Analysis

Category Package Started Completed Duration Log
STATIC 2020-10-08 10:26:26 2020-10-08 10:26:26 0 seconds Show Log

    

File Details

File Name New Order-#PO101.zip
File Size 689486 bytes
File Type Zip archive data, at least v2.0 to extract
MD5 a9117572826dfbc55fa528898a105837
SHA1 ed0f34f2ed6a300369ba166bac4251f0dd9a95b7
SHA256 660b34cec5ec9f8a579598559906d046b383bb2269e45e8d53f65cc103f4f258
SHA512 f5ff9d7c083c2f3d6c99bda4fc238d8f918704c2cbd9399becfec2d6c039909fddccdbfef047e7149c0dd78657b695e4740053db3e24b37ea9bff370a1fa9b62
CRC32 E08A5737
Ssdeep 12288:fJJ2AHNSoH3Vcy7kFfUR8cxmAAsFXEgXkoz4mxfnD1cp1RSKsNeLKG8:HwomxFMRnxmAtVEg9c6c11sz
ClamAV
  • Sanesecurity.Foxhole.Zip_exe.UNOFFICIAL
Download Download ZIP Resubmit sample

Signatures

No signatures


Screenshots

No screenshots available.

Hosts

No hosts contacted.

DNS

No domains contacted.


