top title background image
flash

c5WMpr1cOc.bat

Status: finished
Submission Time: 2024-10-02 06:09:06 +02:00
Malicious
Trojan
Evader

Comments

Tags

  • bat
  • filedn-com

Details

  • Analysis ID:
    1523865
  • API (Web) ID:
    1523865
  • Original Filename:
    201ba880456a79f7af54cb4aa5e9c008d8a1961e686acbac7b2f1343e697b7a9.bat
  • Analysis Started:
    2024-10-02 06:09:06 +02:00
  • Analysis Finished:
    2024-10-02 06:24:27 +02:00
  • MD5:
    1ff13790ed1131ef710192fd2a2957dd
  • SHA1:
    96871befc62dbb9aca8910e25e3cdfa4f13d0feb
  • SHA256:
    201ba880456a79f7af54cb4aa5e9c008d8a1961e686acbac7b2f1343e697b7a9
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 100
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious
Score: 12/63
malicious
Score: 10/38

IPs

IP Country Detection
142.250.185.228
United States
167.114.14.168
Canada
239.255.255.250
Reserved
Click to see the 4 hidden entries
158.69.117.119
Canada
167.114.14.170
Canada
95.181.182.182
Russian Federation
23.109.93.100
Netherlands

Domains

Name IP Detection
swtb-download.spyrix-sfk.com
167.114.14.168
spyrix.net
158.69.117.119
dashboard.spyrix.com
158.69.117.119
Click to see the 5 hidden entries
www.google.com
142.250.185.228
filedn.com
23.109.93.100
cl-e0469d03.edgecdn.ru
95.181.182.182
cdnbaynet.com
167.114.14.170
cdn.cdndownload.net
0.0.0.0

