Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Proforma Invoice NOCAP PLASTIK AMBALA.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Temp\contrapose
|
data
|
dropped
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\Proforma Invoice NOCAP PLASTIK AMBALA.exe
|
"C:\Users\user\Desktop\Proforma Invoice NOCAP PLASTIK AMBALA.exe"
|
|
|
|
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
|
"C:\Users\user\Desktop\Proforma Invoice NOCAP PLASTIK AMBALA.exe"
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://bezelety.top
|
unknown
|
|
|
|
https://account.dyn.com/
|
unknown
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
bezelety.top
|
194.36.191.196
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
194.36.191.196
|
bezelety.top
|
Netherlands
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
402000
|
system
|
page execute and read and write
|
|
|
|
2B11000
|
trusted library allocation
|
page read and write
|
|
|
|
2B5E000
|
trusted library allocation
|
page read and write
|
|
|
|
30E0000
|
direct allocation
|
page read and write
|
|
|
|
9DD000
|
heap
|
page read and write
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
48DD000
|
direct allocation
|
page read and write
|
||
|
538E000
|
stack
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
8E0000
|
heap
|
page read and write
|
||
|
569C000
|
trusted library allocation
|
page read and write
|
||
|
4A7000
|
unkown
|
page read and write
|
||
|
3F20000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
404E000
|
heap
|
page read and write
|
||
|
548F000
|
stack
|
page read and write
|
||
|
2B0E000
|
stack
|
page read and write
|
||
|
5FC0000
|
trusted library allocation
|
page execute and read and write
|
||
|
B38000
|
stack
|
page read and write
|
||
|
494E000
|
direct allocation
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
C90000
|
heap
|
page read and write
|
||
|
47B0000
|
direct allocation
|
page read and write
|
||
|
10C0000
|
heap
|
page read and write
|
||
|
4097000
|
heap
|
page read and write
|
||
|
625E000
|
stack
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
4610000
|
direct allocation
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
490000
|
unkown
|
page write copy
|
||
|
47B0000
|
direct allocation
|
page read and write
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
2990000
|
heap
|
page execute and read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
3135000
|
heap
|
page read and write
|
||
|
404E000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
3C7F000
|
stack
|
page read and write
|
||
|
494E000
|
direct allocation
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
404E000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
4C0D000
|
stack
|
page read and write
|
||
|
400000
|
system
|
page execute and read and write
|
||
|
4AB000
|
unkown
|
page readonly
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
494E000
|
direct allocation
|
page read and write
|
||
|
404E000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
9A0000
|
heap
|
page read and write
|
||
|
1054000
|
trusted library allocation
|
page read and write
|
||
|
3EFD000
|
heap
|
page read and write
|
||
|
97E000
|
stack
|
page read and write
|
||
|
2A00000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
17C0000
|
heap
|
page read and write
|
||
|
404E000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
E6C000
|
heap
|
page read and write
|
||
|
494E000
|
direct allocation
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
48D9000
|
direct allocation
|
page read and write
|
||
|
3EC4000
|
heap
|
page read and write
|
||
|
4F76000
|
trusted library allocation
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
387E000
|
stack
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
404E000
|
heap
|
page read and write
|
||
|
EF2000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
60B0000
|
trusted library allocation
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
48DD000
|
direct allocation
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
3E13000
|
heap
|
page read and write
|
||
|
4F6E000
|
trusted library allocation
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
404E000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
51EC000
|
stack
|
page read and write
|
||
|
4F5B000
|
trusted library allocation
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
3F58000
|
heap
|
page execute and read and write
|
||
|
1060000
|
trusted library allocation
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
4DA000
|
unkown
|
page readonly
|
||
|
9A000
|
stack
|
page read and write
|
||
|
3F09000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
48D9000
|
direct allocation
|
page read and write
|
||
|
4610000
|
direct allocation
|
page read and write
|
||
|
494E000
|
direct allocation
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
404E000
|
heap
|
page read and write
|
||
|
3F5D000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
4610000
|
direct allocation
|
page read and write
|
||
|
490000
|
unkown
|
page read and write
|
||
|
404E000
|
heap
|
page read and write
|
||
|
5E8F000
|
heap
|
page read and write
|
||
|
404E000
|
heap
|
page read and write
