050 LANG_ENGLISH SUBLANG_ENGLISH_US 2.63 data
RT_DIALOG 0x001db370 0x00000050 LANG_ENGLISH SUBLANG_ENGLISH_US 2.63 data
RT_DIALOG 0x001db370 0x00000050 LANG_ENGLISH SUBLANG_ENGLISH_US 2.63 data
RT_DIALOG 0x001db370 0x00000050 LANG_ENGLISH SUBLANG_ENGLISH_US 2.63 data
RT_DIALOG 0x001db370 0x00000050 LANG_ENGLISH SUBLANG_ENGLISH_US 2.63 data
RT_DIALOG 0x001db370 0x00000050 LANG_ENGLISH SUBLANG_ENGLISH_US 2.63 data
RT_DIALOG 0x001db370 0x00000050 LANG_ENGLISH SUBLANG_ENGLISH_US 2.63 data
RT_DIALOG 0x001db370 0x00000050 LANG_ENGLISH SUBLANG_ENGLISH_US 2.63 data
RT_GROUP_ICON 0x001db3c0 0x00000076 LANG_ENGLISH SUBLANG_ENGLISH_US 2.97 MS Windows icon resource - 8 icons, 256x256
RT_VERSION 0x001db438 0x00000514 LANG_NEUTRAL SUBLANG_NEUTRAL 3.42 data
RT_MANIFEST 0x001db950 0x000003bd LANG_ENGLISH SUBLANG_ENGLISH_US 5.23 XML 1.0 document, ASCII text, with very long lines, with no line terminators

