Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
confirm bank details invoice.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
||
C:\Users\user\AppData\Local\Vevina\deblaterate.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\deblaterate.vbs
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\aut303.tmp
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\autC696.tmp
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\autCED4.tmp
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\epistemology
|
data
|
dropped
|
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Users\user\Desktop\confirm bank details invoice.exe
|
"C:\Users\user\Desktop\confirm bank details invoice.exe"
|
||
C:\Users\user\AppData\Local\Vevina\deblaterate.exe
|
"C:\Users\user\Desktop\confirm bank details invoice.exe"
|
||
C:\Windows\SysWOW64\svchost.exe
|
"C:\Users\user\Desktop\confirm bank details invoice.exe"
|
||
C:\Windows\System32\wscript.exe
|
"C:\Windows\System32\WScript.exe" "C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\deblaterate.vbs"
|
||
C:\Users\user\AppData\Local\Vevina\deblaterate.exe
|
"C:\Users\user\AppData\Local\Vevina\deblaterate.exe"
|
||
C:\Windows\SysWOW64\svchost.exe
|
"C:\Users\user\AppData\Local\Vevina\deblaterate.exe"
|
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
400000
|
system
|
page execute and read and write
|
||
400000
|
system
|
page execute and read and write
|
||
3160000
|
direct allocation
|
page read and write
|
||
3390000
|
direct allocation
|
page read and write
|
||
1903000
|
heap
|
page read and write
|
||
41D9000
|
direct allocation
|
page read and write
|
||
3413000
|
heap
|
page read and write
|
||
3413000
|
heap
|
page read and write
|
||
FFE000
|
stack
|
page read and write
|
||
F70000
|
heap
|
page read and write
|
||
40B0000
|
direct allocation
|
page read and write
|
||
179D000
|
heap
|
page read and write
|
||
F94000
|
heap
|
page read and write
|
||
C13000
|
heap
|
page read and write
|
||
424E000
|
direct allocation
|
page read and write
|
||
E05000
|
heap
|
page read and write
|
||
3C0000
|
heap
|
page read and write
|
||
1176000
|
heap
|
page read and write
|
||
DAD000
|
unkown
|
page readonly
|
||
3400000
|
heap
|
page read and write
|
||
3413000
|
heap
|
page read and write
|
||
EC0000
|
heap
|
page read and write
|
||
3413000
|
heap
|
page read and write
|
||
103E000
|
stack
|
page read and write
|
||
1034000
|
heap
|
page read and write
|
||
C13000
|
heap
|
page read and write
|
||
38E9000
|
direct allocation
|
page read and write
|
||
9CE000
|
stack
|
page read and write
|
||
534000
|
unkown
|
page readonly
|
||
1193000
|
heap
|
page read and write
|
||
3743000
|
direct allocation
|
page read and write
|
||
C02000
|
heap
|
page read and write
|
||
471000
|
unkown
|
page execute read
|
||
315E000
|
stack
|
page read and write
|
||
4033000
|
direct allocation
|
page read and write
|
||
30E0000
|
direct allocation
|
page read and write
|
||
9EF000
|
stack
|
page read and write
|
||
3BCF000
|
stack
|
page read and write
|
||
F80000
|
heap
|
page read and write
|
||
3A6E000
|
direct allocation
|
page read and write
|
||
2C5EDF05000
|
heap
|
page read and write
|
||
98D000
|
stack
|
page read and write
|
||
3B9E000
|
heap
|
page read and write
|
||
41D9000
|
direct allocation
|
page read and write
|
||
C13000
|
heap
|
page read and write
|
||
3A00000
|
heap
|
page read and write
|
||
37C0000
|
direct allocation
|
page read and write
|
||
3743000
|
direct allocation
|
page read and write
|
||
2C5EE1FC000
|
heap
|
page read and write
|
||
424E000
|
direct allocation
|
page read and write
|
||
B0E000
|
stack
|
page read and write
|
||
3413000
|
heap
|
page read and write
|
||
372D000
|
direct allocation
|
page execute and read and write
|
||
4033000
|
direct allocation
|
page read and write
|
||
3413000
|
heap
|
page read and write
|
||
16DB000
|
heap
|
page read and write
|
||
324F000
|
stack
|
page read and write
|
||
18E0000
|
heap
|
page read and write
