Automated Malware Analysis - Joe Sandbox Cloud Basic

ID	Detection	Sample Info	Download Report	Classification & Info	Graph
1501437	Malicious Yara Sigma Suricata DCRat, PureLog Stealer, zgRAT AV: 71%	4ra1Fo2Zql.exe 2024-08-29 23:01:08 +02:00	Full Report Management Report IOC Report	Info Class
1501436	Malicious Yara Suricata LummaC AV: 53%	NewInst.exe 2024-08-29 22:58:07 +02:00	Full Report Management Report IOC Report	Info Class
1501435	Malicious AV: 21%	file.exe 2024-08-29 22:52:05 +02:00	Full Report Management Report IOC Report	Info Class
1501434	Malicious Yara Suricata LummaC, Vidar AV: 34%	file.exe 2024-08-29 22:51:04 +02:00	Full Report Management Report IOC Report	Info Class
1501433	Malicious Yara Sigma Suricata Azorult AV: 61%	4QihT6CwD8.exe 2024-08-29 22:46:05 +02:00	Full Report Management Report IOC Report	Info Class
1501432	Malicious Yara HTMLPhisher AV: None	https://5kirp.mellifluous5.com/5kiRp/ 2024-08-29 22:23:35 +02:00	Full Report Management Report IOC Report	Info Class
1501431	Clean Sigma	52e69dd2-1038-4cc3-9a28-bd4e33724309.eml 2024-08-29 22:22:21 +02:00	Full Report Management Report IOC Report	Info
1501430	Clean	https://nicolelynam513779.invisionapp.com/freehand/KE-Design-LLC-24-22144---3LtuK81gj 2024-08-29 22:19:24 +02:00	Full Report Management Report IOC Report	Info
1501429	Malicious AV: None	https://hardbin.com/ipfs/QmQMgsXNvcBrxtTiqDiXNirvtg2aFSGT7XRoUxFk5vCFUg 2024-08-29 22:14:39 +02:00	Full Report Management Report IOC Report	Info Class
1501428	Malicious Suricata AV: None	https://autode.sk/4g6XSl8&c=E,1,I0OgoTIAL6zcaU4kgbWKwMGE3oDCv6iOL9CcUXdPtaitrRYDaY2yqyg5z3Y_ue3psEsBTb_33PlDmEStP6z69HizNf2ISciGwmDuh9q-ApyQjjb2ectuilD2Rn0,&typo=1 2024-08-29 22:13:23 +02:00	Full Report Management Report IOC Report	Info
1501427	Malicious Yara Suricata Stealc, Vidar AV: 0%	file.exe 2024-08-29 22:11:08 +02:00	Full Report Management Report IOC Report	Info Class
1501426	Clean	logioptionsplus_installer.exe 2024-08-29 22:11:02 +02:00	Full Report Management Report IOC Report	Info	no Graph
1501425	Suspicious	https://click.pstmrk.it/3s/app.zeplin.io%2Fsignup%3Femail%3Dsking%40ccfi.com%26token%3DeyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJqdHYiOjIsImp0aSI6IjRkMjZlZmIwLThiMWMtNDI5NS1hMzYxLTJkYjhmNTA5YTRmMiIsImVtYWlsVmVyaWZpZWQiOmZhbHNlLCJpYXQiOjE3MjQ5NTg2OTcsImF1ZCI6InJlZ2lzdHJhdGlvbiIsImlzcyI6InplcGxpbjphcGkuemVwbGluLmlvIiwic3ViIjoiNjZjY2M2ODBkNDZkYzk0ZTc5MDNhNWY1In0.yaOJuFyLBA_bOwe7J2PVzyDAg_lErBcZxxpaCsR8qS8%26workspace_name%3DTMX%2520Finance%26utm_source%3Dzeplin%26utm_medium%3Demail%26utm_campaign%3Dinvite_new_org_member/vVxP/IKu3AQ/AQ/78157c02-c6a4-44ab-ad4e-4fc409cecad2/2/IMFUU3t5lW 2024-08-29 22:10:41 +02:00	Full Report Management Report IOC Report	Info Class
