Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
NARLOG 07.10.2024.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Temp\orographically
|
data
|
dropped
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\NARLOG 07.10.2024.exe
|
"C:\Users\user\Desktop\NARLOG 07.10.2024.exe"
|
|
|
|
C:\Windows\SysWOW64\svchost.exe
|
"C:\Users\user\Desktop\NARLOG 07.10.2024.exe"
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
BD0000
|
direct allocation
|
page read and write
|
|
|
|
490000
|
system
|
page execute and read and write
|
|
|
|
817000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
613000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
490000
|
unkown
|
page read and write
|
||
|
3E0A000
|
heap
|
page read and write
|
||
|
47BE000
|
direct allocation
|
page read and write
|
||
|
4320000
|
direct allocation
|
page read and write
|
||
|
2F46000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
3F11000
|
heap
|
page read and write
|
||
|
3DF5000
|
heap
|
page read and write
|
||
|
3F68000
|
heap
|
page read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
4320000
|
direct allocation
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
550000
|
direct allocation
|
page read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
613000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
43D6000
|
heap
|
page read and write
|
||
|
3ECF000
|
heap
|
page read and write
|
||
|
C20000
|
direct allocation
|
page read and write
|
||
|
30D5000
|
heap
|
page read and write
|
||
|
93E000
|
stack
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
613000
|
heap
|
page read and write
|
||
|
4749000
|
direct allocation
|
page read and write
|
||
|
C20000
|
direct allocation
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
3F68000
|
heap
|
page read and write
|
||
|
4320000
|
direct allocation
|
page read and write
|
||
|
4620000
|
direct allocation
|
page read and write
|
||
|
47BE000
|
direct allocation
|
page read and write
|
||
|
3F00000
|
heap
|
page read and write
|
||
|
3F68000
|
heap
|
page read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
474D000
|
direct allocation
|
page read and write
|
||
|
329E000
|
direct allocation
|
page execute and read and write
|
||
|
4443000
|
direct allocation
|
page read and write
|
||
|
602000
|
heap
|
page read and write
|
||
|
613000
|
heap
|
page read and write
|
||
|
3F68000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
2E23000
|
heap
|
page read and write
|
||
|
89F000
|
stack
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
613000
|
heap
|
page read and write
|
||
|
AA7000
|
heap
|
page read and write
|
||
|
4749000
|
direct allocation
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
2F00000
|
heap
|
page read and write
|
||
|
3F68000
|
heap
|
page read and write
|
||
|
613000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
47BE000
|
direct allocation
|
page read and write
|
||
|
613000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
613000
|
heap
|
page read and write
|
||
|
BA2000
|
heap
|
page read and write
|
||
|
3442000
|
direct allocation
|
page execute and read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
3C20000
|
heap
|
page read and write
|
||
|
4620000
|
direct allocation
|
page read and write
|
||
|
805000
|
heap
|
page read and write
|
||
|
4AB000
|
unkown
|
page readonly
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
613000
|
heap
|
page read and write
|
||
|
47BE000
|
direct allocation
|
page read and write
|
||
|
4620000
|
direct allocation
|
page read and write
|
||
|
3F68000
|
heap
|
page read and write
|
||
|
381E000
|
stack
|
page read and write
|
||
|
47BE000
|
direct allocation
|
page read and write
|
||
|
3F67000
|
heap
|
page read and write
|
||
|
613000
|
heap
|
page read and write
|
||
|
613000
|
heap
|
page read and write
|
||
|
3F68000
|
heap
|
page read and write
|
||
|
176F000
|
stack
|
page read and write
|
||
|
4443000
|
direct allocation
|
page read and write
|
||
|
3FAF000
|
heap
|
page read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
3F68000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
B7A000
|
heap
|
page read and write
|
||
|
3F68000
|
heap
|
page read and write
|
||
|
BA5000
|
heap
|
page read and write
|
||
|
613000
|
heap
|
page read and write
|
||
|
B70000
|
heap
|
page read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
A50000
|
heap
|
page read and write
|
||
|
3E3B000
|
heap
|
page read and write
|
||
|
980000
|
heap
|
page read and write
|
||
|
4749000
|
direct allocation
|
page read and write
|
||
|
613000
|
heap
|
page read and write
|
||
|
3F68000
|
heap
|
page read and write
|
||
|
3F21000
|
heap
|
page read and write
|
||
|
482000
|
unkown
|
page readonly
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
3F68000
|
heap
|
page read and write
|
||
|
613000
|
heap
|
page read and write
|
||
|
613000
|
heap
|
page read and write
|
||
|
530000
|
heap
|
page read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
136E000
|
stack
|
page read and write
|
||
|
4620000
|
direct allocation
|
page read and write
|
||
|
4443000
|
direct allocation
|
page read and write
|
||
|
3F20000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
4620000
|
direct allocation
|
page read and write
|
||
|
C20000
|
direct allocation
|
page read and write
|
||
|
47D000
|
stack
|
page read and write
|
||
|
58E000
|
stack
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
3F68000
|
heap
|
page read and write
|
||
|
613000
|
heap
|
page read and write
|
||
|
4749000
|
direct allocation
|
page read and write
|
||
|
3DF7000
|
heap
|
page read and write
|
||
|
A90000
|
heap
|
page read and write
|
||
|
1920000
|
heap
|
page read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
3F68000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
613000
|
heap
|
page read and write
|
||
|
3F10000
|
heap
|
page execute and read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
43D000
