top title background image
flash

Electronic Order.exe

Status: finished
Submission Time: 2024-07-11 14:58:04 +02:00
Malicious
Trojan
Evader
Spyware
FormBook

Comments

Tags

  • exe
  • Formbook

Details

  • Analysis ID:
    1471496
  • API (Web) ID:
    1471496
  • Analysis Started:
    2024-07-11 14:58:04 +02:00
  • Analysis Finished:
    2024-07-11 15:13:58 +02:00
  • MD5:
    f44d956aa3a0c41f8e8ca7d9e9ead69c
  • SHA1:
    5d4cd96731237a1d8a8e03aa078b0bda9d2296a3
  • SHA256:
    48bae1515ac732f33a6fbd725dfb29fe55132b1f446f0efa201c1ad10cf0b1f6
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
malicious
Score: 92
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
malicious
Score: 100
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run Condition: Run with higher sleep bypass

Third Party Analysis Engines

malicious
Score: 19/38
malicious

IPs

IP Country Detection
188.114.97.3
European Union
154.222.238.52
Seychelles
188.114.96.3
European Union
Click to see the 5 hidden entries
103.42.108.46
Australia
134.122.138.60
United States
35.212.86.52
United States
162.254.38.56
United States
142.250.186.115
United States

Domains

Name IP Detection
www.dynamologistics.net
35.212.86.52
weien.cdn.youziyuncdn.com
134.122.138.60
www.dtalusering.com
103.42.108.46
Click to see the 9 hidden entries
www.ffi07s.xyz
188.114.97.3
www.globaltrend.xyz
188.114.96.3
huayang.302.gn301.xyz
154.222.238.52
www.alphacentura.com
188.114.97.3
www.dospole.top
162.254.38.56
www.u9games.xyz
0.0.0.0
www.xn72dkd7scx.shop
0.0.0.0
www.j51a.xyz
0.0.0.0
ghs.googlehosted.com
142.250.186.115

URLs

Name Detection
http://www.alphacentura.com/mnr7/
http://www.dtalusering.com/la5g/
http://www.dospole.top/soqq/
Click to see the 28 hidden entries
http://www.ffi07s.xyz/y7ar/?GX=iP9xCL&bB=MrLs2OZQS9tqlK4Srgs+GAHAbHC9a9uyqM6nyvTx+aYY18R7NjkvoreXBqubaQ9RYarkm74io0l/Sb1qLPuR4+YifOOZ+EhKqCv3QpVMh7JIatK9VOcTaRm42vaE2swrp5p8moc=
http://www.alphacentura.com/mnr7/?GX=iP9xCL&bB=pvT+HB9YRKI+POQx0b/M/ubgxhqpaEX2BZjJkbsJzaX5mdbcin6Kt2D9XOjpJuvlAq8EfVvHU99Z+IER5VLxuPSiXshxZ6wDjjo+Bu7fQW2AB1/UcYCTUQt5fsneQZKM7Qry97A=
http://www.dynamologistics.net/s992/
http://www.dtalusering.com/la5g/?bB=1PPV6OmQtv6ujzxmde6xwEMvtAHXmjw0ET0xU8GpAjXY4BrLKK8c6E8QLqBoUjQmvUIqtY3TT4ZQ1NARuPdgux8tOuN0aZLZltNFIk/K42/BpKJFGlwhqT0DSxlttxHpFsGsCOs=&GX=iP9xCL
http://www.dynamologistics.net/s992/?bB=bPW5wL+6+Zn0FmJaaGSlZRyF0EkywNPIdxoHB7misPGpWoJmvT99WPeeVFPeE+QW7lFzZIe3p3wvC9c3tru/pp3mulo7axc+TzXdoadqFnX1TrnWwrCFMVfzI6hQm88OLivvE0I=&GX=iP9xCL
http://www.j51a.xyz/y0md/
http://www.xn72dkd7scx.shop/emnz/?bB=oBBn57UjS7mF6OBjtXCA4K/r3FCs+xzFf261ivHj6HGHsVKs3oxX4EX17CbJWppp6g6A8fr9hGSE2paVCFK87Qltir3slpfPozUvsqGQgAfOSyHKAppI3MtD1Vl5l86WUTbGvYQ=&GX=iP9xCL
http://www.ffi07s.xyz/y7ar/
http://www.globaltrend.xyz/srh8/
http://www.globaltrend.xyz/srh8/?bB=IQYINTaWkaojOw8AeeCEPfEIeYkq+BJ0MxZ2KDKAvD89Td2DcEp1Lez+9d6wDeiGuMtHeyxXV+kcq5RzRjH8Xk/GO/xLSHXoOvEtt1Rw61dZpGC5bSCzmgdK2DCxRFg+STwXV1g=&GX=iP9xCL
http://www.xn72dkd7scx.shop/emnz/
http://www.dospole.top/soqq/?bB=drOPoC+fcqVNsUc6VHZGLsfUz53xK80s09TfdoGgIRC+cuJysSYyQ9s+Q6Hx730bczsRaNUrXI+2DBjO7h7k16wibVueXlEfGw9FaQEmodkJNWHPkyZ3qvHXqJK/emHwRvwAPtc=&GX=iP9xCL
http://www.u9games.xyz/5p8u/?bB=BWPzmKqqe8/bm9Y7L5+Meub8zzKE0bi08FFPHLb+gDk5IVms6Q4x1dlGioX/f7BYVBQYq1+WtKZplIRrH9tE4pdkHQNYCcMydqGB2gqLe2sbuiq25D1rJ1mxG6bIX3u8VlvncNw=&GX=iP9xCL
https://www.u9games.xyz/5p8u/?bB=BWPzmKqqe8/bm9Y7L5
https://badges.ausowned.com.au/07634
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
https://www.xn72dkd7scx.shop/emnz/?bB=oBBn57UjS7mF6OBjtXCA4K/r3FCs
https://ac.ecosia.org/autocomplete?q=
https://duckduckgo.com/chrome_newtab
https://ventraip.com.au/favicon.ico
https://www.ecosia.org/newtab/
http://www.dospole.top
https://http.gn301.com:12345/?u=
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
http://www.globaltrend.xyz
https://duckduckgo.com/ac/?q=

Dropped files

No malicious files found. See full and IOC report for all dropped files.