rtransferencia_345335.exe
| Engine | Download Report | Detection | Info |
|---|---|---|---|
|
|
malicious
Score: 100
|
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
|
| IP | Country | Detection |
|---|---|---|
| 149.154.167.220 | United Kingdom |  |
| 104.21.16.1 | United States | |
| 142.250.184.225 | United States | |
| Click to see the 2 hidden entries | ||
| 142.250.184.238 | United States | |
| 132.226.247.73 | United States | |
| Name | IP | Detection |
|---|---|---|
| drive.google.com | 142.250.184.238 | |
| drive.usercontent.google.com | 142.250.184.225 | |
| reallyfreegeoip.org | 104.21.16.1 | |
| Click to see the 4 hidden entries | ||
| api.telegram.org | 149.154.167.220 | |
| checkip.dyndns.com | 132.226.247.73 | |
| checkip.dyndns.org | 0.0.0.0 | |
| 206.23.85.13.in-addr.arpa | 0.0.0.0 | |
| Name | Detection |
|---|---|
| https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search | |
| http://aborters.duckdns.org:8081 | |
| https://ac.ecosia.org/autocomplete?q= | |
| Click to see the 38 hidden entries | |
| https://www.google.com | |
| http://checkip.dyndns.org/ | |
| http://nsis.sf.net/NSIS_Error | |
| https://www.office.com/4 | |
| https://api.telegram.org/bot/sendMessage?chat_id=&text=%20%0D%0A%0D%0APC%20Name:506013%0D%0ADate%20a | |
| http://51.38.247.67:8081/_send_.php?L | |
| https://drive.google.com/ | |
| http://anotherarmy.dns.army:8081 | |
| http://varders.kozow.com:8081 | |
| https://chrome.google.com/webstore?hl=enlB | |
| https://reallyfreegeoip.org/xml/8.46.123.189$ | |
| https://reallyfreegeoip.org | |
| https://apis.google.com | |
| http://api.telegram.org | |
| https://api.telegram.org/bot/sendMessage?chat_id=&text=%20%0D%0A%0D%0APC%20Name:506013%0D%0ADate%20and%20Time:%2014/02/2025%20/%2004:18:33%0D%0ACountry%20Name:%20United%20States%0D%0A%5B%20506013%20Clicked%20on%20the%20File%20If%20you%20see%20nothing%20this's%20mean%20the%20system%20storage's%20empty.%20%5D | |
| http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name | |
| https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q= | |
| https://reallyfreegeoip.org/xml/ | |
| https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q= | |
| https://www.office.com/ | |
| https://drive.usercontent.google.com/i | |
| https://duckduckgo.com/chrome_newtab | |
| https://duckduckgo.com/ac/?q= | |
| https://reallyfreegeoip.org/xml/8.46.123.189 | |
| https://api.telegram.org | |
| https://www.google.com/images/branding/product/ico/googleg_lodp.ico | |
| https://api.telegram.org/bot | |
| https://www.office.com/lB | |
| https://api.telegram.org/bot7860252135:AAFnqHLJ-Ng3O61cPpFaVL17gS5Ru2j08qg/sendDocument?chat_id=744079942&caption=%20Pc%20Name:%20user%20%7C%20/%20VIP%20Recovery%20%5C%0D%0A%0D%0APW%20%7C%20user%20%7C%20VIP%20Recovery | |
| https://drive.usercontent.google.com/ | |
| http://checkip.dyndns.org | |
| https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command= | |
| https://chrome.google.com/webstore?hl=en4 | |
| http://nsis.sf.net/NSIS_ErrorError | |
| https://api.telegram.org/bot/sendMessage?chat_id=&text= | |
| https://chrome.google.com/webstore?hl=en | |
| https://www.ecosia.org/newtab/ | |
| https://api.telegram.org/bot7860252135:AAFnqHLJ-Ng3O61cPpFaVL17gS5Ru2j08qg/sendDocument?chat_id=7440 | |
No malicious files found. See full and IOC report for all dropped files.