|
||
C13000
|
heap
|
page read and write
|
||
2C5EDE00000
|
heap
|
page read and write
|
||
3800000
|
heap
|
page read and write
|
||
C13000
|
heap
|
page read and write
|
||
C13000
|
heap
|
page read and write
|
||
D21000
|
unkown
|
page execute read
|
||
3ED1000
|
direct allocation
|
page execute and read and write
|
||
2C5EE1FE000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
9FC000
|
stack
|
page read and write
|
||
F95000
|
heap
|
page read and write
|
||
34D0000
|
heap
|
page read and write
|
||
9BB000
|
stack
|
page read and write
|
||
F20000
|
heap
|
page read and write
|
||
38FF000
|
stack
|
page read and write
|
||
2C5EDED6000
|
heap
|
page read and write
|
||
3F10000
|
direct allocation
|
page read and write
|
||
3960000
|
direct allocation
|
page read and write
|
||
4033000
|
direct allocation
|
page read and write
|
||
FA0000
|
heap
|
page read and write
|
||
38E9000
|
direct allocation
|
page read and write
|
||
B50000
|
heap
|
page read and write
|
||
1176000
|
heap
|
page read and write
|
||
41DD000
|
direct allocation
|
page read and write
|
||
179C000
|
heap
|
page read and write
|
||
3A5D000
|
direct allocation
|
page read and write
|
||
C13000
|
heap
|
page read and write
|
||
DCE000
|
unkown
|
page readonly
|
||
DDF000
|
unkown
|
page write copy
|
||
395E000
|
direct allocation
|
page read and write
|
||
41D9000
|
direct allocation
|
page read and write
|
||
395E000
|
direct allocation
|
page read and write
|
||
3950000
|
direct allocation
|
page read and write
|
||
3ECD000
|
direct allocation
|
page execute and read and write
|
||
16E6000
|
heap
|
page read and write
|
||
119B000
|
heap
|
page read and write
|
||
119B000
|
heap
|
page read and write
|
||
3413000
|
heap
|
page read and write
|
||
DE4000
|
unkown
|
page readonly
|
||
3413000
|
heap
|
page read and write
|
||
1CFE000
|
stack
|
page read and write
|
||
C00000
|
heap
|
page read and write
|
||
3413000
|
heap
|
page read and write
|
||
40B0000
|
direct allocation
|
page read and write
|
||
37C0000
|
direct allocation
|
page read and write
|
||
E17000
|
heap
|
page read and write
|
||
2C5EDDF0000
|
heap
|
page read and write
|
||
FD0000
|
heap
|
page read and write
|
||
1148000
|
heap
|
page read and write
|
||
18E4000
|
heap
|
page read and write
|
||
4033000
|
direct allocation
|
page read and write
|
||
1175000
|
heap
|
page execute and read and write
|
||
39FF000
|
stack
|
page read and write
|
||
1146000
|
heap
|
page read and write
|
||
16E6000
|
heap
|
page read and write
|
||
C13000
|
heap
|
page read and write
|
||
B40000
|
heap
|
page read and write
|
||
40B0000
|
direct allocation
|
page read and write
|
||
3950000
|
direct allocation
|
page read and write
|
||
F73000
|
heap
|
page read and write
|
||
2C5EDEA0000
|
heap
|
page read and write
|
||
179C000
|
heap
|
page read and write
|
||
3605000
|
heap
|
page read and write
|
||
18E0000
|
heap
|
page read and write
|
||
38E9000
|
direct allocation
|
page read and write
|
||
38E9000
|
direct allocation
|
page read and write
|
||
BAA000
|
stack
|
page read and write
|
||
F90000
|
heap
|
page read and write
|
||
424E000
|
direct allocation
|
page read and write
|
||
4FD000
|
unkown
|
page readonly
|
||
31B0000
|
direct allocation
|
page read and write
|
||
3413000
|
heap
|
page read and write
|
||
3413000
|
heap
|
page read and write
|
||
3413000
|
heap
|
page read and write
|
||
11FE000
|
heap
|
page read and write
|
||
395E000
|
direct allocation
|
page read and write
|
||
A5A000
|
stack
|
page read and write
|
||
52A000
|
unkown
|
page read and write
|
||
DCE000
|
unkown
|
page readonly
|
||
1340000
|
heap
|
page read and write
|
||
1070000
|
heap
|
page read and write
|
||
C00000
|
direct allocation
|
page read and write
|
||
F80000
|
heap
|
page read and write
|
||
FC0000
|
heap
|
page read and write
|
||
DE4000
|
unkown
|
page readonly
|
||
4FD000
|
unkown
|
page readonly
|
||
CA0000
|
heap
|
page read and write
|
||
119B000
|
heap
|
page read and write
