top title background image
flash

Aktivasyon İçin Gerekli Belgeler.exe

Status: finished
Submission Time: 2024-05-23 20:23:13 +02:00
Malicious
Trojan
Evader
DBatLoader

Comments

Tags

  • exe
  • geo
  • TUR

Details

  • Analysis ID:
    1446749
  • API (Web) ID:
    1446749
  • Analysis Started:
    2024-05-23 20:42:25 +02:00
  • Analysis Finished:
    2024-05-23 20:55:08 +02:00
  • MD5:
    6eb3c26de9d21fa61aa92f2d19bcf450
  • SHA1:
    ede9c5bf196071ee932f6ab54605f03c72cb1897
  • SHA256:
    5c98d8c31250acd5f9e8a8e6a7d09f2660dbf817c2a8b8830941038befd2d461
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 92
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
malicious
Score: 92
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run Condition: Run with higher sleep bypass

Third Party Analysis Engines

malicious
Score: 19/38
malicious

IPs

IP Country Detection
13.107.137.11
United States

Domains

Name IP Detection
onedrive.live.com
0.0.0.0
dual-spov-0006.spov-msedge.net
13.107.137.11

URLs

Name Detection
https://onedrive.live.com/download?resid=615F28E37122FCCF%21454&authkey=
https://onedrive.live.com/download?resid=615F28E37122FCCF%21454&authkey=!AMrjS-wzkYMgoUY
https://onedrive.live.com/downlo
Click to see the 37 hidden entries
https://onedrive.live.com/
https://onedrive.live.com/downloq
https://live.com/.
https://github.com/login/oauth/authorize?response_type=code&client_id=e37ffdec11c0245cb2e0&scope=rea
https://logincdn.msftauth.net/16.000.30238.3/images/favicon.ico
https://live.com/
https://onedrive.live.com/2F
https://live.com/77
https://live.com/b
https://logincdn.msftauth
https://login.li1
https://live.com/k
https://onedrive.live.com/:
http://www.pmail.com
https://live.com/o
https://acctcdn.msftaut
https://live.com/0
https://acctcdn.msftauth.net/
https://logincdn.msftauth.net/shared/5/js/login_en_4O0b6RqY3eZ7LGrto-6h4w2.js
https://logincdn.msftauth.net/shared/1.0/
https://logincdn.msftauth.net
https://live.com/Z
https://login.li
https://logincdn.msftauth.net/shared/5/js/login_en_31OakWsQhbXgK7L_U0YNNw2.js
https://onedrive.live.com/e
https://onedrive.live.com:443/download?resid=615F28E37122FCCF%21454&authkey=
https://signup.live.com/?id=250206&contextid=B8D84174BAD991AA&opid=FD3AEBED64576F59&bk=1716489808&sr
https://live.com/E
https://live.com/w
https://p.sfx.ms/login/v1/header.html?id=250206&mkt=EN-US&cbcxt=sky
https://live.com/I
https://acctcdn.msftauth.net
https://logincdn.msftauth.net/
https://live.com/M
https://sc.imp.live.com/content/dam/imp/surfaces/mail_signin/v3/sky/EN-US.html?id=250206&mkt=EN-US&c
https://live.com/s
https://iframe.arkoselabs.com/B7D8911C-5CC8-A9A3-35B0-554ACEE604DA/index.html?mkt=en

Dropped files

No malicious files found. See full and IOC report for all dropped files.