Edit tour
Windows
Analysis Report
Desligar Tr. SE SSR.lnk
Overview
General Information
| Sample name: | Desligar Tr. SE SSR.lnk |
| Analysis ID: | 1467006 |
| MD5: | 46f8d7e32948c41618897eda16b531f6 |
| SHA1: | 916f301acea34f93fc63138b762291972e4be6e3 |
| SHA256: | 36c86fe2b4eb9c37228c1a52fc61c9d1f6affba3af18803ba756659b28a657f3 |
 | |
Errors
| |
Detection
| Score: | 0 |
| Range: | 0 - 100 |
| Whitelisted: | false |
| Confidence: | 100% |
Signatures
No high impact signatures.
Classification
⊘No configs have been found
⊘No yara matches
⊘No Sigma rule has matched
⊘No Snort rule has matched
Click to jump to signature section
Show All Signature Results
There are no malicious signatures, click here to show all signatures.
| Source: | Classification label: | ||
| Source: | LNK file: | ||
⊘No Mitre Att&ck techniques found
This section contains all screenshots as thumbnails, including those not shown in the slideshow.
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
| Joe Sandbox version: | 40.0.0 Tourmaline |
| Analysis ID: | 1467006 |
| Start date and time: | 2024-07-03 16:21:54 +02:00 |
| Joe Sandbox product: | CloudBasic |
| Overall analysis duration: | 0h 1m 27s |
| Hypervisor based Inspection enabled: | false |
| Report type: | full |
| Cookbook file name: | default.jbs |
| Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
| Number of analysed new started processes analysed: | 1 |
| Number of new started drivers analysed: | 0 |
| Number of existing processes analysed: | 0 |
| Number of existing drivers analysed: | 0 |
| Number of injected processes analysed: | 0 |
| Technologies: |
|
| Analysis Mode: | default |
| Analysis stop reason: | Timeout |
| Sample name: | Desligar Tr. SE SSR.lnk |
| Detection: | UNKNOWN |
| Classification: | unknown0.winLNK@0/0@0/0 |
| Cookbook Comments: |
|
- No process behavior to analyse as no analysis process or sample was found
- Corrupt sample or wrongly selected analyzer. Details: The operation was canceled by the user.
- Exclude process from analysis (whitelisted): dllhost.exe
- Excluded IPs from analysis (whitelisted): 40.115.3.253
- Excluded domains from analysis (whitelisted): client.wns.windows.com, wns.notify.trafficmanager.net
- VT rate limit hit for: Desligar Tr. SE SSR.lnk
⊘No simulations
⊘No created / dropped files found
| File type: | |
| Entropy (8bit): | 5.1111422761559595 |
| TrID: |
|
| File name: | Desligar Tr. SE SSR.lnk |
| File size: | 625 bytes |
| MD5: | 46f8d7e32948c41618897eda16b531f6 |
| SHA1: | 916f301acea34f93fc63138b762291972e4be6e3 |
| SHA256: | 36c86fe2b4eb9c37228c1a52fc61c9d1f6affba3af18803ba756659b28a657f3 |
| SHA512: | 9c5f5db60de2e5652a5e73d3ded378603c4009f237643b0129b254ca6f7ea70d75f55cc0f4ad2070b58ce0139fbf4091a7c578af023b4a946ffbac0174027eeb |
| SSDEEP: | 12:8iFi8pzYNbRvcXkBl4wcjCtOV9n5BMqQ/Lm4pBm:8K8nqOluC49nHwm4pBm |
| TLSH: | 6CF08B3257823F9BF275A03789B55267EA22AC5BFAB05B0906D4439548B8A00A584F3A |
| File Content Preview: | L..................F.. .....v/.<.....?..J.......J................................P.O. .:i.....+00.:...:...,.LB.).....A&...&........C).......3mH...A.7mH.....t.1......X.i..DESLIG~1.SES..X........X"N.X.i..........P...............@.x.D.e.s.l.i.g.a.r. .T.r... |
 | |
| Icon Hash: | 30b4b4b464696d0d |
General | |
|---|---|
| Relative Path: | ..\..\..\..\..\Desktop\Desligar Tr. SE SSR |
| Command Line Argument: | |
| Icon location: | |
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library Node⊘No network behavior found
⊘No statistics
⊘No system behavior
⊘No disassembly