Summary

No static analysis available.
FQk>o
PuuvHnOLTlbSd3Y.exe
uwwwwww
'=]Qv)
%=zu#
mQzyl
rv}Bo_
6HLzs9
5GLzUl
\wtp\xa
iyFVG
=>@F{Y
N'm^3
z/Y0z
"z1r#[
mj5a$nX
A>Fw9
=#GZe+
wIHCd
rMcd^H
pn}<0
p(y`P`
!0|U}a
e-ZY;~
GM36!
tF*[/
UMENxnbO
hK+Y)&
iG;mg
J5-ru|IF
#hUh;AGW
@^t)v
xEy8{
&e7zTg
*_T|;
oS[=Ea
r3X7;a
]-FbJ
U=NC!
S{lQ'
O;Fvm
rhgNF
a:=(sz
}30HK~
;#uG\
)wF5$
F$ W(n
oP;=l
7,c$t
YXD56
1f;G+Nsa
npz)M
u${|b
dQB;R
.mtP=
JN=,1z6
1r&qvON[
ku\K)
KKB?&Nf
INCE_
bWqq0(
w*V*r
gF"Kr
(x(6>P
bHr=pRK
</xLn
p{|?1P
No]c8#+}
X-gQF
*MLT+
FU6<U
5qjvZ
ORG_H
*RnG4
~s]/WE
mX{=#
%=r}/
i53PU
!U7TKSM]
&@5s`
{j##+
S|%<#
3Z2R|g
pZW,]
EflH-
V-BJ>
Vg|D
%'gk )=G
Rb?aU
Og}GT
*rHWD
y=,W}5FXG
I0vf/
o&OMK
n0|%#V
+<&?#
>f#<_
HeJ^F
32yk>?N
26WjUFj
r\Nf8
qf$fr
2mQ+yg,Ng
sy%y<
e,2mX-
m8)nL
XZk8d
,TPOrL
D`?&{
2h]RG!K
`uVb5
j.'Zl
[U!MT
#U[Q=k
oc7>f
DKGu]
)i;x'
k=F&l
'ujt\-,J
Mm34)R
'RdDC
$Hln+ap{
ipc.vj
P'<td
>-b,?
^.b~1m
3:B\<
&S Oa(_
'CzQhgS
Kc9]d
p xg[
;p9VV43
/12 v
+Kx{z{
XFCR3e
L&Mkd,
|Kwlp
x1rrn
s{vQ'F
"W}aET
;b%r5
Sc+~H
t8&i<
wKJsN
Wk:G4o
|O2DpZLVU
z2#ngsZq
8M}aR{
/}&*m
Ag"Vu
|]#+O
VTedjX
K&U94
Yq+yw
|cmMF
mcOeeSN
mU/0i
XK<riU
$ruJ>
,#Kvv
Vw,]D
+q[|(
z!/+Z)Z
;:A?{
&bT1<[
+h?uq
3H/CCY
uqDnU
c6$c4iZjeZ
s:X&u+
9=+#s{J=*
<~%#[~
2NcdR
pZN&u
qNs}311
RfOIK
_EOxM
Mv`dU
4,pfA
%o?uy
\}KV/
z%2^[
@j:4|
g78Zg
yS/rz[L
ah<_-
s::Up,
|Uzw*#
,{DQK!
^\u&k
,1NU{
=hiT%
z0F:M`
i'7k"j
80(=u
\ /C<
uCX^7{
eu#$us
zMg2r
,sn?&
7<=>'#M
+y2>n
m{RDQ
%hKl)
x-h{|
^YhOQ
FIhO~
Oah_?
_y=7#
fd8?#$ra.
G3vI4F
D{1RB&M
22T`p;;
*Y0)[
A^'22E
s*#=$
>\p6#
SNe^1b
?f4yG!"
R:fVJ-
f-z"7o
0cQ\eF>
|[G~F
}o(XXy
}?9i#j
fs=OH
fP(qpM
0b)rgg
{fPbT
'W=Z
w;!`A
fdJ2G~
|OOjv
w?"Q=
GTVoo;
AGyu:
M$\qF
;#nwL
vY3<,x|R
KwH45
G>D6+
~AeQX
eYQ>[aS_
c,QO&
ORQ(|
^8*$w
J1rH&
d$B4.
*Pk=a
:[vz>
E&:*?`yN
/*,OQ
yOaIle
N]]Q-`
L;fjd_
Gj[s'
@r-C%_
n}VCq
o4:!O/
<A!s_
50n|~D
lITaFb
2b8dT
2MMUx
&c|p//
IKLI'E3!
Z5`e7F
>]Wuf
H2/"D
;\g?A
Q(It'
E/%TA
pdn-TJ
5FT{6
aoFR7
weFjm0
X3).g#
Fg4b$3F
P?oJ2#
d93{-
deUkTN7B
Na[`utJ
<hua)
I|1}!_L
B+F..6
5*pIfp
TD Qu
bAdqo
wx$/2
GnyUh
d>vPW
oR^7n
,rwV~
7_;iT
Q}O3}
M)8<^
OXi*iL
yeZ:c
!O]Cj
3Hjra
FY22BH
uB<\a
SC'DC5
0y>#;
T6l.!
L+]#.}
J1R1M
f-xgd
^ocD'
e4I^FR
%u4#.
sWO2R
TP7j.D
Vy/nA
C1F~|
q%~/~
B=\Q\
tELivY
]yP&5:2
O{Xr6v
vRW<{
a-q),}
GHyQ)
A-,/[
ZCW_h
u{8}GV
|*w%G7
A.#JX
C_$q^
u>lSw
S<,>z
ij!gX
1ROX6
}|&ETv
vFz/p?
[W)l~
uUb^Wers
I`{QuS;
m-<9b
aHmg7{
72(cx
wDt[1
;hWQ*/$
/,,*'
pGH)=!
ttyYr
IiL?[c