|
||
2C5EDE20000
|
heap
|
page read and write
|
||
3950000
|
direct allocation
|
page read and write
|
||
FC4000
|
heap
|
page read and write
|
||
1148000
|
heap
|
page read and write
|
||
3402000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
41DD000
|
direct allocation
|
page read and write
|
||
3600000
|
direct allocation
|
page execute and read and write
|
||
E17000
|
heap
|
page read and write
|
||
119B000
|
heap
|
page read and write
|
||
4033000
|
direct allocation
|
page read and write
|
||
352D000
|
heap
|
page read and write
|
||
C13000
|
heap
|
page read and write
|
||
3620000
|
direct allocation
|
page read and write
|
||
DF82CFE000
|
stack
|
page read and write
|
||
F90000
|
heap
|
page read and write
|
||
E2E000
|
stack
|
page read and write
|
||
3F10000
|
direct allocation
|
page read and write
|
||
B60000
|
heap
|
page read and write
|
||
DCE000
|
unkown
|
page readonly
|
||
17BC000
|
heap
|
page read and write
|
||
3020000
|
heap
|
page read and write
|
||
C13000
|
heap
|
page read and write
|
||
16E6000
|
heap
|
page read and write
|
||
133F000
|
heap
|
page execute and read and write
|
||
DDA000
|
unkown
|
page write copy
|
||
3413000
|
heap
|
page read and write
|
||
1903000
|
heap
|
page read and write
|
||
11FD000
|
heap
|
page read and write
|
||
41DD000
|
direct allocation
|
page read and write
|
||
3620000
|
direct allocation
|
page read and write
|
||
3C00000
|
direct allocation
|
page execute and read and write
|
||
16E4000
|
heap
|
page read and write
|
||
424E000
|
direct allocation
|
page read and write
|
||
DAD000
|
unkown
|
page readonly
|
||
51E000
|
unkown
|
page readonly
|
||
3413000
|
heap
|
page read and write
|
||
16AA000
|
heap
|
page read and write
|
||
3605000
|
heap
|
page read and write
|
||
3F42000
|
direct allocation
|
page execute and read and write
|
||
D20000
|
unkown
|
page readonly
|
||
31B0000
|
direct allocation
|
page read and write
|
||
C13000
|
heap
|
page read and write
|
||
E12000
|
heap
|
page read and write
|
||
3620000
|
direct allocation
|
page read and write
|
||
424E000
|
direct allocation
|
page read and write
|
||
38E9000
|
direct allocation
|
page read and write
|
||
3F10000
|
direct allocation
|
page read and write
|
||
3413000
|
heap
|
page read and write
|
||
DDA000
|
unkown
|
page read and write
|
||
D21000
|
unkown
|
page execute read
|
||
328E000
|
stack
|
page read and write
|
||
1176000
|
heap
|
page read and write
|
||
38D1000
|
direct allocation
|
page execute and read and write
|
||
1345000
|
heap
|
page read and write
|
||
3617000
|
heap
|
page read and write
|
||
3743000
|
direct allocation
|
page read and write
|
||
F80000
|
heap
|
page read and write
|
||
41D9000
|
direct allocation
|
page read and write
|
||
15BB000
|
stack
|
page read and write
|
||
16E6000
|
heap
|
page read and write
|
||
F58000
|
heap
|
page read and write
|
||
38ED000
|
direct allocation
|
page read and write
|
||
424E000
|
direct allocation
|
page read and write
|
||
1344000
|
heap
|
page read and write
|
||
18FE000
|
stack
|
page read and write
|
||
1344000
|
heap
|
page read and write
|
||
E05000
|
heap
|
page read and write
|
||
3413000
|
heap
|
page read and write
|
||
3200000
|
heap
|
page read and write
|
||
F48000
|
heap
|
page read and write
|
||
3600000
|
heap
|
page read and write
|
||
359E000
|
heap
|
page read and write
|
||
DF82AFD000
|
stack
|
page read and write
|
||
1148000
|
heap
|
page read and write
|
||
C13000
|
heap
|
page read and write
|
||
3612000
|
heap
|
page read and write
|
||
3529000
|
heap
|
page read and write
|
||
3413000
|
heap
|
page read and write
|
||
CEE000
|
stack
|
page read and write
|
||
1148000
|
heap
|
page read and write
|
||
314E000
|
stack
|
page read and write
|
||
3400000
|
heap
|
page read and write
|
||
F40000
|
direct allocation
|
page read and write
|
||
C13000
|
heap
|
page read and write
|
||
B44000
|
heap
|
page read and write
|
||
41D9000
|
direct allocation
|
page read and write
|
||
