IOC Report
klFMCT64RF.exe

loading gif

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\klFMCT64RF.exe
"C:\Users\user\Desktop\klFMCT64RF.exe"
 malicious
C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
"C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe"
 malicious

URLs

Name
IP
Malicious
https://mysterisop.site/api
104.21.21.3
 malicious
https://abnomalrkmu.site/api
104.21.56.150
 malicious
abnomalrkmu.site
malicious
https://soldiefieop.site/api
188.114.97.3
 malicious
https://nurserrsjwuwq.shop/api
188.114.97.3
 malicious
absorptioniw.site
malicious
treatynreit.site
malicious
https://steamcommunity.com/profiles/76561199724331900
104.102.49.254
 malicious
questionsmw.stor
malicious
https://steamcommunity.com/profiles/76561199724331900/inventory/
unknown
 malicious
nurserrsjwuwq.shop
malicious
https://treatynreit.site/api
104.21.84.18
 malicious
https://gravvitywio.store/api
172.67.209.193
 malicious
snarlypagowo.site
malicious
chorusarorp.site
malicious
https://absorptioniw.site/api
104.21.17.174
 malicious
https://player.vimeo.com
unknown
https://community.akamai.steamstatic.com/public/shared/javascript/auth_refresh.js?v=WgUxSlKTb3W1&amp
unknown
https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7Cd7fb65801182a5f
unknown
https://steamcommunity.com/?subsection=broadcasts
unknown
https://gravvitywio.store/api.Op
unknown
https://store.steampowered.com/subscriber_agreement/
unknown
https://www.gstatic.cn/recaptcha/
unknown
https://community.akamai.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6
unknown
https://community.akamai.steamstatic.com/public/javascript/applications/community/manifest.js?v=w4s3
unknown
http://www.valvesoftware.com/legal.htm
unknown
https://community.akamai.steamstatic.com/public/javascript/webui/clientcom.js?v=pvBDaFhF2LLJ&l=e
unknown
https://www.youtube.com
unknown
https://community.akamai.steamstatic.com/public/css/promo/summer2017/stickers.css?v=HA2Yr5oy3FFG&amp
unknown
https://community.akamai.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
unknown
https://avatars.akamai
unknown
https://gravvitywio.store/
unknown
https://www.google.com
unknown
https://community.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
unknown
https://abnomalrkmu.site/
unknown
https://community.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=sHIIcMzCffX6&
unknown
https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
unknown
https://community.akamai.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL
unknown
https://s.ytimg.com;
unknown
http://www.certum.pl/CPS0
unknown
https://community.akamai.steamsta
unknown
https://steam.tv/
unknown
http://cevcsca2021.ocsp-certum.com07
unknown
https://community.akamai.steamstatic.com/public/css/skin_1/header.css?v=NFoCa4OkAxRb&l=english
unknown
http://store.steampowered.com/privacy_agreement/
unknown
https://store.steampowered.com/points/shop/
unknown
http://cevcsca2021.crl.certum.pl/cevcsca2021.crl0w
unknown
https://sketchfab.com
unknown
https://lv.queniujq.cn
unknown
https://www.youtube.com/
unknown
https://community.akamai.steamstatic.com/public/css/applications/community/main.css?v=Ev2sBLgkgyWJ&a
unknown
https://avatars.akamai.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
unknown
https://store.steampowered.com/privacy_agreement/
unknown
https://absorptioniw.site/apiK
unknown
https://community.akamai.steamstatic.com/public/shared/css/shared_global.css?v=ezWS9te9Zwm9&l=en
unknown
https://community.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
unknown
https://community.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&am
unknown
https://soldiefieop.site/
unknown
https://www.google.com/recaptcha/
unknown
https://checkout.steampowered.com/
unknown
https://questionsmw.store/
unknown
https://community.akamai.steamstatic.com/public/css/globalv2.css?v=PAcV2zMBzzSV&l=english
unknown
https://community.akamai.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=english
unknown
https://abnomalrkmu.site/apii
unknown
https://community.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png
unknown
https://nurserrsjwuwq.shop/api4
unknown
https://community.akamai.steamstatic.com/public/css/skin_1/profilev2.css?v=M_qL4gO2sKII&l=englis
unknown
https://community.akamai.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC
unknown
https://store.steampowered.com/;
unknown
https://soldiefieop.site/api.Op
unknown
https://store.steampowered.com/about/
unknown
https://steamcommunity.com/my/wishlist/
unknown
https://community.akamai.steamstatic.com/public/javascript/global.js?v=9OzcxMXbaV84&l=english
unknown
https://help.steampowered.com/en/
unknown
