Transferencia.exe
| Engine | Download Report | Detection | Info |
|---|---|---|---|
|
|
malicious
Score: 60
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
|
|
|
|
malicious
Score: 100
|
System: Windows 10 64 bit 20H2 Native physical Machine for testing VM-aware malware (Office 2019, Chrome 134, Firefox 91, Adobe Reader DC 21, Java 8 Update 301
Run Condition: Suspected Instruction Hammering
|
| IP | Country | Detection |
|---|---|---|
| 81.91.86.14 | Czech Republic |  |
| 66.113.136.229 | United States | |
| 107.148.23.45 | United States | |
| Click to see the 16 hidden entries | ||
| 156.237.252.50 | Seychelles | |
| 164.88.112.1 | South Africa | |
| 167.172.228.26 | United States | |
| 172.96.191.161 | Canada | |
| 203.161.55.144 | Malaysia | |
| 54.179.30.8 | United States | |
| 104.223.129.53 | United States | |
| 173.82.197.115 | United States | |
| 146.59.209.152 | Norway | |
| 34.117.168.233 | United States | |
| 192.254.189.21 | United States | |
| 84.32.84.32 | Lithuania | |
| 5.101.152.161 | Russian Federation | |
| 216.58.215.238 | United States |  |
| 172.217.168.1 | United States | |
| 219.234.31.73 | China | |
| Name | IP | Detection |
|---|---|---|
| www.yumshop.info | 203.161.55.144 | |
| www.shwdhzs.com | 0.0.0.0 | |
| www.texanbrisket.click | 0.0.0.0 | |
| Click to see the 25 hidden entries | ||
| www.evertechsolution.com | 0.0.0.0 | |
| www.freedomlogi.com | 0.0.0.0 | |
| www.recycledandrestyled.com | 0.0.0.0 | |
| www.lbuffalowildwings.com | 0.0.0.0 | |
| www.baotrang-jewelry.com | 0.0.0.0 | |
| www.hamedtrade.com | 0.0.0.0 | |
| www.moqainc.com | 156.237.252.50 | |
| evertechsolution.com | 84.32.84.32 | |
| texanbrisket.click | 172.96.191.161 | |
| www.chromedcasting.com | 173.82.197.115 | |
| freedomlogi.com | 192.254.189.21 | |
| dns.ladipage.com | 54.179.30.8 | |
| www.tinyhouseczech.com | 81.91.86.14 | |
| lbuffalowildwings.com | 167.172.228.26 | |
| www.linyapda.com | 104.223.129.53 | |
| www.justinephotographie.com | 146.59.209.152 | |
| www.fmusique.com | 66.113.136.229 | |
| www.ihter1.store | 5.101.152.161 | |
| www.s7ve7.top | 107.148.23.45 | |
| www.hodinbag.com | 164.88.112.1 | |
| td-ccm-168-233.wixdns.net | 34.117.168.233 | |
| drive.google.com | 216.58.215.238 | |
| googlehosted.l.googleusercontent.com | 172.217.168.1 | |
| hkvhost6.800cdn.com | 219.234.31.73 | |
| doc-0s-0s-docs.googleusercontent.com | 0.0.0.0 | |
| Name | Detection |
|---|---|
| http://www.yumshop.info/pgdv/?WLkuGdhD=owAKUUmMmL0m5MZ0H2bKFX+TGNfXw2Org4WDX3fLhtJyKKJnCFDH6nB4ssj+qwVN5qeoJ7vjb/oIx8eb3tRZc7O4lUzKUAKTtA==&wr=UmpJ5 | |
| http://www.justinephotographie.com/pgdv/?WLkuGdhD=qpZzLRkHB5tbFNATZgAobe9cg7l/s6/qo7MfFpvlcZjZV+zgC0+LvvzTRfFiYWtGZadjWVgk8D7nBoLykoMte29yPHvaV+qh4A==&wr=UmpJ5 | |
| http://www.s7ve7.top/pgdv/ | |
| Click to see the 97 hidden entries | |
| http://www.chromedcasting.com/pgdv/?WLkuGdhD=UR0TvJK3LZFVN3+6imwboXnqZ8eulxMOyivrKPyNfDY7iCSxB58M6qQeR4Ew75cCe0oS5cWL9zPuyiPG51j9JSv/3WiwQzPeLg==&wr=UmpJ5 | |
| http://www.hodinbag.com/pgdv/?WLkuGdhD=M0tm9RDu27Er+XSAt1KsiTMaRJY7KPRSN2LjDhOxNP1JMry8EHqm5nq+KZQSbJoFO+5odvWXnQbiVwxx9FfUwQR+5SplP/HxFA==&wQwn=-i7IfYjxlV | |
