Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
TT 0205O241694086-CREDIT001.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Temp\Halitherses
|
data
|
dropped
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\TT 0205O241694086-CREDIT001.exe
|
"C:\Users\user\Desktop\TT 0205O241694086-CREDIT001.exe"
|
|
|
|
C:\Windows\SysWOW64\svchost.exe
|
"C:\Users\user\Desktop\TT 0205O241694086-CREDIT001.exe"
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
400000
|
system
|
page execute and read and write
|
|
|
|
3600000
|
direct allocation
|
page read and write
|
|
|
|
4AB000
|
unkown
|
page readonly
|
||
|
B00000
|
heap
|
page read and write
|
||
|
3CAA000
|
heap
|
page read and write
|
||
|
491000
|
unkown
|
page write copy
|
||
|
C20000
|
heap
|
page read and write
|
||
|
408E000
|
heap
|
page read and write
|
||
|
41BB000
|
heap
|
page read and write
|
||
|
4107000
|
heap
|
page read and write
|
||
|
408A000
|
heap
|
page read and write
|
||
|
133E000
|
stack
|
page read and write
|
||
|
93E000
|
stack
|
page read and write
|
||
|
492000
|
unkown
|
page read and write
|
||
|
40F6000
|
heap
|
page read and write
|
||
|
B75000
|
heap
|
page read and write
|
||
|
494E000
|
direct allocation
|
page read and write
|
||
|
4733000
|
direct allocation
|
page read and write
|
||
|
A10000
|
heap
|
page read and write
|
||
|
3650000
|
direct allocation
|
page read and write
|
||
|
4733000
|
direct allocation
|
page read and write
|
||
|
408A000
|
heap
|
page read and write
|
||
|
40F0000
|
heap
|
page read and write
|
||
|
3FBD000
|
heap
|
page read and write
|
||
|
3CA8000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
3800000
|
direct allocation
|
page execute and read and write
|
||
|
4108000
|
heap
|
page read and write
|
||
|
3600000
|
heap
|
page read and write
|
||
|
9EC000
|
stack
|
page read and write
|
||
|
4056000
|
heap
|
page read and write
|
||
|
C40000
|
heap
|
page read and write
|
||
|
C1A000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
4108000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
4107000
|
heap
|
page read and write
|
||
|
3650000
|
direct allocation
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
B8F000
|
heap
|
page read and write
|
||
|
48DD000
|
direct allocation
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
4610000
|
direct allocation
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
408A000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
3401000
|
heap
|
page read and write
|
||
|
A05000
|
heap
|
page read and write
|
||
|
3200000
|
heap
|
page read and write
|
||
|
408A000
|
heap
|
page read and write
|
||
|
E9F000
|
stack
|
page read and write
|
||
|
494E000
|
direct allocation
|
page read and write
|
||
|
9A000
|
stack
|
page read and write
|
||
|
47B0000
|
direct allocation
|
page read and write
|
||
|
40CF000
|
heap
|
page read and write
|
||
|
A55000
|
heap
|
page read and write
|
||
|
3B42000
|
direct allocation
|
page execute and read and write
|
||
|
3AD1000
|
direct allocation
|
page execute and read and write
|
||
|
3002000
|
heap
|
page read and write
|
||
|
3150000
|
heap
|
page read and write
|
||
|
B40000
|
heap
|
page read and write
|
||
|
415D000
|
heap
|
page read and write
|
||
|
3650000
|
direct allocation
|
page read and write
|
||
|
B8C000
|
heap
|
page read and write
|
||
|
C5C000
|
heap
|
page read and write
|
||
|
B7C000
|
heap
|
page read and write
|
||
|
3E80000
|
heap
|
page read and write
|
||
|
389E000
|
stack
|
page read and write
|
||
|
9FE000
|
stack
|
page read and write
|
||
|
418E000
|
heap
|
page read and write
|
||
|
408A000
|
heap
|
page read and write
|
||
|
BA9000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
4107000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
940000
|
heap
|
page read and write
|
||
|
8FE000
|
stack
|
page read and write
|
||
|
4107000
|
heap
|
page read and write
|
||
|
4610000
|
direct allocation
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
3013000
|
heap
|
page read and write
|
||
|
4105000
|
heap
|
page read and write
|
||
|
408A000
|
heap
|
page read and write
|
||
|
408A000
|
heap
|
page read and write
|
||
|
3301000
|
heap
|
page read and write
|
||
|
1E0000
|
heap
|
page read and write
|
||
|
B7C000
|
heap
|
page read and write
|
||
|
4107000
|
heap
|
page read and write
|
||
|
48D9000
|
direct allocation
|
page read and write
|
||
|
100000
|
heap
|
page read and write
|
||
|
4733000
|
direct allocation
|
page read and write
|
||
|
4610000
|
direct allocation
|
page read and write
|
||
|
3154000
|
heap
|
page read and write
|
||
|
3CA4000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
48DD000
|
direct allocation
|
page read and write
|
||
|
A6A000
|
heap
|
page read and write
|
||
|
417D000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
C27000
|
heap
|
page read and write
|
||
|
48DD000
|
direct allocation
|
page read and write
|
||
|
4107000
|
heap
|
page read and write
|
||
|
392D000
|
direct allocation
|
page execute and read and write
|
||
|
408A000
|
heap
|
page read and write
|
||
|
4483000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