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
5E50000
|
heap
|
page read and write
|
||
|
28B8000
|
trusted library allocation
|
page read and write
|
||
|
47B0000
|
direct allocation
|
page read and write
|
||
|
9AA000
|
heap
|
page read and write
|
||
|
E4E000
|
heap
|
page read and write
|
||
|
4F82000
|
trusted library allocation
|
page read and write
|
||
|
19E000
|
stack
|
page read and write
|
||
|
3E99000
|
heap
|
page read and write
|
||
|
10A0000
|
heap
|
page read and write
|
||
|
994000
|
heap
|
page read and write
|
||
|
5F60000
|
trusted library allocation
|
page read and write
|
||
|
4733000
|
direct allocation
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
54CE000
|
stack
|
page read and write
|
||
|
130000
|
heap
|
page read and write
|
||
|
482000
|
unkown
|
page readonly
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
EA5000
|
heap
|
page read and write
|
||
|
605E000
|
stack
|
page read and write
|
||
|
3E30000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
7F310000
|
trusted library allocation
|
page execute and read and write
|
||
|
5668000
|
trusted library allocation
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
29F0000
|
heap
|
page execute and read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
524E000
|
stack
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
E10000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
93E000
|
stack
|
page read and write
|
||
|
17A0000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
1072000
|
trusted library allocation
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
1080000
|
trusted library allocation
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
404E000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
3E1E000
|
heap
|
page read and write
|
||
|
8BF000
|
stack
|
page read and write
|
||
|
5E7D000
|
heap
|
page read and write
|
||
|
438C000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
4733000
|
direct allocation
|
page read and write
|
||
|
60A0000
|
trusted library allocation
|
page read and write
|
||
|
55CE000
|
stack
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
CC0000
|
heap
|
page read and write
|
||
|
1DE000
|
stack
|
page read and write
|
||
|
60A7000
|
trusted library allocation
|
page read and write
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
1040000
|
trusted library allocation
|
page read and write
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
48D9000
|
direct allocation
|
page read and write
|
||
|
B70000
|
heap
|
page read and write
|
||
|
4F62000
|
trusted library allocation
|
page read and write
|
||
|
404E000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
1085000
|
trusted library allocation
|
page execute and read and write
|
||
|
1053000
|
trusted library allocation
|
page execute and read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
4F56000
|
trusted library allocation
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
1670000
|
heap
|
page read and write
|
||
|
48DD000
|
direct allocation
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
48DD000
|
direct allocation
|
page read and write
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
3C80000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
48D9000
|
direct allocation
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
6590000
|
heap
|
page read and write
|
||
|
2B66000
|
trusted library allocation
|
page read and write
|
||
|
990000
|
heap
|
page read and write
|
||
|
5E63000
|
heap
|
page read and write
|
||
|
1688000
|
heap
|
page read and write
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
3FC6000
|
heap
|
page read and write
|
||
|
404E000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
3CFD000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
48D9000
|
direct allocation
|
page read and write
|
||
|
298C000
|
stack
|
page read and write
|
||
|
3B39000
|
trusted library allocation
|
page read and write
|
||
|
534E000
|
stack
|
page read and write
|
||
|
4F50000
|
trusted library allocation
|
page read and write
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
29B0000
|
trusted library allocation
|
page read and write
|
||
|
4610000
|
direct allocation
|
page read and write
|
||
|
404E000
|
heap
|
page read and write
|
||
|
4610000
|
direct allocation
|
page read and write
|
||
|
9D5000
|
heap
|
page read and write
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
404E000
|
heap
|
page read and write
|
||
|
10B0000
|
trusted library allocation
|
page read and write
|
||
|
6560000
|
trusted library allocation
|
page read and write
|
||
|
29D0000
|
trusted library allocation
|
page read and write
|
||
|
8D3000
|
stack
|
page read and write
|
||
|
404E000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
50DC000
|
stack
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
4F6A000
|
trusted library allocation
|
page read and write
|
||
|
108B000
|
trusted library allocation
|
page execute and read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
47B0000
|
direct allocation
|
page read and write
|
||
|
5FBD000
|
stack
|
page read and write
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
4AB000
|
unkown
|
page readonly