| http://www.yumshop.info/pgdv/ | |
| http://www.moqainc.com/pgdv/?WLkuGdhD=ppM9iSn0R4x8Jluhd8qJNDB5oZMdxiDzNd3DzaciscTX4oG68VDK4pbYE+KJWsFmG5Fftljx9oPXuefJF7s9y86gX8zCmvTmUQ==&wr=UmpJ5 | |
| http://www.freedomlogi.com/pgdv/ | |
| http://www.hodinbag.com/pgdv/ | |
| http://www.linyapda.com/pgdv/ | |
| http://www.baotrang-jewelry.com/pgdv/?WLkuGdhD=kIWY+VCuMFfLO2PpuDqJMvFqoQt02jc7fLRH4CykwhogEgx7/MmOdKFkX8xJNhs1I9LeaAa1ifCDPe45WO/P91XWlA81afe/Wg==&wr=UmpJ5 | |
| http://www.ihter1.store/pgdv/ | |
| http://www.linyapda.com/pgdv/?WLkuGdhD=C4Cm8cVc5VA3I8X4L7BSzlSQKSQv2YZuy7HbaTBjx+WR5NO8OQn9eFtDbuadlRbHlEu62Y5BLCkAJvj3Q3iGYu+gMc8vTe+ISw==&wr=UmpJ5 | |
| http://www.shwdhzs.com/pgdv/?WLkuGdhD=z6QeP3aa0NcZoUrYUqwKZ/BH7GSiPiVV2TN0FLmZlGce84VDsA14fiYZjbMnnVO9O3KEofZ32/YXoBIWfgJU+TdNfvlj8LGTFQ==&wr=UmpJ5 | |
| http://www.evertechsolution.com/pgdv/ | |
| http://www.shwdhzs.com/pgdv/?WLkuGdhD=z6QeP3aa0NcZoUrYUqwKZ/BH7GSiPiVV2TN0FLmZlGce84VDsA14fiYZjbMnnVO9O3KEofZ32/YXoBIWfgJU+TdNfvlj8LGTFQ==&wQwn=-i7IfYjxlV | |
| https://www.msn.com/de-ch/nachrichten/other/russlands-erneute-angriffe-auf-kiew-zeigen-wie-gut-die-u | |
| http://www.hodinbag.com | |
| http://www.fmusique.com | |
| http://nsis.sf.net/NSIS_Error | |
| https://www.msn.com/de-ch/nachrichten/other/eine-kommunistin-hat-die-zerstrittene-linke-hinter-sich- | |
| http://img.alicdn.com/imgextra/i1/229074366/TB2UfKFyOlnpuFjSZFgXXbi7FXa-229074366.jpg | |
| https://doc-0s-0s-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/o5p51uq7 | |
| https://assets.msn.com/weathermapdata/1/static/weather/Icons/JUFSSgA=/Teaser/tempdrop1.svg | |
| https://www.msn.com/de-ch/sport//formel1/rennkalender | |
| http://en.w | |
| http://www.freedomlogi.comReferer: | |
| http://nsis.sf.net/NSIS_ErrorError | |
| http://www.ihter1.storeReferer: | |
| http://redirect.aaaq.com/location.cgi?dn=fmusique.com | |
| http://img.alicdn.com/imgextra/i3/229074366/TB22UWeyUlnpuFjSZFjXXXTaVXa-229074366.jpg | |
| https://windows.msn.com:443/shellv2?osLocale=en-US | |
| https://word.office.com( | |
| http://crl.Z | |
| http://www.texanbrisket.clickReferer: | |
| https://www.msn.com/de-ch/nachrichten/other/dieser-heiratsantrag-im-flugzeug-bringt-gewisse-frauen-i | |
| http://schemas.micro | |
| https://doc-0s-0s-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/o5p51uq76mqgnidd5lutr81trpgo1dse/1688996775000/08947100441217131159/*/158xoXAnG7Y8jswgVGU7wFlXCzsjshl2W?e=download&uuid=d41dbe26-8270-4335-880a-1b2fd974c77e | |
| https://drive.google.com/:W | |
| http://www.linyapda.comReferer: | |
| https://assets.msn.com/weathermapdata/1/static/weather/Icons/JUFSSgA=/Condition/AAehR3S.svg | |
| http://www.shwdhzs.com | |
| https://api.msn.com/v1/news/Feed/Windows? | |
| http://browsehappy.com/ | |
| https://api.msn.com/( | |
| http://www.yumshop.info | |
| https://www.msn.com/de-ch/nachrichten/other/so-viel-abfall-schmissen-z | |
| https://www.msn.com/de-ch/lifestyle/horoskope/tageshoroskop-f | |
| https://cdnjs.cloudflare.com/ajax/libs/meyer-reset/2.0/reset.min.css | |
