Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\dZIZhRHDXv.exe
|
"C:\Users\user\Desktop\dZIZhRHDXv.exe"
|
 |
|
|
C:\Windows\SysWOW64\dialer.exe
|
"C:\Windows\system32\dialer.exe"
|
||
|
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 7624 -s 708
|
||
|
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 7624 -s 704
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://138.201.226.224:9292/bcacc1e7778c536b694/6wlh52ro.x0plp
|
|
||
|
https://www.rizonesoft.com
|
unknown
|
||
|
https://www.flos-freeware.chopenmailto:florian.balmer
|
unknown
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
138.201.226.224
|
unknown
|
Germany
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\SOFTWARE\SibCode
|
sn
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
6A0000
|
direct allocation
|
page read and write
|
|
|
|
3B30000
|
direct allocation
|
page execute and read and write
|
|
|
|
57C1000
|
direct allocation
|
page execute read
|
|
|
|
2880000
|
direct allocation
|
page read and write
|
|
|
|
5475000
|
heap
|
page read and write
|
|
|
|
33E0000
|
direct allocation
|
page read and write
|
|
|
|
330D000
|
heap
|
page read and write
|
||
|
3430000
|
direct allocation
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5862000
|
unkown
|
page read and write
|
||
|
547C000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
41A8000
|
unkown
|
page read and write
|
||
|
349E000
|
stack
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
34E0000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
2986000
|
direct allocation
|
page execute and read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
547C000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
6A0000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5400000
|
heap
|
page read and write
|
||
|
848000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
4392000
|
unkown
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
58E7000
|
unkown
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
4030000
|
unkown
|
page read and write
|
||
|
3070000
|
unkown
|
page execute and read and write
|
||
|
D20000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
547C000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
D81000
|
unkown
|
page execute read
|
||
|
56F0000
|
unkown
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
4CC0000
|
direct allocation
|
page execute and read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
272F000
|
stack
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5901000
|
unkown
|
page read and write
|
||
|
E7B000
|
unkown
|
page write copy
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
42FD000
|
unkown
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
840000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
2A90000
|
unkown
|
page read and write
|
||
|
56FC000
|
stack
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
55B0000
|
unkown
|
page read and write
|
||
|
5475000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
6E4000
|
heap
|
page read and write
|
||
|
E82000
|
unkown
|
page readonly
|
||
|
5501000
|
heap
|
page read and write
|
||
|
2DFB000
|
stack
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5500000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
3460000
|
unkown
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5500000
|
unkown
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
693000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
4110000
|
unkown
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
1D0000
|
heap
|
page read and write
|
||
|
5500000
|
unkown
|
page read and write
|
||
|
2910000
|
direct allocation
|
page execute and read and write
|
||
|
57EA000
|
direct allocation
|
page read and write
|
||
|
56BC000
|
stack
|
page read and write
|
||
|
2B30000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
583E000
|
unkown
|
page read and write
|
||
|
2986000
|
direct allocation
|
page execute and read and write
|
||
|
2BFA000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
4431000
|
unkown
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
6B0000
|
direct allocation
|
page read and write
|
||
|
30C0000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
3F30000
|
heap
|
page read and write
|
||
|
E65000
|
unkown
|
page readonly
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
547C000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
30D0000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
3400000
|
direct allocation
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
E7B000
|
unkown
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
330D000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
4250000
|
unkown
|
page read and write
|
||
|
32D8000
|
heap
|
page read and write
|
||
|
578F000
|
stack
|
page read and write
|
||
|
6E4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
40E0000
|
unkown
|
page read and write
|
||
|
42F9000
|
unkown
|
page read and write
|
||
|
547C000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
547C000
|
heap
|
page read and write
|
||
|
30B0000
|
heap
|
page read and write
|
||
|
4030000
|
unkown
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
690000
|
heap
|
page read and write
|
||
|
6E4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
334C000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
436E000
|
unkown
|
page read and write
|
||
|
6E0000
|
heap
|
page read and write
|
||
|
5720000
|
unkown
|
page read and write
|
||
|
696000
|
heap
|
page read and write
|
||
|
2820000
|
direct allocation
|
page read and write
|
||
|
6E4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
547C000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
E65000
|
unkown
|
page readonly
|
||
|
4040000
|
unkown
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5876000
|
unkown
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
1C0000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
547C000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
2A08000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5479000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
547C000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
547C000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
D80000
|
unkown
|
page readonly
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
2900000
|
direct allocation
|
page execute and read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
43A6000
|
unkown
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5510000
|
unkown
|
page read and write
|
||
|
34DF000
|
stack
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
4417000
|
unkown
|
page read and write
|
||
|
333B000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
60E000
|
stack
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
2920000
|
direct allocation
|
page execute and read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
57F4000
|
direct allocation
|
page execute read
|
||
|
55D0000
|
unkown
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
4030000
|
unkown
|
page read and write
|
||
|
4386000
|
unkown
|
page read and write
|
||
|
4FA000
|
stack
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
4220000
|
unkown
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
3513000
|
heap
|
page read and write
|
||
|
5856000
|
unkown
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
2B22000
|
unkown
|
page read and write
|
||
|
57C0000
|
direct allocation
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
57CD000
|
unkown
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
2990000
|
heap
|
page read and write
|
||
|
41D0000
|
unkown
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
3510000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
34F2000
|
unkown
|
page read and write
|
||
|
6E4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
40B0000
|
unkown
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
57F2000
|
direct allocation
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
D81000
|
unkown
|
page execute read
|
||
|
32D0000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5479000
|
heap
|
page read and write
|
||
|
4153000
|
unkown
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
15B000
|
stack
|
page read and write
|
||
|
6E4000
|
heap
|
page read and write
|
||
|
E80000
|
unkown
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
6E4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
56A0000
|
unkown
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5500000
|
unkown
|
page read and write
|
||
|
4030000
|
unkown
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
4100000
|
unkown
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
3334000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
3F31000
|
heap
|
page read and write
|
||
|
5623000
|
unkown
|
page read and write
|
||
|
2A09000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
E82000
|
unkown
|
page readonly
|
||
|
7EF000
|
stack
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
303C000
|
stack
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
547C000
|
heap
|
page read and write
|
||
|
5678000
|
unkown
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5580000
|
unkown
|
page read and write
|
||
|
55E0000
|
unkown
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5500000
|
unkown
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
547C000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
333A000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
567F000
|
stack
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
574E000
|
stack
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
334B000
|
heap
|
page read and write
|
||
|
2920000
|
direct allocation
|
page execute and read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
57C9000
|
unkown
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
334B000
|
heap
|
page read and write
|
||
|
64E000
|
stack
|
page read and write
|
||
|
57B0000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
563E000
|
stack
|
page read and write
|
||
|
30D4000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
D80000
|
unkown
|
page readonly
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
5501000
|
heap
|
page read and write
|
||
|
2BAF000
|
heap
|
page read and write
|
There are 380 hidden memdumps, click here to show them.