top title background image
flash

YzvM4Dzoe3.exe

Status: finished
Submission Time: 2025-03-05 08:06:22 +01:00
Malicious
Trojan
Spyware
Evader
FormBook

Comments

Tags

  • exe

Details

  • Analysis ID:
    1629805
  • API (Web) ID:
    1629805
  • Original Filename:
    560297694fdfa9152e07a9961ddc3abe.exe
  • Analysis Started:
    2025-03-05 08:09:15 +01:00
  • Analysis Finished:
    2025-03-05 08:21:04 +01:00
  • MD5:
    560297694fdfa9152e07a9961ddc3abe
  • SHA1:
    c1e70913954ee51762ba0d6361a08ad467517f7d
  • SHA256:
    fe290aa1e7d15fe57535dc61d027008d209eea93d48656a2f0022e921d0419a3
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 100
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious
Score: 36/71
malicious
Score: 23/38

IPs

IP Country Detection
37.27.60.109
Iran (ISLAMIC Republic Of)
92.204.40.98
Germany
47.83.1.90
United States
Click to see the 7 hidden entries
13.248.243.5
United States
3.33.130.190
United States
213.142.151.128
Turkey
162.255.118.67
United States
13.248.169.48
United States
209.74.77.230
United States
208.91.197.27
Virgin Islands (BRITISH)

Domains

Name IP Detection
shedsworld.shop
162.255.118.67
www.vaishnavi.xyz
92.204.40.98
temecula.deals
3.33.130.190
Click to see the 19 hidden entries
www.jplttj.info
47.83.1.90
www.minimalbtc.xyz
13.248.169.48
etkisigorta.net
213.142.151.128
www.teschi.xyz
13.248.169.48
leadmagnetkpis.shop
37.27.60.109
pond-magic.shop
3.33.130.190
statusq.studio
13.248.243.5
www.hypereth.xyz
13.248.169.48
www.temecula.deals
0.0.0.0
www.etkisigorta.net
0.0.0.0
www.statusq.studio
0.0.0.0
www.pond-magic.shop
0.0.0.0
www.shedsworld.shop
0.0.0.0
www.agistaking.xyz
13.248.169.48
www.leadmagnetkpis.shop
0.0.0.0
www.zeniow.xyz
209.74.77.230
www.needethereum.xyz
13.248.169.48
www.anartisthuman.info
208.91.197.27
www.multo.xyz
13.248.169.48