119B000
|
heap
|
page read and write
|
||
C6E000
|
stack
|
page read and write
|
||
41DD000
|
direct allocation
|
page read and write
|
||
DAD000
|
unkown
|
page readonly
|
||
C13000
|
heap
|
page read and write
|
||
3413000
|
heap
|
page read and write
|
||
FB0000
|
heap
|
page read and write
|
||
15FC000
|
stack
|
page read and write
|
||
338F000
|
stack
|
page read and write
|
||
DCE000
|
unkown
|
page readonly
|
||
FCA000
|
heap
|
page read and write
|
||
112C000
|
heap
|
page read and write
|
||
C13000
|
heap
|
page read and write
|
||
18E3000
|
heap
|
page read and write
|
||
3743000
|
direct allocation
|
page read and write
|
||
1903000
|
heap
|
page read and write
|
||
3413000
|
heap
|
page read and write
|
||
3413000
|
heap
|
page read and write
|
||
D20000
|
unkown
|
page readonly
|
||
3413000
|
heap
|
page read and write
|
||
3620000
|
direct allocation
|
page read and write
|
||
1036000
|
heap
|
page read and write
|
||
3413000
|
heap
|
page read and write
|
||
3620000
|
direct allocation
|
page read and write
|
||
DE4000
|
unkown
|
page readonly
|
||
117C000
|
heap
|
page read and write
|
||
117A000
|
heap
|
page read and write
|
||
38ED000
|
direct allocation
|
page read and write
|
||
311E000
|
stack
|
page read and write
|
||
E1B000
|
stack
|
page read and write
|
||
DF827FF000
|
stack
|
page read and write
|
||
3413000
|
heap
|
page read and write
|
||
32DF000
|
stack
|
page read and write
|
||
9E0000
|
heap
|
page read and write
|
||
534000
|
unkown
|
page readonly
|
||
C13000
|
heap
|
page read and write
|
||
F63000
|
heap
|
page read and write
|
||
2C5EE1F5000
|
heap
|
page read and write
|
||
D21000
|
unkown
|
page execute read
|
||
113C000
|
heap
|
page read and write
|
||
E5C000
|
stack
|
page read and write
|
||
173F000
|
stack
|
page read and write
|
||
C13000
|
heap
|
page read and write
|
||
4033000
|
direct allocation
|
page read and write
|
||
38ED000
|
direct allocation
|
page read and write
|
||
470000
|
unkown
|
page readonly
|
||
DF824FF000
|
stack
|
page read and write
|
||
470000
|
unkown
|
page readonly
|
||
3B29000
|
heap
|
page read and write
|
||
F40000
|
heap
|
page read and write
|
||
3F10000
|
direct allocation
|
page read and write
|
||
3F10000
|
direct allocation
|
page read and write
|
||
3D9E000
|
direct allocation
|
page execute and read and write
|
||
3620000
|
direct allocation
|
page read and write
|
||
2020000
|
heap
|
page read and write
|
||
1034000
|
heap
|
page read and write
|
||
3950000
|
direct allocation
|
page read and write
|
||
15CF000
|
stack
|
page read and write
|
||
9DB000
|
stack
|
page read and write
|
||
3413000
|
heap
|
page read and write
|
||
40B0000
|
direct allocation
|
page read and write
|
||
2C5EE100000
|
heap
|
page read and write
|
||
39B0000
|
direct allocation
|
page read and write
|
||
379E000
|
direct allocation
|
page execute and read and write
|
||
C13000
|
heap
|
page read and write
|
||
3942000
|
direct allocation
|
page execute and read and write
|
||
3401000
|
heap
|
page read and write
|
||
3100000
|
heap
|
page read and write
|
||
3413000
|
heap
|
page read and write
|
||
3413000
|
heap
|
page read and write
|
||
3617000
|
heap
|
page read and write
|
||
18E3000
|
heap
|
page read and write
|
||
16A0000
|
heap
|
page read and write
|
||
3743000
|
direct allocation
|
page read and write
|
||
38ED000
|
direct allocation
|
page read and write
|
||
3701000
|
heap
|
page read and write
|
||
1340000
|
heap
|
page read and write
|
||
DF82DFB000
|
stack
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
40B0000
|
direct allocation
|
page read and write
|
||
110A000
|
heap
|
page read and write
|
||
395E000
|
direct allocation
|
page read and write
|
||
3D29000
|
direct allocation
|
page execute and read and write
|
||
C13000
|
heap
|
page read and write
|
||
C20000
|
heap
|
page read and write
|
||
16DA000
|
heap
|
page read and write
|
||
C13000
|
heap
|
page read and write
|
||
38ED000
|
direct allocation
|
page read and write
