Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
G53ADrk4YR.exe
|
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
|
Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks,
0x1 compression
|
dropped
|
||
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
data
|
dropped
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\G53ADrk4YR.exe
|
"C:\Users\user\Desktop\G53ADrk4YR.exe"
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
|
unknown
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
82.9.14.4
|
unknown
|
United Kingdom
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
2E51000
|
trusted library allocation
|
page read and write
|
|
|
|
AE2000
|
unkown
|
page readonly
|
|
|
|
11C0000
|
heap
|
page read and write
|
||
|
10F2000
|
trusted library allocation
|
page read and write
|
||
|
2E0C000
|
stack
|
page read and write
|
||
|
604D000
|
stack
|
page read and write
|
||
|
6B3D000
|
stack
|
page read and write
|
||
|
5E3E000
|
stack
|
page read and write
|
||
|
5DD5000
|
trusted library allocation
|
page read and write
|
||
|
5DE9000
|
trusted library allocation
|
page read and write
|
||
|
10E0000
|
trusted library allocation
|
page read and write
|
||
|
1108000
|
heap
|
page read and write
|
||
|
BF0000
|
heap
|
page read and write
|
||
|
620C000
|
stack
|
page read and write
|
||
|
6F90000
|
heap
|
page read and write
|
||
|
EF8000
|
stack
|
page read and write
|
||
|
1137000
|
heap
|
page read and write
|
||
|
2E20000
|
heap
|
page read and write
|
||
|
2E40000
|
heap
|
page read and write
|
||
|
F40000
|
heap
|
page read and write
|
||
|
638E000
|
stack
|
page read and write
|
||
|
5DC6000
|
trusted library allocation
|
page read and write
|
||
|
6000000
|
trusted library allocation
|
page read and write
|
||
|
2EEB000
|
trusted library allocation
|
page read and write
|
||
|
5BA0000
|
heap
|
page read and write
|
||
|
6D3E000
|
stack
|
page read and write
|
||
|
568E000
|
stack
|
page read and write
|
||
|
AE0000
|
unkown
|
page readonly
|
||
|
10C0000
|
trusted library allocation
|
page read and write
|
||
|
63CC000
|
stack
|
page read and write
|
||
|
105E000
|
stack
|
page read and write
|
||
|
634E000
|
stack
|
page read and write
|
||
|
10E6000
|
trusted library allocation
|
page execute and read and write
|
||
|
1410000
|
trusted library allocation
|
page read and write
|
||
|
11E2000
|
heap
|
page read and write
|
||
|
5DB4000
|
trusted library allocation
|
page read and write
|
||
|
5DF0000
|
trusted library allocation
|
page read and write
|
||
|
5388000
|
heap
|
page read and write
|
||
|
3308000
|
trusted library allocation
|
page read and write
|
||
|
10C3000
|
trusted library allocation
|
page execute and read and write
|
||
|
2DAF000
|
stack
|
page read and write
|
||
|
2E10000
|
trusted library allocation
|
page read and write
|
||
|
3E59000
|
trusted library allocation
|
page read and write
|
||
|
112A000
|
heap
|
page read and write
|
||
|
10CD000
|
trusted library allocation
|
page execute and read and write
|
||
|
53A0000
|
trusted library allocation
|
page read and write
|
||
|
11D1000
|
heap
|
page read and write
|
||
|
5DEB000
|
trusted library allocation
|
page read and write
|
||
|
53A7000
|
trusted library allocation
|
page read and write
|
||
|
145E000
|
stack
|
page read and write
|
||
|
5DA4000
|
trusted library allocation
|
page read and write
|
||
|
B8C000
|
stack
|
page read and write
|
||
|
11BC000
|
heap
|
page read and write
|
||
|
539E000
|
heap
|
page read and write
|
||
|
52A0000
|
heap
|
page read and write
|
||
|
3181000
|
trusted library allocation
|
page read and write
|
||
|
4F4E000
|
stack
|
page read and write
|
||
|
1135000
|
heap
|
page read and write
|
||
|
608E000
|
stack
|
page read and write
|
||
|
11A2000
|
heap
|
page read and write
|
||
|
13FF000
|
stack
|
page read and write
|
||
|
11CF000
|
heap
|
page read and write
|
||
|
53B0000
|
heap
|
page execute and read and write
|
||
|
10EA000
|
trusted library allocation
|
page execute and read and write
|
||
|
11ED000
|
heap
|
page read and write
|
||
|
644C000
|
stack
|
page read and write
|
||
|
640C000
|
stack
|
page read and write
|
||
|
578E000
|
stack
|
page read and write
|
||
|
111E000
|
heap
|
page read and write
|
||
|
F45000
|
heap
|
page read and write
|
||
|
10F0000
|
trusted library allocation
|
page read and write
|
||
|
550C000
|
stack
|
page read and write
|
||
|
11F9000
|
heap
|
page read and write
|
||
|
3E51000
|
trusted library allocation
|
page read and write
|
||
|
F3E000
|
stack
|
page read and write
|
||
|
10FB000
|
trusted library allocation
|
page execute and read and write
|
||
|
5FDE000
|
stack
|
page read and write
|
||
|
539B000
|
heap
|
page read and write
|
||
|
1100000
|
heap
|
page read and write
|
||
|
564E000
|
stack
|
page read and write
|
||
|
630D000
|
stack
|
page read and write
|
||
|
1507000
|
heap
|
page read and write
|
||
|
1500000
|
heap
|
page read and write
|
||
|
1060000
|
heap
|
page read and write
|
||
|
1468000
|
trusted library allocation
|
page read and write
|
||
|
10E2000
|
trusted library allocation
|
page read and write
|
||
|
5DE0000
|
trusted library allocation
|
page read and write
|
||
|
2DB0000
|
trusted library allocation
|
page execute and read and write
|
||
|
6C3E000
|
stack
|
page read and write
|
||
|
3E57000
|
trusted library allocation
|
page read and write
|
||
|
10F7000
|
trusted library allocation
|
page execute and read and write
|
||
|
12FE000
|
stack
|
page read and write
|
||
|
10D0000
|
trusted library allocation
|
page read and write
|
||
|
2DC0000
|
heap
|
page execute and read and write
|
||
|
6F80000
|
heap
|
page read and write
|
||
|
7FAD0000
|
trusted library allocation
|
page execute and read and write
|
||
|
554E000
|
stack
|
page read and write
|
||
|
1070000
|
heap
|
page read and write
|
||
|
10C4000
|
trusted library allocation
|
page read and write
|
||
|
540E000
|
stack
|
page read and write
|
||
|
57CE000
|
stack
|
page read and write
|
||
|
10B0000
|
trusted library allocation
|
page read and write
|
||
|
5316000
|
heap
|
page read and write
|
||
|
58CE000
|
stack
|
page read and write
|
||
|
5DC9000
|
trusted library allocation
|
page read and write
|
||
|
1067000
|
heap
|
page read and write
|
||
|
11CD000
|
heap
|
page read and write
|
||
|
5390000
|
heap
|
page read and write
|
||
|
317F000
|
trusted library allocation
|
page read and write
|
There are 99 hidden memdumps, click here to show them.