分析任务
| 分析类型 | 虚拟机标签 | 开始时间 | 结束时间 | 持续时间 |
|---|---|---|---|---|
| 文件 (Windows) | win7-sp1-x64-hpdapp01-3 | 2019-01-22 04:32:20 | 2019-01-22 04:35:46 | 206 秒 |
魔盾分数
0.05
正常的
文件详细信息
| 文件名 | QQwry.dat |
|---|---|
| 文件大小 | 9293651 字节 |
| 文件类型 | COM executable for DOS |
| MD5 | 967929132c318f2b25cd3cbd4d05e61f |
| SHA1 | 2b2c0323543fbea7c59c91eca5e9b3ce134b4886 |
| SHA256 | 15dd981cf94db301a9707a44c1433ad05e794395eeed952777107b384da7fd3f |
| SHA512 | bba1552efc9491a2d7ea66d9240936653ccd5dc5f681cef9c39b8f4c05eecbbb9209a1e65bce0ab60393b85f48f5454dccaaebebe35caab2c44dd5aa084862e6 |
| CRC32 | 637A8E65 |
| Ssdeep | 196608:CBQrjvb13JAa2GhsK+jfvJI4hQgeHunKWMiB7cAprDOVh4RfxK6CzrRg/h5J5r2y:CBQHYa2GsKk3lQrE7cAJDBTMdg+ObmK |
| Yara | 登录查看Yara规则 |
| 样本下载 提交漏报 |
登录查看威胁特征
运行截图
访问主机纪录 (可点击查询WPING实时安全评级)
无主机纪录.
域名解析 (可点击查询WPING实时安全评级)
无域名信息.
摘要
登录查看详细行为信息
没有可用的静态分析.
I2Ts Inc
TOTNET
CZ88.NET
TOT-AS-AP
CJ-HELLOVISION
DTAC-GPRS-NET
NTTDoCoMo
KORNET
Telstra
DVOIS-NET
LG DACOM
(ROA Signed and Valid)
Saudi Telecom Company JSC
Integrated Telecom Co.Ltd
Bayanat Al-Oula For Network Services
VladLink LTD AS
Etihad Etisalat a joint stock company
GHOSTnet GmbH
Co-Location.com
Stifel, Nicolaus & C
Incomm
Switch & Data
Switch & Data
Switch & Data
WSI Corporation
WSI Corporation
Inficron
Teleperformance Usa
FreeTVRadio.com
Leepfrog Technologies
Lycoming College
Friends University
Marlboro College
Spelman College
Houghton College
First Technology Solutions
InFlow STL01
AAA AI SOFTWARE SOLUTIONS
Lenoir-Rhyne College
Springfield College
STONEHILL COLLEGE
BARBOURVILLE UTILITIES
Salve Regina University
CARILION HEALTH SYSTEM
AT&T Services
Xerox
Computer
OpenVZVPS Networks
EONIX-NET_CUST-NETBLK-PHX
OrionVM
OOW-3
SILVERNETWORK
AS16591(Google Fiber Inc.)
RAIDNS
Global Frag Networks
50KVM
Comcast Cable
Ontario Hamilton
Suburban Cable
Cogeco
Victoria
University of Regina
Vancouve
Saskatchewan
BLAZENET
CABLE
ROADRUNNER COMMERCIAL MIDSOUTH
Alhambra
Ontario
Queens
British
Universitas Widyatama
Quick Corp
MobiCom
Main Hosting Servers
(PublicDNS)
Etihad Atheeb Telecom Company
OVH SAS
Tce Adsl Dynamic
SK Broadband
Yaba College of Technology
(dnsmasq-2.65)
Te Data
University Hassan II-Mohammedia
IPTELECOM
TashiCell Network
Gemnet Broadband Services
Genworx Pte Ltd
Ascenix DC)
Sigroups
RSH Hosting Network
IT7 Networks
NewMedia Express Pte Ltd.
AKCTV Pte.Ltd.
Next Stage Ltd.
Cat Networks Hong Kong Limited
(public-dns.tk)
Leaseweb
COMTEL TV
(Prudential)
Universitas Muhammadiyah Makassar
EASPNET Inc.
Optus
OneAsiaHost
IXwebhosting
jazzvps
Websitewelcome.com
进程树
访问主机纪录 (可点击查询WPING实时安全评级)
无主机纪录.
TCP
无TCP连接纪录.
UDP
无UDP连接纪录.
域名解析 (可点击查询WPING实时安全评级)
无域名信息.
TCP
无TCP连接纪录.
UDP
无UDP连接纪录.
HTTP 请求
未发现HTTP请求.
SMTP 流量
无SMTP流量.
IRC 流量
无IRC请求.
ICMP 流量
无ICMP流量.
CIF 报告
无 CIF 结果
网络警报
无警报
TLS
No TLS
Suricata HTTP
No Suricata HTTP
未发现网络提取文件
抱歉! 没有任何文件投放。
没有发现相似的分析.
| HTML 总结报告 (需15-60分钟同步) |
下载 |
|---|
Processing ( 38.232 seconds )
- 15.493 Suricata
- 11.165 VirusTotal
- 11.056 TargetInfo
- 0.346 NetworkAnalysis
- 0.133 AnalysisInfo
- 0.023 Strings
- 0.01 BehaviorAnalysis
- 0.004 Memory
- 0.002 Static
Signatures ( 0.561 seconds )
- 0.406 md_bad_drop
- 0.021 md_domain_bl
- 0.021 md_url_bl
- 0.019 antiav_detectreg
- 0.011 anomaly_persistence_autorun
- 0.008 antiav_detectfile
- 0.007 infostealer_ftp
- 0.007 ransomware_extensions
- 0.007 ransomware_files
- 0.005 infostealer_bitcoin
- 0.005 infostealer_im
- 0.004 tinba_behavior
- 0.003 rat_nanocore
- 0.003 cerber_behavior
- 0.003 antivm_vbox_files
- 0.003 disables_browser_warn
- 0.003 infostealer_mail
- 0.002 betabot_behavior
- 0.002 geodo_banking_trojan
- 0.002 browser_security
- 0.002 modify_proxy
- 0.001 network_tor
- 0.001 ursnif_behavior
- 0.001 kazybot_behavior
- 0.001 kibex_behavior
- 0.001 shifu_behavior
- 0.001 antivm_parallels_keys
- 0.001 antivm_xen_keys
- 0.001 banker_zeus_mutex
- 0.001 bot_drive
- 0.001 bot_drive2
- 0.001 browser_addon
- 0.001 disables_system_restore
- 0.001 disables_windows_defender
- 0.001 office_security
- 0.001 rat_spynet
- 0.001 stealth_hide_notifications
- 0.001 stealth_modify_uac_prompt
Reporting ( 1.051 seconds )
- 0.836 ReportHTMLSummary
- 0.215 Malheur
| Task ID | 234141 |
|---|---|
| Mongo ID | 5c462d542f8f2e05d15a28e8 |
| Cuckoo release | 1.4-Maldun |
沪公网安备 31011502009736号