导入

库: KERNEL32.dll:
• 0x408060 SetFileTime
• 0x408064 CompareFileTime
• 0x408068 SearchPathW
• 0x40806c GetShortPathNameW
• 0x408070 GetFullPathNameW
• 0x408074 MoveFileW
• 0x40807c GetFileAttributesW
• 0x408080 GetLastError
• 0x408084 CreateDirectoryW
• 0x408088 SetFileAttributesW
• 0x40808c Sleep
• 0x408090 GetTickCount
• 0x408094 CreateFileW
• 0x408098 GetFileSize
• 0x40809c GetModuleFileNameW
• 0x4080a0 GetCurrentProcess
• 0x4080a4 CopyFileW
• 0x4080a8 ExitProcess
• 0x4080b0 GetTempPathW
• 0x4080b4 GetCommandLineW
• 0x4080b8 SetErrorMode
• 0x4080bc CloseHandle
• 0x4080c0 lstrlenW
• 0x4080c4 lstrcpynW
• 0x4080c8 GetDiskFreeSpaceW
• 0x4080cc GlobalUnlock
• 0x4080d0 GlobalLock
• 0x4080d4 CreateThread
• 0x4080d8 LoadLibraryW
• 0x4080dc CreateProcessW
• 0x4080e0 lstrcmpiA
• 0x4080e4 GetTempFileNameW
• 0x4080e8 lstrcatW
• 0x4080ec GetProcAddress
• 0x4080f0 LoadLibraryA
• 0x4080f4 GetModuleHandleA
• 0x4080f8 OpenProcess
• 0x4080fc lstrcpyW
• 0x408100 GetVersionExW
• 0x408104 GetSystemDirectoryW
• 0x408108 GetVersion
• 0x40810c lstrcpyA
• 0x408110 RemoveDirectoryW
• 0x408114 lstrcmpA
• 0x408118 lstrcmpiW
• 0x40811c lstrcmpW
• 0x408124 GlobalAlloc
• 0x408128 WaitForSingleObject
• 0x40812c GetExitCodeProcess
• 0x408130 GlobalFree
• 0x408134 GetModuleHandleW
• 0x408138 LoadLibraryExW
• 0x40813c FreeLibrary
• 0x408148 WideCharToMultiByte
• 0x40814c lstrlenA
• 0x408150 MulDiv
• 0x408154 WriteFile
• 0x408158 ReadFile
• 0x40815c MultiByteToWideChar
• 0x408160 SetFilePointer
• 0x408164 FindClose
• 0x408168 FindNextFileW
• 0x40816c FindFirstFileW
• 0x408170 DeleteFileW
• 0x408174 lstrcpynA
库: USER32.dll:
• 0x408198 GetAsyncKeyState
• 0x40819c IsDlgButtonChecked
• 0x4081a0 ScreenToClient
• 0x4081a4 GetMessagePos
• 0x4081a8 CallWindowProcW
• 0x4081ac IsWindowVisible
• 0x4081b0 LoadBitmapW
• 0x4081b4 CloseClipboard
• 0x4081b8 SetClipboardData
• 0x4081bc EmptyClipboard
• 0x4081c0 OpenClipboard
• 0x4081c4 TrackPopupMenu
• 0x4081c8 GetWindowRect
• 0x4081cc AppendMenuW
• 0x4081d0 CreatePopupMenu
• 0x4081d4 GetSystemMetrics
• 0x4081d8 EndDialog
• 0x4081dc EnableMenuItem
• 0x4081e0 GetSystemMenu
• 0x4081e4 SetClassLongW
• 0x4081e8 IsWindowEnabled
• 0x4081ec SetWindowPos
• 0x4081f0 DialogBoxParamW
• 0x4081f4 CheckDlgButton
• 0x4081f8 CreateWindowExW
• 0x408200 RegisterClassW
• 0x408204 SetDlgItemTextW
• 0x408208 GetDlgItemTextW
• 0x40820c MessageBoxIndirectW
• 0x408210 CharNextA
• 0x408214 CharUpperW
• 0x408218 CharPrevW
• 0x40821c wvsprintfW
• 0x408220 DispatchMessageW
• 0x408224 PeekMessageW
• 0x408228 wsprintfA
• 0x40822c DestroyWindow
• 0x408230 CreateDialogParamW
• 0x408234 SetTimer
• 0x408238 SetWindowTextW
• 0x40823c PostQuitMessage
• 0x408240 SetForegroundWindow
• 0x408244 ShowWindow
• 0x408248 wsprintfW
• 0x40824c SendMessageTimeoutW
• 0x408250 LoadCursorW
• 0x408254 SetCursor
• 0x408258 GetWindowLongW
• 0x40825c GetSysColor
• 0x408260 CharNextW
• 0x408264 GetClassInfoW
• 0x408268 ExitWindowsEx
• 0x40826c IsWindow
• 0x408270 GetDlgItem
• 0x408274 SetWindowLongW
• 0x408278 LoadImageW
• 0x40827c GetDC
• 0x408280 EnableWindow
• 0x408284 InvalidateRect
• 0x408288 SendMessageW
• 0x40828c DefWindowProcW
• 0x408290 BeginPaint
• 0x408294 GetClientRect
• 0x408298 FillRect
• 0x40829c DrawTextW
• 0x4082a0 EndPaint
• 0x4082a4 FindWindowExW
库: GDI32.dll:
• 0x40803c SetBkColor
• 0x408040 GetDeviceCaps
• 0x408044 DeleteObject
• 0x408048 CreateBrushIndirect
• 0x40804c CreateFontIndirectW
• 0x408050 SetBkMode
• 0x408054 SetTextColor
• 0x408058 SelectObject
库: SHELL32.dll:
• 0x40817c SHBrowseForFolderW
• 0x408184 SHGetFileInfoW
• 0x408188 ShellExecuteW
• 0x40818c SHFileOperationW
库: ADVAPI32.dll:
• 0x408000 RegEnumKeyW
• 0x408004 RegOpenKeyExW
• 0x408008 RegCloseKey
• 0x40800c RegDeleteKeyW
• 0x408010 RegDeleteValueW
• 0x408014 RegCreateKeyExW
• 0x408018 RegSetValueExW
• 0x40801c RegQueryValueExW
• 0x408020 RegEnumValueW
库: COMCTL32.dll:
• 0x408028 ImageList_AddMasked
• 0x40802c ImageList_Destroy
• 0x408030 None
• 0x408034 ImageList_Create
库: ole32.dll:
• 0x4082bc CoTaskMemFree
• 0x4082c0 OleInitialize
• 0x4082c4 OleUninitialize
• 0x4082c8 CoCreateInstance
库: VERSION.dll:
• 0x4082b0 GetFileVersionInfoW
• 0x4082b4 VerQueryValueW
.text
`.rdata
@.data
.ndata
.rsrc
@.reloc
#Vhh2@
u}9-$.G
SHGetFolderPathW
SHFOLDER
SHAutoComplete
SHLWAPI
GetUserDefaultUILanguage
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegDeleteKeyExW
ADVAPI32
MoveFileExW
