Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
MBD573792309-CGO7238929273-XDG02823929.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
||
C:\Users\user\AppData\Local\Temp\snaith
|
data
|
dropped
|
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Users\user\Desktop\MBD573792309-CGO7238929273-XDG02823929.exe
|
"C:\Users\user\Desktop\MBD573792309-CGO7238929273-XDG02823929.exe"
|
||
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
|
"C:\Users\user\Desktop\MBD573792309-CGO7238929273-XDG02823929.exe"
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt0#
|
unknown
|
||
https://sectigo.com/CPS0
|
unknown
|
||
https://account.dyn.com/
|
unknown
|
||
http://ocsp.sectigo.com0
|
unknown
|
||
http://cp8nl.hyperhost.ua
|
unknown
|
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
cp8nl.hyperhost.ua
|
185.174.175.187
|
||
ax-0001.ax-msedge.net
|
150.171.28.10
|
||
fp2e7a.wpc.phicdn.net
|
192.229.221.95
|
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
185.174.175.187
|
cp8nl.hyperhost.ua
|
Ukraine
|
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
3329000
|
trusted library allocation
|
page read and write
|
||
32B1000
|
trusted library allocation
|
page read and write
|
||
402000
|
system
|
page execute and read and write
|
||
3B30000
|
direct allocation
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
46BD000
|
direct allocation
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
1640000
|
heap
|
page read and write
|
||
A30000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
46B9000
|
direct allocation
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
3030000
|
trusted library allocation
|
page read and write
|
||
6500000
|
heap
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
A2E000
|
stack
|
page read and write
|
||
3110000
|
trusted library allocation
|
page execute and read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
6780000
|
trusted library allocation
|
page execute and read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
46B9000
|
direct allocation
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
5CFE000
|
stack
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
1480000
|
heap
|
page read and write
|
||
46BD000
|
direct allocation
|
page read and write
|
||
596E000
|
stack
|
page read and write
|
||
9A000
|
stack
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
110000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
4590000
|
direct allocation
|
page read and write
|
||
57AA000
|
trusted library allocation
|
page read and write
|
||
68E0000
|
trusted library allocation
|
page read and write
|
||
42B1000
|
trusted library allocation
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
3046000
|
trusted library allocation
|
page execute and read and write
|
||
32A0000
|
heap
|
page execute and read and write
|
||
59AE000
|
stack
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
407A000
|
heap
|
page execute and read and write
|
||
3325000
|
trusted library allocation
|
page read and write
|
||
472E000
|
direct allocation
|
page read and write
|
||
590C000
|
stack
|
page read and write
|
||
57B1000
|
trusted library allocation
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
A5E000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
407A000
|
heap
|
page read and write
|
||
57AE000
|
trusted library allocation
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
472E000
|
direct allocation
|
page read and write
|
||
67ED000
|
stack
|
page read and write
|
||
3DB5000
|
heap
|
page read and write
|
||
17E0000
|
heap
|
page read and write
|
||
A5A000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
3103000
|
heap
|
page read and write
|
||
46BD000
|
direct allocation
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
1C0000
|
heap
|
page read and write
|
||
322F000
|
stack
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
490000
|
unkown
|
page write copy
|
||
3F40000
|
heap
|
page read and write
|
||
8AF000
|
stack
|
page read and write
|
||
1400000
|
heap
|
page read and write
|
||
3EC3000
|
heap
|
page read and write
|
||
1437000
|
heap
|
page read and write
|
||
6770000
|
trusted library allocation
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
579E000
|
trusted library allocation
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
52B8000
|
trusted library allocation
|
page read and write
|
||
3F0C000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
46B9000
|
direct allocation
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
4A7000
|
unkown
|
page read and write
|
||
472E000
|
direct allocation
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
43F0000
|
direct allocation
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
67F0000
|
trusted library allocation
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
46B9000
|
direct allocation
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
1408000
|
heap
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
