分析任务

分析类型 虚拟机标签 开始时间 结束时间 持续时间
URL win7-sp1-x64-hpdapp03-1 2018-07-19 17:34:54 2018-07-19 17:37:17 143 秒

魔盾分数

0.05

正常的

URL详细信息

URL
URL专业沙箱检测 -> http://www.71lady.com/uploads/allimg/130531/2_130531141041_1.jpg
登录查看威胁特征

运行截图

访问主机纪录 (可点击查询WPING实时安全评级)

无主机纪录.

域名解析 (可点击查询WPING实时安全评级)

无域名信息.

摘要

登录查看详细行为信息

WHOIS 信息

Name: None
Country: None
State: Zhejiang
City: Hangzhou
ZIP Code: None
Address: None

Orginization: None
Domain Name(s):
    71LADY.COM
    71lady.com
Creation Date:
    2010-04-16 02:20:54
Updated Date:
    2017-11-14 03:45:16
Expiration Date:
    2019-04-16 02:20:54
Email(s):
    DomainAbuse@service.aliyun.com

Registrar(s):
    HiChina Zhicheng Technology Ltd.
Name Server(s):
    DNS31.HICHINA.COM
    DNS32.HICHINA.COM
Referral URL(s):
    None
防病毒引擎/厂商 网站安全分析
CLEAN MX Clean Site
DNS8 Clean Site
VX Vault Clean Site
ZDB Zeus Clean Site
SCUMWARE_org Clean Site
Netcraft Unrated Site
desenmascara_me Clean Site
CyRadar Clean Site
PhishLabs Unrated Site
Zerofox Clean Site
K7AntiVirus Clean Site
Virusdie External Site Scan Clean Site
Spamhaus Clean Site
Quttera Clean Site
AegisLab WebGuard Clean Site
MalwareDomainList Clean Site
ZeusTracker Clean Site
zvelo Clean Site
Google Safebrowsing Clean Site
Kaspersky Clean Site
BitDefender Clean Site
Certly Clean Site
G-Data Clean Site
OpenPhish Clean Site
Malware Domain Blocklist Clean Site
MalwarePatrol Clean Site
Webutation Clean Site
Trustwave Clean Site
Web Security Guard Clean Site
Dr_Web Clean Site
ADMINUSLabs Clean Site
Malwarebytes hpHosts Clean Site
Opera Clean Site
AlienVault Clean Site
Emsisoft Clean Site
Rising Clean Site
Malc0de Database Clean Site
Spam404 Clean Site
BADWARE_INFO Clean Site
Malwared Clean Site
Avira Clean Site
NotMining Unrated Site
CyberCrime Clean Site
Antiy-AVL Clean Site
Forcepoint ThreatSeeker Clean Site
FraudSense Clean Site
malwares_com URL checker Clean Site
Comodo Site Inspector Clean Site
Malekal Clean Site
ESET Clean Site
Sophos Unrated Site
Yandex Safebrowsing Clean Site
SecureBrain Clean Site
Phishtank Clean Site
Sucuri SiteCheck Clean Site
Blueliv Clean Site
Nucleon Clean Site
ZCloudsec Clean Site
AutoShun Unrated Site
ThreatHive Clean Site
FraudScore Clean Site
Tencent Clean Site
URLQuery Clean Site
StopBadware Unrated Site
Fortinet Clean Site
ZeroCERT Clean Site
Baidu-International Clean Site
securolytics Clean Site

进程树

iexplore.exe, PID: 1836, 上一级进程 PID: 1896
iexplore.exe, PID: 2272, 上一级进程 PID: 1836

访问主机纪录 (可点击查询WPING实时安全评级)

无主机纪录.

TCP

无TCP连接纪录.

UDP

无UDP连接纪录.

域名解析 (可点击查询WPING实时安全评级)

无域名信息.

TCP

无TCP连接纪录.

UDP

无UDP连接纪录.

HTTP 请求

未发现HTTP请求.

SMTP 流量

无SMTP流量.

IRC 流量

无IRC请求.

ICMP 流量

无ICMP流量.