URLs

Name Detection
http://www.pond-magic.shop/vhzb/
http://www.pond-magic.shop/vhzb/?-LvlGZE=utPv65Al4AswLtqgWRe3ePfSt6SPVttJesMXOpbeQKe44HKKs52W877CGyD4DHSN7+a2Yf/CJoqiZidKfHg2vAIsF7tZ6NAE+KlaPfyrTJqMEFD7iTn2rP8=&Ct=22hdcxNxtf6L
http://www.vaishnavi.xyz/fepe/
Click to see the 40 hidden entries
http://www.multo.xyz/dlol/?-LvlGZE=Vdu1QfmsuFO68GL+Yo06CwJGJymLjNF/HVgaJhop4EyQK8uQubyUW4cBOiiKJiObJ4wKBbVY5G9jJ/R2VpbOhBz5OOEmLuxZz8s+rj8PrnFXTgDFMZOWjEk=&Ct=22hdcxNxtf6L
http://www.etkisigorta.net/dptk/
http://www.leadmagnetkpis.shop/osf3/
http://www.agistaking.xyz/c8u0/
http://www.teschi.xyz/61ci/
http://www.etkisigorta.net/dptk/?-LvlGZE=e4lEmJRw1X3MAjSYGIjDSnN8jl4ac7qjwwtONtIYttYUo06Shgza4swsp0woMH3hm8CpxmF9fuGJOZh+di6zfIiA7Nb1dJBkqn3YB4kzQiqrgwxvhvdMXtM=&Ct=22hdcxNxtf6L
http://www.jplttj.info/qk2k/
http://www.needethereum.xyz/7t1k/?Ct=22hdcxNxtf6L&-LvlGZE=FU89ini0gnpj8wdpPBMGpAVskAn1UdonDWusiqXcZKGzkaK/1F4vvL3EfhyLSPgSo+LbaTvmAGQC6/BbkgpRV65AwkX62uUzvtdVkaaLjNS7sz+aeRdQoCI=
http://www.shedsworld.shop/n4wf/?-LvlGZE=rVCo5fXTYf5XtykwsowgOgyfKIdvAwAzvtD+QqvRz6GEPZVd3pXymvzcnaunGoGBfELUwvvDGnhmjqKacrEZI55leTjExH3Nz5U4DzOJHqsJ3BIj2WedujI=&Ct=22hdcxNxtf6L
http://www.shedsworld.shop/n4wf/
http://www.multo.xyz/dlol/
http://www.anartisthuman.info/q5nb/?Ct=22hdcxNxtf6L&-LvlGZE=cbGNT1GwMlz4ZJSzjKDU+C7Pp0vHEGr/otaQaC2lDUNXgkD5XcZBKJp94L4r/sunAAfx3aeZsm6/D88jzdrZbuT3yHfVolmqo6okwL/ckSF0k3mi6InIM5k=
http://www.needethereum.xyz/7t1k/
http://www.jplttj.info/qk2k/?Ct=22hdcxNxtf6L&-LvlGZE=zY4n8QAiFtM8TD8YQ0kYo6/hMEvEkAYA24wL1FxNqii4aPOxIUlgh0bkY4109PjUwHAiRcSBahvbei9zCgo+J/3wPUyBIVfQQCVad+m+6tQkdN0U8hwecy4=
http://www.vaishnavi.xyz/fepe/?-LvlGZE=jiDu0CXVCwpoArsYozBYTrMLw7gxwVtrzDT1KVnw4j8dDuCAxj6eals1FrYUwp3xSMa6xfrVZjPXN8LVbxOcPRAjdJAxqH4JrQwToWN78+HtHZwdObFckRE=&Ct=22hdcxNxtf6L
http://www.zeniow.xyz/ia4f/
http://www.hypereth.xyz/6xo5/
http://www.statusq.studio/tjfr/?-LvlGZE=oeA4QLnOH/3WbFs9PM0fKcyBx1tzLWGqvIOaenlxWlzTKKLdy4N9FqO9ICkLpn8uqiStNuNSb3U7oeFyCJ1fI6IUeEGy2muaLg0ecjYD6XTT+QAGcwIlk18=&Ct=22hdcxNxtf6L
http://www.minimalbtc.xyz/mtvj/
http://www.hypereth.xyz/6xo5/?Ct=22hdcxNxtf6L&-LvlGZE=i9xdm+ALzRl7f5f3M1McvuQG0VSd9ETJI9ZdcFfBGFNnzYFCdNUFlM+uOZyz474awBsJacKcKaOyZI4sgzqWiPNAQeVPsu3GBQmtJHoMJj35cs0U11QQzQw=
http://www.agistaking.xyz/c8u0/?-LvlGZE=FMJVgFO6r2fqsFEl7D1RsSoAGguGxcVuwnCszuFGPNY4Pf96ze7C0LpVaGXgsqc5GUWtyfXO8eoeNGfDqQZm/VEJ0LALjOeAiKwhVh+k0Wh5+kai7XrDj9Q=&Ct=22hdcxNxtf6L
http://www.statusq.studio/tjfr/
http://www.anartisthuman.info/q5nb/
http://www.minimalbtc.xyz/mtvj/?-LvlGZE=tu3KCU12euk3jntKr+XY8WK5WlRkVOn9dMqnbhdhpzwTmQJtahFuTjZWW0ZiDwPS2UOKmgPWbSHzrHdc9Mrf14ZD3qWJBW8qgxBPFSZZJN6AW62s1+zxi5U=&Ct=22hdcxNxtf6L
http://www.leadmagnetkpis.shop/osf3/?-LvlGZE=qdQBppsERjq7BhOPgdZkJJFuL0KdwujXC4cQUFozvYIOjfFpJKWSpe0DgZI9+reaG0YY1Kc/55fF3gopW6qy594/RMA4cgCnQWPtKX5WdInFRzgKF/zB5gY=&Ct=22hdcxNxtf6L
http://www.temecula.deals/xwqx/?-LvlGZE=otmcxnJvFIgVfYDZLRjB3oZ+qAMcmh5K0YH/99vZ/T7EZjaL7WFZt05WCoTvh/+8v51SLvod9F2a5wifQuDxN12KB0RYjEfBsXYE1mhsId+ln3uXkMT2Jag=&Ct=22hdcxNxtf6L
https://customerservice.web.com/prweb/PRAuth/app/WebKM_/JfLhd8LVz0a16-h3GqsHOCqqFky5N_vd
https://browsehappy.com/
https://www.networksolutions.com/
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
https://assets.web.com/legal/English/MSA/v1.0.0.3/ServicesAgreement.pdf
https://ac.ecosia.org/autocomplete?q=
https://www.ecosia.org/newtab/
https://duckduckgo.com/ac/?q=
https://dts.gnpge.com
http://www.etkisigorta.net
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
https://duckduckgo.com/chrome_newtab
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=

Dropped files

No malicious files found. See full and IOC report for all dropped files.