GetDiskFreeSpaceExW
KERNEL32
Module32NextW
Module32FirstW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
Kernel32.DLL
GetModuleBaseNameW
EnumProcessModules
EnumProcesses
PSAPI.DLL
MulDiv
DeleteFileW
FindFirstFileW
FindNextFileW
FindClose
SetFilePointer
MultiByteToWideChar
ReadFile
WriteFile
lstrlenA
WideCharToMultiByte
GetPrivateProfileStringW
WritePrivateProfileStringW
FreeLibrary
LoadLibraryExW
GetModuleHandleW
GlobalFree
GetExitCodeProcess
WaitForSingleObject
GlobalAlloc
ExpandEnvironmentStringsW
lstrcmpW
lstrcmpiW
CloseHandle
SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
lstrcpynA
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpA
KERNEL32.dll
EndPaint
DrawTextW
FillRect
GetClientRect
BeginPaint
DefWindowProcW
SendMessageW
InvalidateRect
EnableWindow
GetDC
LoadImageW
SetWindowLongW
GetDlgItem
IsWindow
FindWindowExW
SendMessageTimeoutW
wsprintfW
ShowWindow
SetForegroundWindow
PostQuitMessage
SetWindowTextW
SetTimer
CreateDialogParamW
DestroyWindow
ExitWindowsEx
CharNextW
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetAsyncKeyState
IsDlgButtonChecked
ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
GetClassInfoW
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
wvsprintfW
DispatchMessageW
PeekMessageW
wsprintfA
USER32.dll
SelectObject
SetTextColor
SetBkMode
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
GetDeviceCaps
SetBkColor
GDI32.dll
SHFileOperationW
ShellExecuteW
SHGetFileInfoW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHELL32.dll
RegDeleteKeyW
RegCloseKey
RegEnumKeyW
RegOpenKeyExW
RegEnumValueW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
ADVAPI32.dll
ImageList_Destroy
ImageList_AddMasked
ImageList_Create
COMCTL32.dll
CoCreateInstance
OleUninitialize
OleInitialize
CoTaskMemFree
ole32.dll
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
VERSION.dll
logging set to %d
settings logging to %d
created uninstaller: %d, "%s"
WriteReg: error creating key "%s\%s"
WriteReg: error writing into "%s\%s" "%s"
WriteRegBin: "%s\%s" "%s"="%s"
WriteRegDWORD: "%s\%s" "%s"="0x%08x"
WriteRegExpandStr: "%s\%s" "%s"="%s"
WriteRegStr: "%s\%s" "%s"="%s"
DeleteRegKey: "%s\%s"
DeleteRegValue: "%s\%s" "%s"
WriteINIStr: wrote [%s] %s=%s in %s
CopyFiles "%s"->"%s"
CreateShortCut: out: "%s", in: "%s %s", icon: %s,%d, sw=%d, hk=%d
Error registering DLL: Could not initialize OLE
Error registering DLL: Could not load %s
Error registering DLL: %s not found in %s
GetTTFFontName(%s) returned %s
GetTTFVersionString(%s) returned %s
Exec: failed createprocess ("%s")
Exec: success ("%s")
Exec: command="%s"
ExecShell: success ("%s": file:"%s" params:"%s")
ExecShell: warning: error ("%s": file:"%s" params:"%s")=%d
HideWindow
Pop: stack empty
Exch: stack < %d elements
RMDir: "%s"
MessageBox: %d,"%s"
Delete: "%s"
File: wrote %d to "%s"
File: error, user cancel
File: skipped: "%s" (overwriteflag=%d)
File: error, user abort
File: error, user retry
File: error creating "%s"
File: overwriteflag=%d, allowskipfilesflag=%d, name="%s"
Rename failed: %s
Rename on reboot: %s
Rename: %s
IfFileExists: file "%s" does not exist, jumping %d
IfFileExists: file "%s" exists, jumping %d
CreateDirectory: "%s" created
CreateDirectory: can't create "%s" - a file already exists
CreateDirectory: can't create "%s" (err=%d)
CreateDirectory: "%s" (%d)
SetFileAttributes failed.
SetFileAttributes: "%s":%08X
BringToFront
Sleep(%d)
detailprint: %s
Call: %d
Aborting: "%s"
Jump: %d
verifying installer: %d%%
unpacking data: %d%%
... %d%%
http://nsis.sf.net/NSIS_Error
Error writing temporary file. Make sure your temp folder is valid.
Error launching installer
SeShutdownPrivilege
~nsu.tmp
\Temp
NSIS Error
install.log
%u.%u%s%s
Skipping section: "%s"
Section: "%s"
New install of "%s" to "%s"
RichEdit
RichEdit20A
RichEd32
RichEd20
.DEFAULT\Control Panel\International
Control Panel\Desktop\ResourceLocale
Software\Microsoft\Windows\CurrentVersion
\Microsoft\Internet Explorer\Quick Launch
*?|<>/":
invalid registry key
HKEY_DYN_DATA
HKEY_CURRENT_CONFIG
HKEY_PERFORMANCE_DATA
HKEY_USERS
HKEY_LOCAL_MACHINE
HKEY_CURRENT_USER
HKEY_CLASSES_ROOT
%02x%c
Unknown
RMDir: RemoveDirectory failed("%s")
RMDir: RemoveDirectory on Reboot("%s")
RMDir: RemoveDirectory("%s")
RMDir: RemoveDirectory invalid input("%s")
Delete: DeleteFile failed("%s")
Delete: DeleteFile on Reboot("%s")
Delete: DeleteFile("%s")
GetTTFNameString
Version
没有防病毒引擎扫描信息!