CIF 报告

无 CIF 结果

网络警报

无警报

TLS

No TLS

Suricata HTTP

No Suricata HTTP

未发现网络提取文件
文件名 RecoveryStore.{FEBF4963-8B36-11E8-91CC-525400E1D82E}.dat
相关文件
C:\Users\test\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{FEBF4963-8B36-11E8-91CC-525400E1D82E}.dat
文件大小 3584 字节
文件类型 Composite Document File V2 Document, Cannot read section info
MD5 22780c236e0cb87e8308983e017e8a88
SHA1 421e10b0d78d4662a00b41dbf94128686c6e2091
SHA256 b7104588369b69b0a2646e1e99f3c5f2a5f9988110160382e8a9e24fdfa60958
CRC32 C136C501
Ssdeep 12:rl0YmGF2QYOrEg5+IaCrI017+FDrXsDrEgmf+IaCy8qgQNlTqoHmPam:rIQYO5/cXYGv/TQNlWoH
下载  提交魔盾安全分析
文件名 index.dat
相关文件
C:\Users\test\AppData\Roaming\Microsoft\Windows\IECompatCache\index.dat
文件大小 65536 字节
文件类型 Internet Explorer cache file version Ver 5.2
MD5 0ee0d92f5ad9cd4d354a120734ae8e5e
SHA1 a3d2338356b933a1240f053b89efe7f1b5e63353
SHA256 bd15c1573c53ac40e26c307c00be243ace57eb5fd0d2879349b24832d2e7a771
CRC32 36F430F7
Ssdeep 384:wEEG/+oo0M7hPfdoW7QRyUEZeluUFyvp64PBhqNLguX3/5YSHYjitk9t7sub/2Iw:wEEG/+Rg
下载  提交魔盾安全分析
文件名 index.dat
相关文件
C:\Users\test\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012018071920180720\index.dat
文件大小 32768 字节
文件类型 Internet Explorer cache file version Ver 5.2
MD5 20245de9a0f77c7b556eed64300a31e5
SHA1 c05cbb8b57281b88b1bff5861d492b6dfe858f34
SHA256 0934a5d18f400c90f91f876fe1aae8b3c57b0708bda3006de7d3da6007771f9e
CRC32 A0ED845B
Ssdeep 6:qjyxXKF1W/R3UrX5F/iUylj4KzW+JPSQf6RIDts3UqF/iUylfzQ:qjRF4R3UrL/32mQf6R33U+/32
下载  提交魔盾安全分析
文件名 index.dat
相关文件
C:\Users\test\AppData\Local\Microsoft\Feeds Cache\index.dat
文件大小 32768 字节
文件类型 Internet Explorer cache file version Ver 5.2
MD5 0aee387ca0a52dcdd8f8a29ea76edb42
SHA1 5df81547dcadb2a7b8bc689da8e1383ba1a84cb9
SHA256 c31bc37e102b70a472837d530ec80bdaea28b0fefda3e9aa8c8cda98c4200c4e
CRC32 B451CA0B
Ssdeep 12:qjtSaFpbZli3zIoYDPO7em4GZj03W/cKYDPOCG5A30WUsOXQDG9YRm4GZ5:qj4avEIoYTCebGZ7ZYTlEJ0oQQ4bGZ
魔盾安全分析结果 2.0  分析时间：2016-11-06 20:10:20  查看分析报告
下载  提交魔盾安全分析
文件名 favicon[1].ico
相关文件
C:\Users\test\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EHDRIWWS\favicon[1].ico
文件大小 1150 字节
文件类型 MS Windows icon resource - 1 icon, 16x16
MD5 dc10428a23379b3991d42d5710dfec62
SHA1 17264f047e0944eff2fbf38da5b1b642a09042ff
SHA256 57e62916d75d0eebbc03466ee0c14dbfe96207796caa34ccf0c8c87cef0f576a
CRC32 4E5139FB
Ssdeep 24:tYWZaBrX+rALOM++MmWUjFaiYJl6Wtd+LeuJoAlzp0fyE/sNs3vangaH:tDZatthLWUpmbAlzPNs38
下载  提交魔盾安全分析
文件名 {FEBF4964-8B36-11E8-91CC-525400E1D82E}.dat
相关文件
C:\Users\test\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{FEBF4964-8B36-11E8-91CC-525400E1D82E}.dat
文件大小 4608 字节
文件类型 Composite Document File V2 Document, Cannot read section info
MD5 279676d9507a3945ac57707a25c4f447
SHA1 97a9fac625831b14e9456cd63dd5ec5f687022aa
SHA256 e20140268239acadda1063a837f9ddd7b10f36a4236180ae247d5abc932ec0f3
CRC32 FCC23648
Ssdeep 12:rlfF9JrrEgmfR16FPqYrEgmfox1qjNlYfOo3NNl889otQKyhbSba:rRlG8qYGAMNljo9Nl88oYbSba
下载  提交魔盾安全分析
HTML 总结报告
(需15-60分钟同步)		 下载