https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/
unknown
https://steamcommunity.com/market/
unknown
https://store.steampowered.com/news/
unknown
https://community.akamai.steamstatic.com/
unknown
https://community.akamai.steamstatic.com/public/javascript/applications/community/main.js?v=8vRVyaZK
unknown
https://protobuf.dev/reference/go/faq#namespace-conflictpkcs7:
unknown
https://abnomalrkmu.site/7
unknown
http://store.steampowered.com/subscriber_agreement/
unknown
https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
unknown
https://community.akamai.steamstatic.com/public/css/skin_1/modalContent.css?v=.VpiwkLAYt9r1
unknown
https://recaptcha.net/recaptcha/;
unknown
http://repository.certum.pl/cevcsca2021.cer0
unknown
https://community.akamai.steamstatic.com/public/javascript/promo/stickers.js?v=upl9NJ5D2xkP&l=en
unknown
https://steamcommunity.com/discussions/
unknown
https://store.steampowered.com/stats/
unknown
https://medal.tv
unknown
https://broadcast.st.dl.eccdnx.com
unknown
https://community.akamai.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
unknown
https://store.steampowered.com/steam_refunds/
unknown
http://subca.ocsp-certum.com02
unknown
https://steamcommunity.com/login/home/?goto=profiles%2F76561199724331900
unknown
http://crl.certum.pl/ctnca2.crl0l
unknown
http://repository.certum.pl/ctnca2.cer09
unknown
https://steamcommunity.com/workshop/
unknown
https://login.steampowered.com/
unknown
https://store.steampowered.com/legal/
unknown
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
treatynreit.site
104.21.84.18
 malicious
snarlypagowo.site
172.67.183.74
 malicious
questionsmw.store
172.67.208.141
 malicious
mysterisop.site
104.21.21.3
 malicious
absorptioniw.site
104.21.17.174
 malicious
abnomalrkmu.site
104.21.56.150
 malicious
gravvitywio.store
172.67.209.193
 malicious
nurserrsjwuwq.shop
188.114.97.3
 malicious
soldiefieop.site
188.114.97.3
 malicious
chorusarorp.site
unknown
 malicious
steamcommunity.com
104.102.49.254
There are 1 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
104.21.84.18
treatynreit.site
United States
malicious
188.114.97.3
nurserrsjwuwq.shop
European Union
malicious
104.21.17.174
absorptioniw.site
United States
malicious
104.21.21.3
mysterisop.site
United States
malicious
172.67.208.141
questionsmw.store
United States
malicious
172.67.209.193
gravvitywio.store
United States
malicious
104.21.56.150
abnomalrkmu.site
United States
malicious
172.67.183.74
snarlypagowo.site
United States
malicious
104.102.49.254
steamcommunity.com
United States

Memdumps

Base Address
Regiontype
Protect
Malicious
2880000
direct allocation
page read and write
 malicious
251E000
direct allocation
page read and write
163B000
unkown
page readonly
18DC000
unkown
page read and write
2570000
direct allocation
page read and write
2400000
direct allocation
page read and write
4D60000
remote allocation
page read and write
2520000
direct allocation
page read and write
236D000
stack
page read and write
252C000
direct allocation
page read and write
23DA3000
direct allocation
page read and write
254A000
direct allocation
page read and write
15D3000
unkown
page readonly
2560000
direct allocation
page read and write
3122000
heap
page read and write
1B50000
direct allocation
page read and write
312E000
heap
page read and write
1880000
unkown
page write copy
27DC000
direct allocation
page read and write
30A9000
heap
page read and write
2EA5000
heap
page read and write
4D60000
remote allocation
page read and write
1C8D000
stack
page read and write
2534000
direct allocation
page read and write
30C3000
heap
page read and write
312E000
heap
page read and write
30B4000
heap
page read and write
1CFA000
heap
page read and write
30A9000
heap
page read and write
2502000
direct allocation
page read and write
18D1000
unkown
page write copy
B7D000
stack
page read and write
2500000
direct allocation
page read and write
312E000
heap
page read and write
27D3000
direct allocation
page read and write
26C5000
direct allocation
page read and write
252E000
direct allocation
page read and write
15FF000
unkown
page readonly
2584000
direct allocation
page read and write
2432000
direct allocation
page read and write
2E3C000
stack
page read and write
1B40000
heap
page read and write
2576000
direct allocation
page read and write
261E000
direct allocation
page read and write
2810000
direct allocation
page read and write
2788000
direct allocation
page read and write
23E5D000
stack
page read and write
2FBE000
stack
page read and write
281C000
direct allocation
page read and write
2750000
direct allocation
page read and write
23B2000
direct allocation
