Automated Malware Analysis - Joe Sandbox Cloud Basic

ID	Detection	Sample Info	Download Report	Classification & Info
1423488	Malicious Yara Sigma Snort BlackMoon AV: 96%	3FpuQAI761.exe 2024-04-09 23:21:18 +02:00	Full Report Management Report IOC Report	Info Class
1423487	Malicious Yara Sigma BlackMoon AV: 79%	uN9LAcs6Dy.exe 2024-04-09 23:21:18 +02:00	Full Report Management Report IOC Report	Info Class
1423486	Malicious Yara Sigma BlackMoon AV: 84%	vPF3WL2bSa.exe 2024-04-09 23:18:16 +02:00	Full Report Management Report IOC Report	Info Class
1423485	Malicious Yara Sigma BlackMoon AV: 92%	TTCvBHGS9X.exe 2024-04-09 23:18:16 +02:00	Full Report Management Report IOC Report	Info Class
1423484	Malicious Yara Sigma BlackMoon AV: 89%	Uc8jiEFesW.exe 2024-04-09 23:18:16 +02:00	Full Report Management Report IOC Report	Info Class
1423483	Malicious Yara Sigma Snort BlackMoon AV: 89%	xv6sswE990.exe 2024-04-09 23:18:16 +02:00	Full Report Management Report IOC Report	Info Class
1423482	Malicious Yara Sigma Snort BlackMoon AV: 89%	KA7X7R6SKW.exe 2024-04-09 23:16:15 +02:00	Full Report Management Report IOC Report	Info Class
1423481	Malicious Yara BlackMoon AV: 53%	BwyBqQl6tZ.exe 2024-04-09 23:16:15 +02:00	Full Report Management Report IOC Report	Info Class
1423480	Malicious Yara Sigma BlackMoon AV: 89%	qgceB8B0Gz.exe 2024-04-09 23:15:18 +02:00	Full Report Management Report IOC Report	Info Class
1423479	Malicious Yara Sigma BlackMoon AV: 89%	W6qa6ioGl3.exe 2024-04-09 23:15:18 +02:00	Full Report Management Report IOC Report	Info Class
1423478	Malicious Yara BlackMoon AV: 50%	BojsjmZIeB.exe 2024-04-09 23:15:18 +02:00	Full Report Management Report IOC Report	Info Class
1423477	Malicious AV: None	https://d5nzrx04.na1.hubspotlinksstarter.com/Ctc/JA+113/d5nzRX04/VWr1g618VfrqN4rNPmH9jPnYW93kvSZ5cJkywN4Pt_MF3m2ndW6N1vHY6lZ3lVW73nHf110S5xRN5xC1vfxVqxKW4FzBmC5mG9m-W1HPd_J5WcZs9N2PFjsdlJCK1W3R-Llw8Nn3JrW77LvG46G0TgMW6sX3cq1n9B91W1VgKZF88xcnJW3RkPPq7MJqKBW1WRTs25MNVd3W7xP4m08xz70jW224CB79lljmsW4bMhZP1z4bp9W4CdxFQ8yJDFsW1zhmp07J56WsW8bXsC52FDpL2W8YC8nG4rP7JSW7fVfmL5_3FlnW8-MC2N8sDw84N14-S_xfMm_sW97WmmZ8DffQXf5jg33204 2024-04-09 23:14:43 +02:00	Full Report Management Report IOC Report	Info
1423476	Malicious Yara BlackMoon AV: 47%	wjBHBcJD3c.exe 2024-04-09 23:14:13 +02:00	Full Report Management Report IOC Report	Info Class
1423475	Suspicious	no Icon "C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe" -Nologo -Noninteractive -NoProfile -ExecutionPolicy Bypass; Get-DeliveryOptimizationStatus \| where-object {($_.Sourceurl -CLike 'http://localhost:8005*') -AND (($_.FileSize -ge '52428800') -or ($_.BytesFromPeers -ne '0') -or (($_.BytesFromCacheServer -ne '0') -and ($_.BytesFromCacheServer -ne $null)))} \| select-object -Property BytesFromHttp, FileId, BytesFromPeers,Status,BytesFromCacheServer,SourceURL \| ConvertTo-Xml -as string -NoTypeInformation 2024-04-09 23:12:43 +02:00	Full Report Management Report IOC Report	Info Class
1423474	Malicious Yara BlackMoon AV: 55%	wxtOggNiOz.exe 2024-04-09 23:11:17 +02:00	Full Report Management Report IOC Report	Info Class
1423473	Malicious Yara Sigma BlackMoon AV: 84%	7zeKicTvU6.exe 2024-04-09 23:11:17 +02:00	Full Report Management Report IOC Report	Info Class
1423472	Malicious Yara Sigma BlackMoon AV: 84%	0Jh5phP1Nx.exe 2024-04-09 23:11:17 +02:00	Full Report Management Report IOC Report	Info Class
1423471	Clean	https://ky3p.markit.com/vendor/redirect?input=%2Fhome%2Findex.html%23%2Fevent%2F351%2F 2024-04-09 23:09:57 +02:00	Full Report Management Report IOC Report	Info
1423470	Clean	http://nireos.com 2024-04-09 23:08:41 +02:00	Full Report Management Report IOC Report	Info
1423469	Malicious Yara BlackMoon AV: 53%	tZSp0zeyBq.exe 2024-04-09 23:08:21 +02:00	Full Report Management Report IOC Report	Info Class

Windows: InjectsWrites Registry keysDrops PE FilesHas more than one ProcessHas Email attachmentDisassembly is available

Android: Receives SMS Sends SMS Reboot Native CMD

Common: Generates Internet Traffic Generates HTTP Network Traffic Expired Sample Creates malicious files Contains malware configuration(s)

Customization Show ID column

Analyses Overview

Search started