| http://www.venusoutfitters.comReferer: | |
| http://www.justinephotographie.comReferer: | |
| https://www.chromedcasting.com/pgdv/?WLkuGdhD=UR0TvJK3LZFVN3 | |
| http://www.venusoutfitters.com/pgdv/ | |
| http://www.yumshop.infoReferer: | |
| https://outlook.comp | |
| https://assets.msn.com/ | |
| https://www.msn.com/de-ch/nachrichten/other/zu-lustig-f | |
| http://www.fmusique.comReferer: | |
| http://www.hamedtrade.com/pgdv/ | |
| https://www.google.com | |
| https://use.typekit.net/ytd4ine.js | |
| http://www.s7ve7.topReferer: | |
| http://www.noonprince.siteReferer: | |
| http://www.gopher.ftp://ftp. | |
| https://www.msn.com/de-ch/nachrichten/other/verschw | |
| http://www.ibm.com/data/dtd/v11/ibmxhtml1-transitional.dtd-//W3O//DTD | |
| https://excel.office.com | |
| https://uk.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command= | |
| https://www.msn.com/de-ch/nachrichten/other/bushido-bricht-nach-fehlgeburt-sein-schweigen/ar-AA1dFrW | |
| http://inference.location.live.com11111111-1111-1111-1111-111111111111https://partnernext-inference. | |
| https://api.msn.com:443/v1/news/Feed/Windows? | |
| http://www.moqainc.com | |
| https://www.msn.com/de-ch/nachrichten/schweiz/schwitz-wahnsinn-am-dienstag-jetzt-feuert-die-spanien- | |
| https://duckduckgo.com/ac/?q= | |
| https://www.msn.com/de-ch/nachrichten/other/ex-pr | |
| https://uk.search.yahoo.com/favicon.icohttps://uk.search.yahoo.com/search | |
| https://www.msn.com/de-ch/nachrichten/other/er-verliess-das-swiss-paradise-sp | |
| https://powerpoint.office.comer | |
| https://www.msn.com/de-ch/nachrichten/other/in-den-ferien-wird-umweltaktivist-dicaprio-zum-klimas | |
| http://www.hamedtrade.comReferer: | |
| https://doc-0s-0s-docs.googleusercontent.com/ | |
| https://uk.search.yahoo.com/favicon.iVARCHAR/uk.search.yahoo.com/search | |
| https://assets.msn.com/b | |
| https://duckduckgo.com/chrome_newtab | |
| http://www.gururajmarket.com | |
| http://www.ihter1.store | |
| https://word.office.com | |
| http://justinephotographie.com/pgdv/?WLkuGdhD=qpZzLRkHB5tbFNATZgAobe9cg7l/s6/qo7MfFpvlcZjZV | |
| http://img001.hc360.cn/k3/M0A/15/3E/WGb661d82291ec7241eB57754999529dFA3.jpg..220x220a.jpg | |
| https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q= | |
| https://api.msn.com/v1/news/Feed/Windows?activityId=9047974EC48548538A716D62113E27A1&timeOut=5000&oc | |
| https://www.msn.com/de-ch/nachrichten/other/von-heiss-aber-geil-bis-zu-ketten-die-vom-hals-gerissen- | |
| http://www.noonprince.site/pgdv/ | |
| http://www.linyapda.com | |
| http://freedomlogi.com/pgdv/?WLkuGdhD=40vB3y0FBU6YikC0mze6zWtCDf4SbKmEGDMVofm0YOWWEGBf7iqfCyJ8BSLs | |
| http://www.hamedtrade.com/pgdv/0 | |
| http://img.alicdn.com/imgextra/i3/229074366/TB2gzjcyHBmpuFjSZFAXXaQ0pXa-229074366.jpg | |
| https://www.msn.com/de-ch/nachrichten/politik/neue-eu-verordnung-bedroht-kakao-zulieferung-das-schog | |
| http://www.noonprince.site/pgdv/2 | |
| https://drive.google.com/ | |
No malicious files found. See full and IOC report for all dropped files.