page read and write
2490000
direct allocation
page read and write
C60000
unkown
page readonly
3122000
heap
page read and write
2414000
direct allocation
page read and write
3132000
heap
page read and write
25AA000
direct allocation
page read and write
2B32000
direct allocation
page read and write
242A000
direct allocation
page read and write
259E000
direct allocation
page read and write
2438000
direct allocation
page read and write
27BE000
direct allocation
page read and write
312E000
heap
page read and write
224FE000
stack
page read and write
2EA0000
heap
page read and write
3122000
heap
page read and write
160A000
unkown
page readonly
2552000
direct allocation
page read and write
2532000
direct allocation
page read and write
2528000
direct allocation
page read and write
251C000
direct allocation
page read and write
30A4000
heap
page read and write
2408000
direct allocation
page read and write
191E000
unkown
page readonly
1CCD000
stack
page read and write
337F000
stack
page read and write
3098000
heap
page read and write
2564000
direct allocation
page read and write
27CA000
direct allocation
page read and write
2484000
direct allocation
page read and write
241C000
direct allocation
page read and write
30C7000
heap
page read and write
2506000
direct allocation
page read and write
313D000
heap
page read and write
4C5D000
stack
page read and write
187A000
unkown
page write copy
327E000
stack
page read and write
314F000
heap
page read and write
2412000
direct allocation
page read and write
534E000
stack
page read and write
2548000
direct allocation
page read and write
B7C000
stack
page read and write
2512000
direct allocation
page read and write
3000000
heap
page read and write
312F000
heap
page read and write
28DE000
direct allocation
page read and write
2FFE000
stack
page read and write
240E000
direct allocation
page read and write
3123000
heap
page read and write
2A78000
direct allocation
page read and write
1958000
unkown
page readonly
283E000
direct allocation
page read and write
2416000
direct allocation
page read and write
27CD000
direct allocation
page read and write
27EE000
direct allocation
page read and write
23AE000
stack
page read and write
248A000
direct allocation
page read and write
3124000
heap
page read and write
3132000
heap
page read and write
3088000
heap
page read and write
3132000
heap
page read and write
256E000
direct allocation
page read and write
2504000
direct allocation
page read and write
1DF0000
direct allocation
page read and write
25A2000
direct allocation
page read and write
212F000
stack
page read and write
2492000
direct allocation
page read and write
A7C000
stack
page read and write
313F000
heap
page read and write
27D7000
direct allocation
page read and write
2420000
direct allocation
page read and write
309D000
heap
page read and write
275E000
direct allocation
page read and write
18D2000
unkown
page read and write
3125000
heap
page read and write
400000
remote allocation
page execute and read and write
187F000
unkown
page read and write
309C000
heap
page read and write
3121000
heap
page read and write
282A000
direct allocation
page read and write
2E70000
heap
page read and write
510E000
stack
page read and write
30E5000
heap
page read and write
241A000
direct allocation
page read and write
3142000
heap
page read and write
30E5000
heap
page read and write
23B0000
direct allocation
page read and write
276C000
direct allocation
page read and write
538D000
stack
page read and write
27FE000
direct allocation
page read and write
24A2000
direct allocation
page read and write
1612000
unkown
page readonly
2568000
direct allocation
page read and write
2582000
direct allocation
page read and write
30A4000
heap
page read and write
2800000
direct allocation
page read and write
2562000
direct allocation
page read and write
23F5F000
stack
page read and write
2510000
direct allocation
page read and write
2499000
direct allocation
page read and write
27C6000
direct allocation
page read and write
257C000
direct allocation
page read and write
2820000
direct allocation
page read and write
191D000
unkown
page write copy
258C000
direct allocation
page read and write
256C000
direct allocation
page read and write
244C000
direct allocation
page read and write
1B5C000
direct allocation
page read and write
BE0000
heap
page read and write
105F000
unkown
page readonly
2418000
direct allocation
page read and write
4C1D000
stack
page read and write
27AE000
direct allocation
page read and write
30C3000
heap
page read and write
520F000
stack
page read and write
2486000
direct allocation
page read and write
27C2000
direct allocation
