Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
upd_1916298.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\ProgramData\ffdbfkc\chbdcee
|
Unicode text, UTF-16, little-endian text, with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\EFeACAf
|
ASCII text, with no line terminators
|
dropped
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\upd_1916298.exe
|
"C:\Users\user\Desktop\upd_1916298.exe"
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
"c:\windows\system32\cmd.exe" /c wmic ComputerSystem get domain > C:\ProgramData\ffdbfkc\chbdcee
|
||
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
|
C:\Windows\SysWOW64\wbem\WMIC.exe
|
wmic ComputerSystem get domain
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://cevcsca2021.ocsp-certum.com07
|
unknown
|
||
|
http://crl.certum.pl/ctnca2.crl0l
|
unknown
|
||
|
http://repository.certum.pl/ctnca2.cer09
|
unknown
|
||
|
http://cevcsca2021.crl.certum.pl/cevcsca2021.crl0w
|
unknown
|
||
|
https://mail.google.com/mail/u/0/#inbox
|
unknown
|
||
|
https://www.certum.pl/CPS0
|
unknown
|
||
|
http://repository.certum.pl/cevcsca2021.cer0
|
unknown
|
||
|
http://www.certum.pl/CPS0
|
unknown
|
||
|
http://subca.ocsp-certum.com02
|
unknown
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
91.222.173.80
|
unknown
|
Ukraine
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
44C0000
|
direct allocation
|
page read and write
|
|
|
|
43AE000
|
unclassified section
|
page execute and read and write
|
|
|
|
42F0000
|
direct allocation
|
page read and write
|
|
|
|
4350000
|
unclassified section
|
page execute and read and write
|
|
|
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
2FA5000
|
heap
|
page read and write
|
||
|
2B4F000
|
stack
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
33C0000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
19D000
|
stack
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
45C1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
315B000
|
heap
|
page read and write
|
||
|
31FD000
|
heap
|
page read and write
|
||
|
27DE000
|
stack
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
31C0000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
3969000
|
heap
|
page read and write
|
||
|
327F000
|
stack
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
3968000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
1F7000
|
heap
|
page read and write
|
||
|
348C000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
2810000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
523F000
|
stack
|
page read and write
|
||
|
615000
|
unkown
|
page readonly
|
||
|
31F5000
|
heap
|
page read and write
|
||
|
395A000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
3969000
|
heap
|
page read and write
|
||
|
2D3D000
|
stack
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F2E000
|
stack
|
page read and write
|
||
|
3953000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
31F5000
|
heap
|
page read and write
|
||
|
31BB000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
281A000
|
heap
|
page read and write
|
||
|
313F000
|
heap
|
page read and write
|
||
|
5371000
|
heap
|
page read and write
|
||
|
2790000
|
heap
|
page read and write
|
||
|
E78000
|
stack
|
page read and write
|
||
|
5AE000
|
unkown
|
page readonly
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
31C0000
|
heap
|
page read and write
|
||
|
E3B000
|
stack
|
page read and write
|
||
|
326E000
|
stack
|
page read and write
|
||
|
F30000
|
heap
|
page read and write
|
||
|
3170000
|
heap
|
page read and write
|
||
|
3141000
|
heap
|
page read and write
|
||
|
281E000
|
heap
|
page read and write
|
||
|
31F3000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
607000
|
unkown
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
31FB000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
31F3000
|
heap
|
page read and write
|
||
|
45C0000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
396A000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
396D000
|
heap
|
page read and write
|
||
|
EE0000
|
heap
|
page read and write
|
||
|
3200000
|
heap
|
page read and write
|
||
|
3956000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
3174000
|
heap
|
page read and write
|
||
|
313E000
|
heap
|
page read and write
|
||
|
3959000
|
heap
|
page read and write
|
||
|
32AE000
|
stack
|
page read and write
|
||
|
31E2000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
31A2000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
3488000
|
heap
|
page read and write
|
||
|
615000
|
unkown
|
page readonly
|
||
|
3203000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
394E000
|
stack
|
page read and write
|
||
|
31F3000
|
heap
|
page read and write
|
||
|
FAE000
|
stack
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
319A000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
31C0000
|
heap
|
page read and write
|
||
|
FD0000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
3952000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
2C3D000
|
stack
|
page read and write
|
||
|
F60000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
341E000
|
stack
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
33B0000
|
trusted library allocation
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
2F80000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
3957000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
33B0000
|
trusted library allocation
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
31F4000
|
heap
|
page read and write
|
||
|
3966000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
1F0000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
5AE000
|
unkown
|
page readonly
|
||
|
3953000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
3964000
|
heap
|
page read and write
|
||
|
26B0000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
3207000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
3130000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
2FA3000
|
heap
|
page read and write
|
||
|
43D0000
|
heap
|
page read and write
|
||
|
9C000
|
stack
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
315A000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
31C9000
|
heap
|
page read and write
|
||
|
1F5000
|
heap
|
page read and write
|
||
|
3960000
|
heap
|
page read and write
|
||
|
3141000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
317F000
|
unkown
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
44B0000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
FB0000
|
heap
|
page read and write
|
||
|
31F3000
|
heap
|
page read and write
|
||
|
2A0F000
|
stack
|
page read and write
|
||
|
33E0000
|
heap
|
page read and write
|
||
|
31F5000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
31AB000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
43F0000
|
trusted library allocation
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
5370000
|
heap
|
page read and write
|
||
|
5A1000
|
unkown
|
page readonly
|
||
|
F64000
|
heap
|
page read and write
|
||
|
345F000
|
stack
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
5378000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
5374000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
52BF000
|
stack
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
2EBE000
|
unkown
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
3480000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
395A000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
31F5000
|
heap
|
page read and write
|
||
|
5378000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
3200000
|
heap
|
page read and write
|
||
|
608000
|
unkown
|
page write copy
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B0000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
31EA000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
31C2000
|
heap
|
page read and write
|
||
|
607000
|
unkown
|
page write copy
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
317A000
|
heap
|
page read and write
|
||
|
527E000
|
stack
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
3200000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
60E000
|
unkown
|
page read and write
|
||
|
31F5000
|
heap
|
page read and write
|
||
|
3170000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
3138000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
31E2000
|
heap
|
page read and write
|
||
|
3182000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
395C000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
3200000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
3950000
|
heap
|
page read and write
|
||
|
31B3000
|
heap
|
page read and write
|
||
|
3973000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
3206000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
31EA000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
348B000
|
heap
|
page read and write
|
||
|
3206000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
2FA2000
|
heap
|
page read and write
|
||
|
5378000
|
heap
|
page read and write
|
||
|
2A4E000
|
stack
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
3203000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
315A000
|
heap
|
page read and write
|
||
|
3200000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
2EFE000
|
stack
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
2F00000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
52C0000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
3957000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
395A000
|
heap
|
page read and write
|
||
|
2DA0000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
3175000
|
heap
|
page read and write
|
||
|
3170000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
2F8C000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
396F000
|
heap
|
page read and write
|
||
|
31F7000
|
heap
|
page read and write
|
||
|
2D90000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
396E000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
3170000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
348C000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
F64000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
315C000
|
heap
|
page read and write
|
||
|
32B1000
|
heap
|
page read and write
|
||
|
5A1000
|
unkown
|
page readonly
|
||
|
315A000
|
heap
|
page read and write
|
There are 384 hidden memdumps, click here to show them.