top title background image
flash

COMMERCIAL INVOICE_pdf.exe

Status: finished
Submission Time: 2022-05-16 11:38:13 +02:00
Malicious
Trojan
Evader
FormBook

Comments

Tags

  • exe

Details

  • Analysis ID:
    627249
  • API (Web) ID:
    994753
  • Analysis Started:
    2022-05-16 11:42:57 +02:00
  • Analysis Finished:
    2022-05-16 11:56:18 +02:00
  • MD5:
    7924895d69c4de7b650589aa75aae4d7
  • SHA1:
    bf8f2cdd2f3008f72e8f25cae8f19dc09684f928
  • SHA256:
    f3b24e8727cb2cbd2261e7f426a6b393abb7e25fc3bd2e4fa2a249004f351305
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 100
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious
Score: 18/65
malicious
Score: 13/41
malicious

Domains

Name IP Detection
www.applelctn.info
0.0.0.0

URLs

Name Detection
http://www.anpost-onlinepayment.comReferer:
http://www.anpost-onlinepayment.com/s21e/www.ozrbc.top
http://www.anpost-onlinepayment.com/s21e/
Click to see the 62 hidden entries
www.myplan-netflix.com/s21e/
http://www.anpost-onlinepayment.com
http://www.inkgroupfinancial.com/s21e/www.antalplus.com
http://www.aaxeawa.site/s21e/
http://www.rockyourblocklikeaboss.comReferer:
http://www.nationallife.groupReferer:
http://www.ozrbc.top/s21e/
http://www.aaxeawa.site
http://www.scoplez.online
http://www.falcon.direct/s21e/www.nationallife.group
http://nsis.sf.net/NSIS_ErrorError
http://www.paint-werks.com/s21e/www.scoplez.online
http://www.nationallife.group/s21e/
http://www.banksracism.comReferer:
http://www.applelctn.info
http://www.maquininhauberaba.com
http://www.myplan-netflix.com
http://www.antalplus.com
http://www.rockyourblocklikeaboss.com/s21e/
http://www.myplan-netflix.com/s21e/
http://www.maquininhauberaba.comReferer:
http://www.rockyourblocklikeaboss.com/s21e/www.aaxeawa.site
http://www.falcon.directReferer:
http://www.antalplus.comReferer:
http://www.myplan-netflix.com/s21e/www.paint-werks.com
http://www.maquininhauberaba.com/s21e/
http://www.banksracism.com
http://www.falcon.direct
http://www.shimano.cc/s21e/www.bankloop.xyz
http://www.bankloop.xyzReferer:
http://www.falcon.direct/s21e/
http://www.antalplus.com/s21e/
http://www.aaxeawa.siteReferer:
http://www.inkgroupfinancial.comReferer:
http://www.myplan-netflix.comReferer:
http://www.rockyourblocklikeaboss.com
http://www.paint-werks.comReferer:
http://www.paint-werks.com/s21e/
http://www.scoplez.online/s21e/
http://www.banksracism.com/s21e/
http://www.inkgroupfinancial.com/s21e/
http://www.maquininhauberaba.com/s21e/www.rockyourblocklikeaboss.com
http://www.antalplus.com/s21e/www.maquininhauberaba.com
http://www.scoplez.online/s21e/www.banksracism.com
http://www.ozrbc.topReferer:
http://www.bankloop.xyz/s21e/
http://www.paint-werks.com
http://www.ozrbc.top
http://www.nationallife.group/s21e/www.myplan-netflix.com
http://www.shimano.ccReferer:
http://www.ozrbc.top/s21e/www.shimano.cc
http://www.scoplez.onlineReferer:
http://www.bankloop.xyz
http://www.applelctn.info/s21e/www.anpost-onlinepayment.com
http://www.aaxeawa.site/s21e/www.falcon.direct
http://www.applelctn.infoReferer:
http://www.nationallife.group
http://www.shimano.cc/s21e/
http://www.applelctn.info/s21e/
http://www.bankloop.xyz/s21e/www.inkgroupfinancial.com
http://www.inkgroupfinancial.com
http://www.shimano.cc

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Temp\rwyuja.exe
PE32 executable (console) Intel 80386, for MS Windows
#