top title background image
flash

giLqLXLHs3.exe

Status: finished
Submission Time: 2022-11-05 20:03:26 +01:00
Malicious
Trojan
Evader

Comments

Tags

  • exe

Details

  • Analysis ID:
    738927
  • API (Web) ID:
    1106263
  • Analysis Started:
    2022-11-05 20:03:28 +01:00
  • Analysis Finished:
    2022-11-05 20:11:32 +01:00
  • MD5:
    d7f34f1712688bb9564296842355a8b9
  • SHA1:
    1245a185de18808ef075297fc4740d7a3b7b6381
  • SHA256:
    c9944c04100d2b5d75b8bff00359b3bef6481bdb72d965032ac800d99cb4fe1a
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
malicious
Score: 64
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious
Score: 5/95

IPs

IP Country Detection
221.157.45.236
Korea Republic of

Domains

Name IP Detection
klanet.duckdns.org
221.157.45.236

URLs

Name Detection
http://klanet.duckdns.org:663/resource/version.tsv
http://klanet.duckdns.org:663/resource/version.tsv#downloadVoicePack#WindowBorderBrush
http://klanet.duckdns.org:663
Click to see the 34 hidden entries
http://klanet.duckdns.org:663/version
http://www.sandoll.co.kr
https://gall.dcinside.com/micateam/1644952)
http://nlog-project.org/dummynamespace/
http://nlog-project.org/ws/ILogReceiverOneWayServer/ProcessLogMessages
https://www.newtonsoft.com/jsonschema
https://www.nuget.org/packages/Newtonsoft.Json.Bson
http://nlog-project.org/ws/
http://nlog-project.org/ws/T
http://nlog-project.org/ws/ILogReceiverServer/ProcessLogMessagesT
http://www.quickzip.org/BaseControls
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
https://gall.dcinside.com/
https://github.com/Templarian/MaterialDesign/blob/master/LICENSE-
http://nlog-project.org/ws/3
http://nlog-project.org/ws/5
https://github.com/JamesNK/Newtonsoft.Json
https://github.com/MahApps/MahApps.Metro.IconPacks.git
https://design.google
https://github.com/MahApps/MahApps.Metro.IconPacks.git&
https://materialdesignicons.com/
http://www.quickzip.org/BaseControlsx
http://schemas.xmlsoap.org/soap/envelope/
http://metro.mahapps.com/winfx/xaml/iconpacksp
https://nlog-project.org/
https://www.newtonsoft.com/json
http://nlog-project.org/ws/ILogReceiverServer/ProcessLogMessagesResponsep
http://metro.mahapps.com/winfx/xaml/iconpacks
http://metro.mahapps.com/winfx/xaml/iconpackseup
http://www.goodfont.co.kr
https://www.nuget.org/packages/NLog.Web.AspNetCore
https://design.googleGoogle
http://james.newtonking.com/projects/json
https://github.com/Templarian/MaterialDesign/blob/master/LICENSE

Dropped files

No malicious files found. See full and IOC report for all dropped files.