|
||
3A01000
|
heap
|
page read and write
|
||
52F000
|
unkown
|
page write copy
|
||
1100000
|
heap
|
page read and write
|
||
3B2D000
|
heap
|
page read and write
|
||
173C000
|
heap
|
page read and write
|
||
D21000
|
unkown
|
page execute read
|
||
471000
|
unkown
|
page execute read
|
||
119B000
|
heap
|
page read and write
|
||
1E9E000
|
stack
|
page read and write
|
||
110E000
|
heap
|
page read and write
|
||
40B0000
|
direct allocation
|
page read and write
|
||
3743000
|
direct allocation
|
page read and write
|
||
3950000
|
direct allocation
|
page read and write
|
||
18E0000
|
heap
|
page read and write
|
||
D20000
|
unkown
|
page readonly
|
||
C13000
|
heap
|
page read and write
|
||
3950000
|
direct allocation
|
page read and write
|
||
119B000
|
heap
|
page read and write
|
||
2C5EE1F0000
|
heap
|
page read and write
|
||
51E000
|
unkown
|
page readonly
|
||
37C0000
|
direct allocation
|
page read and write
|
||
41DD000
|
direct allocation
|
page read and write
|
||
11FD000
|
heap
|
page read and write
|
||
31B0000
|
direct allocation
|
page read and write
|
||
DF828FF000
|
stack
|
page read and write
|
||
9C0000
|
heap
|
page read and write
|
||
3524000
|
heap
|
page read and write
|
||
E00000
|
heap
|
page read and write
|
||
DAD000
|
unkown
|
page readonly
|
||
3323000
|
heap
|
page read and write
|
||
3520000
|
heap
|
page read and write
|
||
DF821EA000
|
stack
|
page read and write
|
||
C13000
|
heap
|
page read and write
|
||
3923000
|
heap
|
page read and write
|
||
38E9000
|
direct allocation
|
page read and write
|
||
12AC000
|
heap
|
page read and write
|
||
D20000
|
unkown
|
page readonly
|
||
FA0000
|
direct allocation
|
page read and write
|
||
F01000
|
heap
|
page read and write
|
||
3250000
|
direct allocation
|
page read and write
|
||
3413000
|
heap
|
page read and write
|
||
30A000
|
stack
|
page read and write
|
||
94D000
|
stack
|
page read and write
|
||
E3B000
|
stack
|
page read and write
|
||
3F10000
|
direct allocation
|
page read and write
|
||
DDF000
|
unkown
|
page write copy
|
||
395E000
|
direct allocation
|
page read and write
|
||
C10000
|
heap
|
page read and write
|
||
3D2D000
|
direct allocation
|
page execute and read and write
|
||
DDA000
|
unkown
|
page write copy
|
||
1903000
|
heap
|
page read and write
|
||
F80000
|
heap
|
page read and write
|
||
37C0000
|
direct allocation
|
page read and write
|
||
DE4000
|
unkown
|
page readonly
|
||
1732000
|
heap
|
page read and write
|
||
38CD000
|
direct allocation
|
page execute and read and write
|
||
395E000
|
direct allocation
|
page read and write
|
||
15DB000
|
stack
|
page read and write
|
||
C13000
|
heap
|
page read and write
|
||
52A000
|
unkown
|
page write copy
|
||
DF825FF000
|
stack
|
page read and write
|
||
38ED000
|
direct allocation
|
page read and write
|
||
370000
|
heap
|
page read and write
|
||
41DD000
|
direct allocation
|
page read and write
|
||
18DF000
|
heap
|
page execute and read and write
|
||
C13000
|
heap
|
page read and write
|
||
C13000
|
heap
|
page read and write
|
||
3BE000
|
stack
|
page read and write
|
||
C13000
|
heap
|
page read and write
|
||
1340000
|
heap
|
page read and write
|
||
119B000
|
heap
|
page read and write
|
||
3729000
|
direct allocation
|
page execute and read and write
|
||
F7B000
|
heap
|
page read and write
|
||
16AE000
|
heap
|
page read and write
|
||
DDA000
|
unkown
|
page read and write
|
||
117A000
|
heap
|
page read and write
|
||
41D9000
|
direct allocation
|
page read and write
|
||
EFD000
|
stack
|
page read and write
|
||
DF82BFE000
|
stack
|
page read and write
|
||
F3D000
|
stack
|
page read and write
|
||
37C0000
|
direct allocation
|
page read and write
|
||
C13000
|
heap
|
page read and write
|
||
C13000
|
heap
|
page read and write
|
||
3413000
|
heap
|
page read and write
|
||
CC0000
|
heap
|
page read and write
|
||
37C0000
|
direct allocation
|
page read and write
|
There are 397 hidden memdumps, click here to show them.