|
stack
|
page read and write
|
||
|
3F68000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
C20000
|
direct allocation
|
page read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
8B4000
|
stack
|
page read and write
|
||
|
BCF000
|
stack
|
page read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
3E06000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
3029000
|
heap
|
page read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
474D000
|
direct allocation
|
page read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
2D9F000
|
stack
|
page read and write
|
||
|
3229000
|
direct allocation
|
page execute and read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
482000
|
unkown
|
page readonly
|
||
|
613000
|
heap
|
page read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
309E000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
4320000
|
direct allocation
|
page read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
A0E000
|
stack
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
3F68000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
474D000
|
direct allocation
|
page read and write
|
||
|
4620000
|
direct allocation
|
page read and write
|
||
|
B7E000
|
heap
|
page read and write
|
||
|
4749000
|
direct allocation
|
page read and write
|
||
|
474D000
|
direct allocation
|
page read and write
|
||
|
613000
|
heap
|
page read and write
|
||
|
4320000
|
direct allocation
|
page read and write
|
||
|
4443000
|
direct allocation
|
page read and write
|
||
|
47BE000
|
direct allocation
|
page read and write
|
||
|
4A7000
|
unkown
|
page read and write
|
||
|
BAF000
|
heap
|
page read and write
|
||
|
3E03000
|
heap
|
page read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
940000
|
heap
|
page read and write
|
||
|
613000
|
heap
|
page read and write
|
||
|
613000
|
heap
|
page read and write
|
||
|
3F62000
|
heap
|
page read and write
|
||
|
3F68000
|
heap
|
page read and write
|
||
|
4620000
|
direct allocation
|
page read and write
|
||
|
3F68000
|
heap
|
page read and write
|
||
|
3F68000
|
heap
|
page read and write
|
||
|
2D00000
|
heap
|
page read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
3F68000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
2E01000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
490000
|
unkown
|
page write copy
|
||
|
C20000
|
direct allocation
|
page read and write
|
||
|
805000
|
heap
|
page read and write
|
||
|
4443000
|
direct allocation
|
page read and write
|
||
|
474D000
|
direct allocation
|
page read and write
|
||
|
3F15000
|
heap
|
page read and write
|
||
|
5CE000
|
stack
|
page read and write
|
||
|
8AF000
|
stack
|
page read and write
|
||
|
3F00000
|
heap
|
page read and write
|
||
|
613000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
3100000
|
direct allocation
|
page execute and read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
3C1F000
|
stack
|
page read and write
|
||
|
4443000
|
direct allocation
|
page read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
4749000
|
direct allocation
|
page read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
4E0000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
3F68000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
812000
|
heap
|
page read and write
|
||
|
613000
|
heap
|
page read and write
|
||
|
3E2C000
|
heap
|
page read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
4749000
|
direct allocation
|
page read and write
|
||
|
47BE000
|
direct allocation
|
page read and write
|
||
|
3F10000
|
heap
|
page read and write
|
||
|
984000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
33CD000
|
direct allocation
|
page execute and read and write
|
||
|
901000
|
heap
|
page read and write
|
||
|
613000
|
heap
|
page read and write
|
||
|
8FE000
|
stack
|
page read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
3F68000
|
heap
|
page read and write
|
||
|
474D000
|
direct allocation
|
page read and write
|
||
|
4320000
|
direct allocation
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
613000
|
heap
|
page read and write
|
||
|
3F68000
|
heap
|
page read and write
|
||
|
3F68000
|
heap
|
page read and write
|
||
|
4320000
|
direct allocation
|
page read and write
|
||
|
44CD000
|
heap
|
page read and write
|
||
|
30D0000
|
heap
|
page read and write
|
||
|
3F68000
|
heap
|
page read and write
|
||
|
4AB000
|
unkown
|
page readonly
|
||
|
613000
|
heap
|
page read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
B20000
|
direct allocation
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
9CE000
|
stack
|
page read and write
|
||
|
C20000
|
direct allocation
|
page read and write
|
||
|
3F21000
|
heap
|
page read and write
|
||
|
432C000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
500000
|
heap
|
page read and write
|
||
|
3DFD000
|
heap
|
page read and write
|
||
|
600000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
4443000
|
direct allocation
|
page read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
3F68000
|
heap
|
page read and write
|
||
|
302D000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
100000
|
heap
|
page read and write
|
||
|
9A000
|
stack
|
page read and write
|
||
|
474D000
|
direct allocation
|
page read and write
|
||
|
3EC7000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
322D000
|
direct allocation
|
page execute and read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
613000
|
heap
|
page read and write
|
||
|
613000
|
heap
|
page read and write
|
||
|
33D1000
|
direct allocation
|
page execute and read and write
|
||
|
3D20000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
540000
|
heap
|
page read and write
|
||
|
1E0000
|
heap
|
page read and write
|
||
|
800000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
3F17000
|
heap
|
page read and write
|
||
|
817000
|
heap
|
page read and write
|
There are 271 hidden memdumps, click here to show them.