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
3B7A000
|
trusted library allocation
|
page read and write
|
||
|
3B19000
|
trusted library allocation
|
page read and write
|
||
|
4F5E000
|
trusted library allocation
|
page read and write
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
482000
|
unkown
|
page readonly
|
||
|
50E3000
|
heap
|
page read and write
|
||
|
9AE000
|
heap
|
page read and write
|
||
|
4733000
|
direct allocation
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
E38000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
50E0000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
65A0000
|
trusted library allocation
|
page execute and read and write
|
||
|
3F59000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
8CF000
|
stack
|
page read and write
|
||
|
4097000
|
heap
|
page read and write
|
||
|
110000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
404E000
|
heap
|
page read and write
|
||
|
4610000
|
direct allocation
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
1082000
|
trusted library allocation
|
page read and write
|
||
|
44E5000
|
heap
|
page read and write
|
||
|
1076000
|
trusted library allocation
|
page execute and read and write
|
||
|
29C0000
|
trusted library allocation
|
page read and write
|
||
|
609E000
|
stack
|
page read and write
|
||
|
404E000
|
heap
|
page read and write
|
||
|
47B0000
|
direct allocation
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
404E000
|
heap
|
page read and write
|
||
|
404E000
|
heap
|
page read and write
|
||
|
105D000
|
trusted library allocation
|
page execute and read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
404E000
|
heap
|
page read and write
|
||
|
1050000
|
trusted library allocation
|
page read and write
|
||
|
28AE000
|
stack
|
page read and write
|
||
|
404E000
|
heap
|
page read and write
|
||
|
166F000
|
stack
|
page read and write
|
||
|
CC5000
|
heap
|
page read and write
|
||
|
100000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
2B5C000
|
trusted library allocation
|
page read and write
|
||
|
E5A000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
2F7F000
|
heap
|
page read and write
|
||
|
3F59000
|
heap
|
page read and write
|
||
|
EC8000
|
heap
|
page read and write
|
||
|
4F54000
|
trusted library allocation
|
page read and write
|
||
|
404E000
|
heap
|
page read and write
|
||
|
29A0000
|
trusted library allocation
|
page execute and read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
5F70000
|
trusted library allocation
|
page execute and read and write
|
||
|
3E11000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
4087000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
3C81000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
3130000
|
heap
|
page read and write
|
||
|
126E000
|
stack
|
page read and write
|
||
|
4DA000
|
unkown
|
page readonly
|
||
|
3D1C000
|
heap
|
page read and write
|
||
|
48D9000
|
direct allocation
|
page read and write
|
||
|
29E0000
|
trusted library allocation
|
page read and write
|
||
|
5F66000
|
trusted library allocation
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
404E000
|
heap
|
page read and write
|
||
|
4733000
|
direct allocation
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
107A000
|
trusted library allocation
|
page execute and read and write
|
||
|
5660000
|
trusted library allocation
|
page read and write
|
||
|
4FA0000
|
heap
|
page read and write
|
||
|
106D000
|
trusted library allocation
|
page execute and read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
4087000
|
heap
|
page read and write
|
||
|
67C0000
|
heap
|
page read and write
|
||
|
A39000
|
stack
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
3B11000
|
trusted library allocation
|
page read and write
|
||
|
48DD000
|
direct allocation
|
page read and write
|
||
|
4F7D000
|
trusted library allocation
|
page read and write
|
||
|
E69000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
47B0000
|
direct allocation
|
page read and write
|
||
|
494E000
|
direct allocation
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
404E000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
1087000
|
trusted library allocation
|
page execute and read and write
|
||
|
48DD000
|
direct allocation
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
E30000
|
heap
|
page read and write
|
||
|
3F81000
|
heap
|
page read and write
|
||
|
4733000
|
direct allocation
|
page read and write
|
||
|
404D000
|
heap
|
page read and write
|
||
|
3FF7000
|
heap
|
page read and write
|
||
|
155000
|
heap
|
page read and write
|
||
|
5690000
|
trusted library allocation
|
page read and write
|
||
|
5F50000
|
trusted library allocation
|
page read and write
|
||
|
4733000
|
direct allocation
|
page read and write
|
||
|
3D80000
|
heap
|
page read and write
|
||
|
4413000
|
heap
|
page read and write
|
||
|
150000
|
heap
|
page read and write
|
||
|
3F80000
|
heap
|
page read and write
|
||
|
1070000
|
trusted library allocation
|
page read and write
|
||
|
4F71000
|
trusted library allocation
|
page read and write
|
||
|
F09000
|
heap
|
page read and write
|
There are 361 hidden memdumps, click here to show them.