Processing ( 11.429 seconds )

  • 8.8 Static
  • 1.203 VirusTotal
  • 0.883 BehaviorAnalysis
  • 0.388 AnalysisInfo
  • 0.109 Debug
  • 0.042 Dropped
  • 0.004 Memory

Signatures ( 0.948 seconds )

  • 0.331 md_bad_drop
  • 0.13 antiav_detectreg
  • 0.047 infostealer_ftp
  • 0.043 stealth_timeout
  • 0.031 api_spamming
  • 0.027 antianalysis_detectreg
  • 0.026 infostealer_im
  • 0.022 antivm_generic_scsi
  • 0.021 md_url_bl
  • 0.016 stealth_file
  • 0.015 infostealer_mail
  • 0.012 md_domain_bl
  • 0.011 antivm_generic_services
  • 0.008 antivm_generic_disk
  • 0.008 antiav_detectfile
  • 0.008 ransomware_extensions
  • 0.008 ransomware_files
  • 0.007 betabot_behavior
  • 0.007 mimics_filetime
  • 0.007 kibex_behavior
  • 0.007 recon_fingerprint
  • 0.006 persistence_autorun
  • 0.006 vawtrak_behavior
  • 0.006 antivm_parallels_keys
  • 0.006 antivm_xen_keys
  • 0.006 geodo_banking_trojan
  • 0.006 darkcomet_regkeys
  • 0.005 antiemu_wine_func
  • 0.005 bootkit
  • 0.005 virus
  • 0.005 infostealer_bitcoin
  • 0.004 infostealer_browser_password
  • 0.004 antidbg_windows
  • 0.004 kovter_behavior
  • 0.004 antivm_generic_diskreg
  • 0.004 packer_armadillo_regkey
  • 0.003 andromeda_behavior
  • 0.003 hancitor_behavior
  • 0.003 antivm_vbox_libs
  • 0.003 antivm_vbox_files
  • 0.003 disables_browser_warn
  • 0.002 tinba_behavior
  • 0.002 rat_nanocore
  • 0.002 antiav_avast_libs
  • 0.002 dridex_behavior
  • 0.002 injection_createremotethread
  • 0.002 Locky_behavior
  • 0.002 cryptowall_behavior
  • 0.002 antisandbox_productid
  • 0.002 antivm_xen_keys
  • 0.002 antivm_hyperv_keys
  • 0.002 antivm_vbox_acpi
  • 0.002 antivm_vbox_keys
  • 0.002 antivm_vmware_keys
  • 0.002 antivm_vpc_keys
  • 0.002 browser_security
  • 0.002 bypass_firewall
  • 0.002 modify_uac_prompt
  • 0.002 recon_programs
  • 0.001 network_tor
  • 0.001 rat_luminosity
  • 0.001 stack_pivot
  • 0.001 antisandbox_sunbelt_libs
  • 0.001 antisandbox_sboxie_libs
  • 0.001 antiav_bitdefender_libs
  • 0.001 dyre_behavior
  • 0.001 shifu_behavior
  • 0.001 exec_crash
  • 0.001 antivm_vmware_events
  • 0.001 cerber_behavior
  • 0.001 injection_runpe
  • 0.001 antidbg_devices
  • 0.001 antivm_generic_bios
  • 0.001 antivm_generic_cpu
  • 0.001 antivm_generic_system
  • 0.001 bot_drive
  • 0.001 bot_drive2
  • 0.001 browser_addon
  • 0.001 ie_martian_children
  • 0.001 modify_security_center_warnings
  • 0.001 office_security
  • 0.001 ransomware_radamant
  • 0.001 rat_pcclient
  • 0.001 rat_spynet
  • 0.001 stealth_hiddenreg
  • 0.001 stealth_hide_notifications
  • 0.001 targeted_flame
  • 0.001 whois_create

Reporting ( 0.44 seconds )

  • 0.44 ReportHTMLSummary
Task ID 171125
Mongo ID 5b505be4a093ef56fdea4d6c
Cuckoo release 1.4-Maldun