URLs

Name Detection
http://www.founder.com.cn/cn/bThe
https://cdn.cdndownload.net/dashboard30/assets/Button-ca236c00.css
https://swtb-download.spyrix-sfk.com/download/sfko
Click to see the 97 hidden entries
https://spyrix.net/dashboard/prg-actionsuu7
https://api.dropbox.com/1/fileops/copy?
https://cdn.cdndownload.net/dashboard30/assets/ButtonTemplate.module-c837805f.js
https://filedn.com
http://.css
http://neftali.clubdelphi.com/
https://swtb-download.spyrix-sfk.com/download/sfkf
https://spyrix.net/dashboard/prg-actionsuu/
https://spyrix.net/dashboard/prg-actionsv
http://www.jrsoftware.org/ishelp/index.php?topic=setupcmdlineSetupU
http://www.typography.netD
http://html4/loose.dtd
https://cdn.cdndownload.net/dashboard30/assets/ButtonText.vue_vue_type_script_setup_true_lang-1bda6e81.js
https://cdn.cdndownload.net/dashboard30/assets/Nunito-Regular-73dcaa51.woff2
https://api.dropbox.com/1/fileops/create_folder
http://repository.certum.pl/l3.cer0
http://www.ok.ru/dk?st.cmd=searchResult
http://www.actualkeylogger.com/help.html#registrate
https://spyrix.net/usr/monitor/access.txt
https://filedn.com/lHeD6Etwo8g0FE5cMVwEMkH/rtyRe243ohygdfrEewd234/
https://api.dropbox.com/1/metadata/sandbox
https://spyrix.net/das
https://api.dropbox.com/1/fileops/move
https://cdn.cdndownload.net/dashboard30/assets/ButtonText-ead06ca1.css
https://cdn.cdndownload.net/dashboard30/assets/Button.module-6d4e91b8.js
https://swtb-download.spyrix-sfk.com/download/sfk/sfk_setup.exeF
https://securcdn.com/loader/link.php?prg_id=sfkupowershell.exe
https://swtb-download.spyrix-sfk.com/download/sfk/sfk_setup.exe4
https://cdnbaynet.com/loader/link.php?prg_id=sfkX0
https://swtb-download.spyrix-sfk.com/download/sfk/sfk_setup.exe.
https://spyrix.net/dashboard/prg-actionsers
http://www.actualkeylogger.com/help.htmlhttp://spyrix.com/manual.phpU
https://swtb-download.spyrix-sfk.com/download/sfk/sfk_setup.exe7
https://swtb-download.spy
https://cdn.cdndownload.net/dashboard30/assets/Input.vue_vue_type_script_setup_true_lang-31858815.js
https://cdn.cdndownload.net/dashboard30/assets/Copyright.vue_vue_type_script_setup_true_lang-05301fe7.js
http://.jpg
https://filedn.com/lHeD6Etwo8g0FE5cMVwEMkH/56ysdvbdckuh27dqLygst354csjnd/404k
http://www.sandoll.co.kr
http://www.fonts.com
https://swtb-download.spyrix-sfk.com/download/sfk/sfk_setup.exeLOCALAPPDL
http://www.actualkeylogger.com/buynow.html
http://vk.com/searchecp
https://cdn.cdndownload.net/dashboard30/assets/en-5393c481.js
http://vk.com/search
https://dashboard.actualkeylogger.com
https://swtb-download.spyrix-sfk.com/download/sfkff
https://swtb-download.spyrix-sfk.com/download/sfk/sfk_setup.exem(ac
http://www.galapagosdesign.com/DPlease
https://dashboard.spyrix.com/cdn.js
https://spyrix.net/dashboard/prg-actions
https://swtb-download.spyrix-sfk.com/download/sfk/sfk_setup.exeLOCALAPPDATA=C:
https://cdnbaynet.com/loader/link.php?prg_id=sfkE
http://crl.certum.pl/ca.crl0:
https://cdnbaynet.com/loader/link.php?prg_id=sfkG
http://www.spyrix.com/pro_upgrade.htm?lic=
https://g.live.com/odclientsettings/Prod.C:
https://filedn.com/lHeD6Etwo8g0FE5cMVwEMkH/rtyRe243ohygdfrEewd234/s108
https://swtb-download.spyrix-sfk.com/download/sfk/sfk_setup.execurl.exe
https://cdnbaynet.com/loader/link.php?prg_id=sfkM
http://www.myspace.com/search/
http://www.indyproject.org/
http://www.fontbureau.com/designers
https://dashboard.spyrix.com/qqS
https://curl.haxx.se/libcurl/c/curl_easy_setopt.html
https://swtb-download.spyrix-sfk.com/download/sfk/sfk_setup.exen
https://Spyrix.net/dashboard/prg-list
https://spyrix.net/usr/monitor/
https://spyrix.net/dashboard/prg-actionstps://s
https://dashboard.spyrix.com/account/login-from-program
https://api.dropbox.com/1/fileops/copy
https://dashboard.spyrix.com/account/login-from-program?email=
https://cdnbaynet.com/loader/link.php?prg_id=sfk%
https://filedn.com/lHeD6Etwo8g0FE5cMVwEMkH/56ysdvbdckuh27dqLygst354csjnd/404l=
HTTPS://SPYRIX.NET/DASHBOARD/PRG-ACTIONS
https://api.dropbox.com/1/oauth/request_token?
https://filedn.com/lHeD6Etwo8g0FE5cMVwEMkH/56ysdvbdckuh27dqLygst354csjnd/404
http://www.carterandcone.coml
https://api-content.dropbox.com/1/files_put
https://cdn.cdndownload.net/dashboard30/assets/Modal-04ffda94.css
http://crl.ver)
https://api-content.dropbox.com/1/files/dropbox
https://filedn.com/lHeD6Etwo8g0FE5cMVwEMkH/56ysdvbdckuh27dqLygst354csjnd/404E
HTTPS://DASHBOARD.SPYRIX.COM/
https://api.dropbox.com/1/shares/dropbox
http://www.jrsoftware.org/0
https://spyrix.net/dashboard/proxy/upload
https://filedn.com/lHeD6Etwo8g0FE5cMVwEMkH/56ysdvbdckuh27dqLygst354csjnd/4047
http://www.innosetup.com/
https://spyrix.net/dashboard/prg-actionsll
https://g.live.com/1rewlive5skydrive/OneDriveProductionV2?OneDriveUpdate=9c123752e31a927b78dc96231b6
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
https://www.spyrix.com
https://swtb-download.spyrix-
http://www.zhongyicts.com.cn
https://cdn.cdndownload.net/dashboard30/assets/index-004f4025.js
https://api.dropbox.com/1/fileops/create_folder?

Dropped files

Name File Type Hashes Detection
C:\ProgramData\Security Monitor\{827D21CC-A22D-45D6-23CA-451DDAC769BA}\qrl.exe (copy)
PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
#
C:\ProgramData\Spyrix Free Keylogger\temp\reg\info.uid
Windows Registry little-endian text (Win2K or above)
#
C:\Users\user\AppData\Local\Temp\eb90c874-90f1-477e-bf8d-92cb4599bdb5\[space]= .exe
PE32 executable (GUI) Intel 80386, for MS Windows
#
Click to see the 1 hidden entries
C:\Users\user\AppData\Local\Temp\is-PQ3FT.tmp\[space]= .tmp
PE32 executable (GUI) Intel 80386, for MS Windows
#