40FA000
|
heap
|
page read and write
|
||
|
8B4000
|
stack
|
page read and write
|
||
|
48D9000
|
direct allocation
|
page read and write
|
||
|
408A000
|
heap
|
page read and write
|
||
|
47B0000
|
direct allocation
|
page read and write
|
||
|
3212000
|
heap
|
page read and write
|
||
|
408A000
|
heap
|
page read and write
|
||
|
4107000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
494E000
|
direct allocation
|
page read and write
|
||
|
D50000
|
heap
|
page read and write
|
||
|
408A000
|
heap
|
page read and write
|
||
|
3FE9000
|
heap
|
page read and write
|
||
|
48DD000
|
direct allocation
|
page read and write
|
||
|
C2D000
|
heap
|
page read and write
|
||
|
4080000
|
heap
|
page read and write
|
||
|
3400000
|
heap
|
page read and write
|
||
|
9AD000
|
stack
|
page read and write
|
||
|
402E000
|
heap
|
page read and write
|
||
|
482000
|
unkown
|
page readonly
|
||
|
3013000
|
heap
|
page read and write
|
||
|
4AB000
|
unkown
|
page readonly
|
||
|
3FB9000
|
heap
|
page read and write
|
||
|
47B0000
|
direct allocation
|
page read and write
|
||
|
4107000
|
heap
|
page read and write
|
||
|
408A000
|
heap
|
page read and write
|
||
|
3C9F000
|
stack
|
page read and write
|
||
|
3000000
|
heap
|
page read and write
|
||
|
48D9000
|
direct allocation
|
page read and write
|
||
|
399E000
|
direct allocation
|
page execute and read and write
|
||
|
494E000
|
direct allocation
|
page read and write
|
||
|
408A000
|
heap
|
page read and write
|
||
|
3ACD000
|
direct allocation
|
page execute and read and write
|
||
|
408A000
|
heap
|
page read and write
|
||
|
3217000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
3523000
|
heap
|
page read and write
|
||
|
4117000
|
heap
|
page read and write
|
||
|
3929000
|
direct allocation
|
page execute and read and write
|
||
|
48DD000
|
direct allocation
|
page read and write
|
||
|
47B0000
|
direct allocation
|
page read and write
|
||
|
490000
|
unkown
|
page write copy
|
||
|
EDE000
|
stack
|
page read and write
|
||
|
40D5000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
C70000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
FDF000
|
stack
|
page read and write
|
||
|
482000
|
unkown
|
page readonly
|
||
|
408A000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
408A000
|
heap
|
page read and write
|
||
|
1740000
|
heap
|
page read and write
|
||
|
C2D000
|
heap
|
page read and write
|
||
|
B9D000
|
heap
|
page read and write
|
||
|
A00000
|
heap
|
page read and write
|
||
|
41A5000
|
heap
|
page execute and read and write
|
||
|
3650000
|
direct allocation
|
page read and write
|
||
|
3D66000
|
heap
|
page read and write
|
||
|
4733000
|
direct allocation
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
BAB000
|
heap
|
page read and write
|
||
|
47B0000
|
direct allocation
|
page read and write
|
||
|
3205000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
B4E000
|
heap
|
page read and write
|
||
|
4108000
|
heap
|
page read and write
|
||
|
4107000
|
heap
|
page read and write
|
||
|
B4A000
|
heap
|
page read and write
|
||
|
379E000
|
heap
|
page read and write
|
||
|
A50000
|
heap
|
page read and write
|
||
|
3650000
|
direct allocation
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
9AE000
|
stack
|
page read and write
|
||
|
1870000
|
heap
|
page read and write
|
||
|
C27000
|
heap
|
page read and write
|
||
|
4733000
|
direct allocation
|
page read and write
|
||
|
D9E000
|
stack
|
page read and write
|
||
|
BCC000
|
heap
|
page read and write
|
||
|
494E000
|
direct allocation
|
page read and write
|
||
|
3650000
|
direct allocation
|
page read and write
|
||
|
40FF000
|
heap
|
page read and write
|
||
|
4733000
|
direct allocation
|
page read and write
|
||
|
8AF000
|
stack
|
page read and write
|
||
|
4108000
|
heap
|
page read and write
|
||
|
47B0000
|
direct allocation
|
page read and write
|
||
|
3729000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
490000
|
unkown
|
page read and write
|
||
|
3FC5000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
372D000
|
heap
|
page read and write
|
||
|
4A7000
|
unkown
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
3205000
|
heap
|
page read and write
|
||
|
4610000
|
direct allocation
|
page read and write
|
||
|
408A000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
4610000
|
direct allocation
|
page read and write
|
||
|
3CA0000
|
direct allocation
|
page read and write
|
||
|
48DD000
|
direct allocation
|
page read and write
|
||
|
48D9000
|
direct allocation
|
page read and write
|
||
|
173F000
|
stack
|
page read and write
|
||
|
48D9000
|
direct allocation
|
page read and write
|
||
|
3217000
|
heap
|
page read and write
|
||
|
4610000
|
direct allocation
|
page read and write
|
||
|
41ED000
|
heap
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
408A000
|
heap
|
page read and write
|
||
|
D60000
|
direct allocation
|
page read and write
|
||
|
494E000
|
direct allocation
|
page read and write
|
||
|
408A000
|
heap
|
page read and write
|
||
|
48D9000
|
direct allocation
|
page read and write
|
There are 214 hidden memdumps, click here to show them.