2EF4000
|
heap
|
page read and write
|
||
2EF0000
|
heap
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
14E2000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
A50000
|
heap
|
page read and write
|
||
57BD000
|
trusted library allocation
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
167D000
|
trusted library allocation
|
page execute and read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
14CC000
|
heap
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
123A000
|
stack
|
page read and write
|
||
165000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
14F8000
|
heap
|
page read and write
|
||
3B3E000
|
heap
|
page read and write
|
||
3CF0000
|
heap
|
page read and write
|
||
400000
|
system
|
page execute and read and write
|
||
401D000
|
heap
|
page read and write
|
||
6A8D000
|
stack
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
4590000
|
direct allocation
|
page read and write
|
||
3040000
|
trusted library allocation
|
page read and write
|
||
68D7000
|
trusted library allocation
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
407A000
|
heap
|
page read and write
|
||
406A000
|
heap
|
page read and write
|
||
6740000
|
trusted library allocation
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
3057000
|
trusted library allocation
|
page execute and read and write
|
||
43F0000
|
direct allocation
|
page read and write
|
||
3042000
|
trusted library allocation
|
page read and write
|
||
3EA4000
|
heap
|
page read and write
|
||
490000
|
unkown
|
page read and write
|
||
303D000
|
trusted library allocation
|
page execute and read and write
|
||
400000
|
unkown
|
page readonly
|
||
401C000
|
heap
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
6748000
|
trusted library allocation
|
page read and write
|
||
3250000
|
trusted library allocation
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
30BE000
|
stack
|
page read and write
|
||
688E000
|
stack
|
page read and write
|
||
990000
|
heap
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
57B6000
|
trusted library allocation
|
page read and write
|
||
43F0000
|
direct allocation
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
3260000
|
trusted library allocation
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
406A000
|
heap
|
page read and write
|
||
1680000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
46BD000
|
direct allocation
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
544D000
|
stack
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
A8A000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
3EB7000
|
heap
|
page read and write
|
||
14A6000
|
heap
|
page read and write
|
||
3050000
|
trusted library allocation
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
7050000
|
trusted library allocation
|
page execute and read and write
|
||
401D000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
42D9000
|
trusted library allocation
|
page read and write
|
||
160000
|
heap
|
page read and write
|
||
3E30000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
59B0000
|
heap
|
page execute and read and write
|
||
401C000
|
heap
|
page read and write
|
||
1660000
|
trusted library allocation
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
304A000
|
trusted library allocation
|
page execute and read and write
|
||
401D000
|
heap
|
page read and write
|
||
3331000
|
trusted library allocation
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
57A2000
|
trusted library allocation
|
page read and write
|
||
3E15000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
401C000
|
heap
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
482000
|
unkown
|
page readonly
|
||
5CBE000
|
stack
|
page read and write
|
||
3270000
|
trusted library allocation
|
page read and write
|
||
3BF0000
|
heap
|
page read and write
|
||
13F0000
|
heap
|
page read and write
|
||
4316000
|
trusted library allocation
|
page read and write
|
||
3052000
|
trusted library allocation
|
page read and write
|
||
472E000
|
direct allocation
|
page read and write
|
||
4590000
|
direct allocation
|
page read and write
|
||
4513000
|
direct allocation
|
page read and write
|
||
57C2000
|
trusted library allocation
|
page read and write
|
||
4513000
|
direct allocation
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
124E000
|
stack
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
A35000
|
heap
|
page read and write
|
||
5BBE000
|
stack
|
page read and write
|
||
5796000
|
trusted library allocation
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
30FC000
|
stack
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
3DDB000
|
heap
|
page read and write
|
||
7250000
|
heap
|
page read and write
|
||
43F0000
|
direct allocation
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
3E26000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
4025000
|
heap
|
page read and write
|
||
472E000
|
direct allocation
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