进程树

4KVideoDownloaderPortable.exe, PID: 2496, 上一级进程 PID: 2160
下载PCAP包

访问主机纪录 (可点击查询WPING实时安全评级)

无主机纪录.

TCP

源地址 源端口 目标地址 目标端口
192.168.122.201 49160 23.196.47.9 acroipm.adobe.com 80

UDP

源地址 源端口 目标地址 目标端口
192.168.122.201 59401 192.168.122.1 53

域名解析 (可点击查询WPING实时安全评级)

域名 安全评级 响应
acroipm.adobe.com CNAME acroipm.adobe.com.edgesuite.net
CNAME a1983.dscd.akamai.net
A 23.196.47.49
A 23.196.47.9

TCP

源地址 源端口 目标地址 目标端口
192.168.122.201 49160 23.196.47.9 acroipm.adobe.com 80

UDP

源地址 源端口 目标地址 目标端口
192.168.122.201 59401 192.168.122.1 53

HTTP 请求

URI HTTP数据
URL专业沙箱检测 -> http://acroipm.adobe.com/11/rdr/CHS/win/nooem/none/message.zip 
GET /11/rdr/CHS/win/nooem/none/message.zip HTTP/1.1
Accept: */*
If-Modified-Since: Mon, 08 Nov 2017 08:44:36 GMT
User-Agent: IPM
Host: acroipm.adobe.com
Connection: Keep-Alive
Cache-Control: no-cache

SMTP 流量

无SMTP流量.

IRC 流量

无IRC请求.

ICMP 流量

无ICMP流量.

CIF 报告

无 CIF 结果

网络警报

无警报

TLS

No TLS

Suricata HTTP

No Suricata HTTP

未发现网络提取文件
抱歉! 没有任何文件投放。
没有发现相似的分析.
HTML 总结报告
(需15-60分钟同步)		 下载

Processing ( 14.851 seconds )

  • 11.015 Suricata
  • 1.429 VirusTotal
  • 0.855 NetworkAnalysis
  • 0.666 Static
  • 0.396 peid
  • 0.353 TargetInfo
  • 0.11 BehaviorAnalysis
  • 0.014 AnalysisInfo
  • 0.01 Strings
  • 0.002 Memory
  • 0.001 config_decoder

Signatures ( 1.455 seconds )

  • 1.334 md_url_bl
  • 0.021 antiav_detectreg
  • 0.01 md_domain_bl
  • 0.008 infostealer_ftp
  • 0.006 antiav_detectfile
  • 0.005 api_spamming
  • 0.005 anomaly_persistence_autorun
  • 0.005 infostealer_im
  • 0.004 stealth_decoy_document
  • 0.004 stealth_timeout
  • 0.004 antianalysis_detectreg
  • 0.004 geodo_banking_trojan
  • 0.004 infostealer_bitcoin
  • 0.004 ransomware_extensions
  • 0.004 ransomware_files
  • 0.003 infostealer_mail
  • 0.003 network_http
  • 0.002 tinba_behavior
  • 0.002 antivm_vbox_files
  • 0.002 disables_browser_warn
  • 0.002 network_torgateway
  • 0.001 bootkit
  • 0.001 rat_nanocore
  • 0.001 mimics_filetime
  • 0.001 stealth_file
  • 0.001 betabot_behavior
  • 0.001 reads_self
  • 0.001 kibex_behavior
  • 0.001 antivm_generic_disk
  • 0.001 cerber_behavior
  • 0.001 virus
  • 0.001 antivm_parallels_keys
  • 0.001 antivm_xen_keys
  • 0.001 bot_drive
  • 0.001 bot_drive2
  • 0.001 browser_security
  • 0.001 modify_proxy
  • 0.001 maldun_malicious_drop_executable_file_to_temp_folder
  • 0.001 md_bad_drop
  • 0.001 network_cnc_http

Reporting ( 0.481 seconds )

  • 0.479 ReportHTMLSummary
  • 0.002 Malheur
Task ID 628831
Mongo ID 606f3e3f7e769a06adeb386b
Cuckoo release 1.4-Maldun