1501424	Clean	https://nicolelynam513779.invisionapp.com/freehand/KE-Design-LLC-24-22144---3LtuK81gj 2024-08-29 22:10:11 +02:00	Full Report Management Report IOC Report	Info
1501423	Clean Sigma	WSDE3-1290-FDC-1092 - Proposal Document.eml 2024-08-29 22:09:56 +02:00	Full Report Management Report IOC Report	Info
1501422	Clean	https://na01.safelinks.protection.outlook.com.url.protected-forms.com/Xdm4wZ0NrYU8rSjZMaU9MelRXNVo1VTZsRTJUVmwzWXliL2czQ2x0UjBqVDRVY1REWHdDYlZuY1ZxVlhSbXFteE5wK29Qd3VzbTI3dGt0U2V5L3djeFN5dGhFNm9FaXpwNjF5dWVPZWRxcENMcGQ4cHBrdnRyQT09LS1NM3hLNzlUWnpFbDhYS2JGLS1rODc1VzRKVWZ1UXpVY2lIVkdnbCtRPT0=?cid=2092520900 2024-08-29 22:02:14 +02:00	Full Report Management Report IOC Report	Info
1501421	Suspicious	Lutheran Community Services.pdf 2024-08-29 21:58:43 +02:00	Full Report Management Report IOC Report	Info Class
1501420	Suspicious	http://app.zeplin.io/signup?email=sking@ccfi.com&token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJqdHYiOjIsImp0aSI6IjRkMjZlZmIwLThiMWMtNDI5NS1hMzYxLTJkYjhmNTA5YTRmMiIsImVtYWlsVmVyaWZpZWQiOmZhbHNlLCJpYXQiOjE3MjQ4NjE5NjQsImF1ZCI6InJlZ2lzdHJhdGlvbiIsImlzcyI6InplcGxpbjphcGkuemVwbGluLmlvIiwic3ViIjoiNjZjY2M2ODBkNDZkYzk0ZTc5MDNhNWY1In0.x59ogVmf4mVvMWfJ_-jGC0swz8iGxrMDn92b_jRUpNw&workspace_name=TMX%20Finance&utm_source=zeplin&utm_medium=email&utm_campaign=invite_new_org_member 2024-08-29 21:56:55 +02:00	Full Report Management Report IOC Report	Info Class
1501419	Clean	https://e.email.ticketsatwork.com/click?EbWljaGVsbGUuc3RvbmVAbWFyaW9uY291bnR5Zmwub3Jn/CeyJtaWQiOiIxNzI0OTQ1NTgyNzAwODQ3NzJlZTFiMWJlIiwiY3QiOiJlYmctYjJiLWY0MzU2NjQ2ZDVmNzIyOGMzMjhkYzIyOWFkOTc0NWU2LTAiLCJyZCI6Im1hcmlvbmNvdW50eWZsLm9yZyJ9/VaHR0cHM6Ly93d3cudGlja2V0c2F0d29yay5jb20/SWkhfZWJndGF3X05EQkFNMDgyOTIwMjRjMTM3OTczMWIw/LZWIx/qP3V0bV9jYW1wYWlnbj1zaWdudXAtY3RhJnV0bV9tZWRpdW09VEFXLVJlZ2lzdHJhdGlvbi1SZXdhcmRzLURyaXAtRGF5LTEtTWFyaW9uQ291bnR5JnV0bV9zb3VyY2U9RW1haWwmY29udl9zb3VyY2U9emV0YQ/gZtCUvg/s1pf1b150df 2024-08-29 21:52:14 +02:00	Full Report Management Report IOC Report	Info
1501418	Malicious Yara Sigma Suricata DCRat AV: 84%	h1a1eHrclt.exe 2024-08-29 21:51:05 +02:00	Full Report Management Report IOC Report	Info Class

Windows: InjectsWrites Registry keysDrops PE FilesHas more than one ProcessHas Email attachmentDisassembly is available

Android: Receives SMS Sends SMS Reboot Native CMD

Common: Generates Internet Traffic Generates HTTP Network Traffic Expired Sample Creates malicious files Contains malware configuration(s)

Customization Show ID column

Analyses Overview

Search started