page read and write
1602000
unkown
page readonly
15FF000
unkown
page readonly
2410000
direct allocation
page read and write
2812000
direct allocation
page read and write
15D3000
unkown
page readonly
105F000
unkown
page readonly
2826000
direct allocation
page read and write
18C4000
unkown
page read and write
2760000
direct allocation
page read and write
3120000
heap
page read and write
2756000
direct allocation
page read and write
2436000
direct allocation
page read and write
313D000
heap
page read and write
1881000
unkown
page read and write
267E000
direct allocation
page read and write
2572000
direct allocation
page read and write
187E000
unkown
page write copy
27CF000
direct allocation
page read and write
C3E000
stack
page read and write
3130000
heap
page read and write
1882000
unkown
page write copy
548E000
stack
page read and write
191E000
unkown
page readonly
2452000
direct allocation
page read and write
255C000
direct allocation
page read and write
1958000
unkown
page readonly
187B000
unkown
page read and write
4D5D000
stack
page read and write
1612000
unkown
page readonly
2A1A000
direct allocation
page read and write
1914000
unkown
page read and write
255A000
direct allocation
page read and write
244E000
direct allocation
page read and write
187A000
unkown
page write copy
163B000
unkown
page readonly
2580000
direct allocation
page read and write
25B0000
direct allocation
page read and write
250A000
direct allocation
page read and write
3130000
heap
page read and write
2590000
direct allocation
page read and write
463000
remote allocation
page execute and read and write
242E000
direct allocation
page read and write
25A0000
direct allocation
page read and write
2530000
direct allocation
page read and write
2524000
direct allocation
page read and write
C61000
unkown
page execute read
248E000
direct allocation
page read and write
30AE000
heap
page read and write
524D000
stack
page read and write
2488000
direct allocation
page read and write
29BC000
direct allocation
page read and write
C61000
unkown
page execute read
1BC0000
direct allocation
page read and write
3060000
heap
page read and write
314F000
heap
page read and write
2814000
direct allocation
page read and write
225FF000
stack
page read and write
30DF000
heap
page read and write
27E4000
direct allocation
page read and write
312E000
heap
page read and write
23DCE000
direct allocation
page read and write
1B58000
direct allocation
page read and write
1C4D000
stack
page read and write
27DE000
direct allocation
page read and write
3128000
heap
page read and write
27D9000
direct allocation
page read and write
30CC000
heap
page read and write
253A000
direct allocation
page read and write
1CD0000
heap
page read and write
281A000
direct allocation
page read and write
247A000
direct allocation
page read and write
248C000
direct allocation
page read and write
1C00000
heap
page read and write
250C000
direct allocation
page read and write
253E000
direct allocation
page read and write
232F000
stack
page read and write
2586000
direct allocation
page read and write
BF0000
heap
page read and write
4D60000
remote allocation
page read and write
27EA000
direct allocation
page read and write
311F000
heap
page read and write
2494000
direct allocation
page read and write
30B4000
heap
page read and write
3146000
heap
page read and write
1602000
unkown
page readonly
250E000
direct allocation
page read and write
2566000
direct allocation
page read and write
2E60000
heap
page read and write
2550000
direct allocation
page read and write
27C8000
direct allocation
page read and write
305D000
stack
page read and write
1CF0000
heap
page read and write
256A000
direct allocation
page read and write
191D000
unkown
page write copy
2454000
direct allocation
page read and write
23DDC000
direct allocation
page read and write
1BF0000
direct allocation
page read and write
27B8000
direct allocation
page read and write
280E000
direct allocation
page read and write
30AE000
heap
page read and write
2445000
direct allocation
page read and write
2BEC000
direct allocation
page read and write
280C000
direct allocation
page read and write
1BD0000
direct allocation
page read and write
255E000
direct allocation
page read and write
3080000
heap
page read and write
295E000
direct allocation
page read and write
2771000
direct allocation
page read and write
1B45000
heap
page read and write
1CFE000
heap
page read and write
C60000
unkown
page readonly
160A000
unkown
page readonly
1B3F000
stack
page read and write
222F000
stack
page read and write
1918000
unkown
page read and write
There are 272 hidden memdumps, click here to show them.