15E000
|
stack
|
page read and write
|
||
46BD000
|
direct allocation
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
363E000
|
stack
|
page read and write
|
||
100000
|
heap
|
page read and write
|
||
43F0000
|
direct allocation
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
3A4D000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
3318000
|
trusted library allocation
|
page read and write
|
||
3EF0000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
3230000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
3FB9000
|
heap
|
page read and write
|
||
67A0000
|
trusted library allocation
|
page execute and read and write
|
||
3F40000
|
heap
|
page read and write
|
||
472E000
|
direct allocation
|
page read and write
|
||
5ABC000
|
stack
|
page read and write
|
||
6574000
|
heap
|
page read and write
|
||
63EF000
|
stack
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
3070000
|
trusted library allocation
|
page read and write
|
||
7010000
|
trusted library allocation
|
page read and write
|
||
1AE000
|
stack
|
page read and write
|
||
482000
|
unkown
|
page readonly
|
||
401D000
|
heap
|
page read and write
|
||
57D0000
|
heap
|
page read and write
|
||
6ECE000
|
stack
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
6790000
|
trusted library allocation
|
page read and write
|
||
13A0000
|
heap
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
4AB000
|
unkown
|
page readonly
|
||
401C000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
14DA000
|
heap
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
43E000
|
system
|
page execute and read and write
|
||
401C000
|
heap
|
page read and write
|
||
9EE000
|
stack
|
page read and write
|
||
4AB000
|
unkown
|
page readonly
|
||
4513000
|
direct allocation
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
164F000
|
stack
|
page read and write
|
||
3280000
|
trusted library allocation
|
page read and write
|
||
1510000
|
heap
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
3DFE000
|
heap
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
1673000
|
trusted library allocation
|
page execute and read and write
|
||
401C000
|
heap
|
page read and write
|
||
6DCE000
|
stack
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
68CE000
|
stack
|
page read and write
|
||
4513000
|
direct allocation
|
page read and write
|
||
4590000
|
direct allocation
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
6796000
|
trusted library allocation
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
42F3000
|
heap
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
407B000
|
heap
|
page read and write
|
||
7F240000
|
trusted library allocation
|
page execute and read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
89F000
|
stack
|
page read and write
|
||
4513000
|
direct allocation
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
4590000
|
direct allocation
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
3EFA000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
1515000
|
heap
|
page read and write
|
||
2E01000
|
heap
|
page read and write
|
||
3100000
|
heap
|
page read and write
|
||
1674000
|
trusted library allocation
|
page read and write
|
||
46BD000
|
direct allocation
|
page read and write
|
||
46B9000
|
direct allocation
|
page read and write
|
||
3A3F000
|
stack
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
1339000
|
stack
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
3DD7000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
4590000
|
direct allocation
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
407F000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
1435000
|
heap
|
page read and write
|
||
6581000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
142A000
|
heap
|
page read and write
|
||
2EB0000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
43F0000
|
direct allocation
|
page read and write
|
||
406A000
|
heap
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
||
1670000
|
trusted library allocation
|
page read and write
|
||
3F40000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
46B9000
|
direct allocation
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
401D000
|
heap
|
page read and write
|
||
68D0000
|
trusted library allocation
|
page read and write
|
||
3120000
|
heap
|
page read and write
|
||
7040000
|
heap
|
page read and write
|
||
401C000
|
heap
|
page read and write
|
||
579B000
|
trusted library allocation
|
page read and write
|
||
5790000
|
trusted library allocation
|
page read and write
|
||
3055000
|
trusted library allocation
|
page execute and read and write
|
||
4513000
|
direct allocation
|
page read and write
|
||
305B000
|
trusted library allocation
|
page execute and read and write
|
||
401C000
|
heap
|
page read and write
|
||
677C000
|
trusted library allocation
|
page read and write
|
||
3FB3000
|
heap
|
page read and write
|
There are 409 hidden memdumps, click here to show them.