iF~p/
%|4CKs
?1rN.
V#,5'o
?oyy>
!hw|8
_*=XZ5
OTC![;
_t[V|
N3QQe
C/{F>
{Pxq7o
a$<]vr|
3QnSjfr
G&+W.
sfz>|F!
JCWp^
J/wG^
xuN/+'
r ]6U+
^3^`u
o^R7Mv
}"~ZY
3rHXn
Bf1FV
nBPFkX
:gi~2
+'dE>
ky)D?
B[xk0
')7PlP
|orv;
D+vga
a<{gk7
~<)+_
!mXvx
7"{9?M
J9Oi+l
OfSh2
zKK](
TfAO)
bin(0
^U,1M
U>yuy
j+N!{
)&<T!y1
9QEl
Epb}g,=
1v,!2
$|+I}
IXUH`aT
g%Uaw
VVgBf
:azrq
=g+xw
dL0c}j,`
?Y3LvOC
z|F_z
s:{4f
WD!a<4SDJ
y[*,k
ZyW]{
h^Sw'Z{
9OzXI
#7)Q>
E"~V`
<w $M
Y_2#EA$
K#~Q~
T2kkm~]a
8,;d_w
u*^|#KU
^j:^*
FZT%W
/LYYZ
$3(.Q
goN~/j
dQZrZ
T9j#mIGbc
G 4Os
#X.sV
x3q#!
nF(3S7'
'"H|W%R
(t#U40a
~57^G
BM8L9
Z#<oJ3
%H]W^y
m*jvp
D-]3\~R
#(*<o
eu?.d;
3cRkC
Oy&^%
H"tTf
fn.nwjz
FTK|>
MRLbM
#ju+Q
H/EKE
~Yl~39
G8av$
/OtE$
"8<aS
auI<nL
Po!V1
.E2$?NNF0
DpWT2
"|$^2
SKx<W
XXnz><km
2z*Sz*
Y9?.|+
eH<g_=
YnzT?&
8Q("+
5G?<5M
#sY.N
=|6b~
)51on
G`>zNuf
DaX6E
AtgQ;
R|P*q
M%_Lx
Z<Me.
IPN7S}
rBmlm
<5W'W
gO"x1
"Xta^/
!X=wm]
JuO2!{Qc
*5wuB0)
i},Q)
UsrnA
*3u4UN
1?Iz3
ccFdD[|
E0gBG
IW/OODp1-
{Q>Aq
GpRom
ODP|B
SQVW2D
fbjzWnQ
.ERFJ
;J~=%
a-Da/CM'
)<N-jf{
!x_$*
.K'-\GV
.Z1}U
.Z1-\
Q3Vz_Oz
_!TSV
f:^u^
v3(=o
<}i03
ImXzF
R<yM5
$>q!9
4PvdB
G7V|>
wnzNw
q`FO[J
]n:!g
El{x>&
|)u1_
lEK^6z
%j&*u
R^I+Y%
q">B3%
zgmuC
Y6Ric
Sqlw,(K
,i`lM
]Da_&
C"Da,
>m,X-f
uQxo$
/JGl!
.~z$j6
MJE/
1%;]_
IFPat
*UcV^
r}N+5
&RQ :Y
Mgd{B
jO6/~
Z?o{K
%j^^YO
VkC*+
tUp0m
NwlgX
2Z'[?
:Zuk|
fX*V#
{\/k)6
n3y?s
m6lKQ:\,
``|u:
D0vz5
t}XuS
I;7w,
oT9WUy
A07b^
CK{c>
t-m-r
ztg>~
xkBzAj
>;}i]
~l""(
w p=X
<aue8Q
"xvhD
Y/:R~aN
,/B<)j
*7.#X
BpH,vL
uGP|Z_\s
Zz/Cpq
MXAxT
p;O~G|
34kK.+
u6]DP
brTP&so#
2RP7)
8>.y
<A`lIn
K%.cL
gN["d
ZI(SA
+F6t~z
NxrJ!
C~lX,j
#o'_tE
XTkm{E
4z-jR
pe4Qj8=S
2`QpP|
b)nd/
/#0y-
3*;EP
L_6Q%
I6v{p
&j.K8_U
[ZJX,
U1(26z`LDd
#cb{E
q1b_Oh=0
W3< @
[aMho
[6*dY
PF>H;L
,5ufr
lctu;
@\f5v
sJpo:
fnavR
8K}!}y-
wy<bsn
C,s"G
Sp#ln
n_'qK3I
HNP`Fh
^C1Wn
haD#Z
1LZ(L
xE^@*
1L(m#1G
/D!7h'
?MZO(
5t?>f
2{l9;
Ch)[%hf/1
Dh:jN
gH?(`
do/fM
$VC;)
._GQL
tn>Fq
LF~?En
o#<u_
L~yYsz
3`'m/
b8N{D{
y3dj7!
m^k~$
/mZv|
n<;u*
>o+;pI;
.nL=K
>`2i3e;?
#~L(7
#<n.sV
{9{w<~
x%&^]
|:j~O
hr}E=
sxq{&
l%Zh*
YTUmFs
e=!iR
*fgx3OC
;fKpN
dU$ra
FsId)
Wq v6
`254)
z(OP`
m<'[L
awl-VQ
3~gii
!=r8>J
sd8uV
q~W?Bj
&]3P_
36|Yp
4h-rGG!
a.>"j
Xl_Od
%|c&R
IU\|{
](G43f
Ke*y_
yC:c>
!o+0[
mYIJb
1)PBy
[LE;y
>9#N?
!L\+hG
NV._H
L7wgF
={gsoe
G6<gBN-W
cv!Z8
gJ?q>
ZV]S%8
EbZ3f
y'%<a
hY>bSo"
4)!wc"Z
Ii<Zu
%!)Ky
O+xt6
6):Wp
fMn{60t
;dyn'
S601r-
cdl<Aj
;_`1w
v=JGtq
U5$G`
|XDQe
gW:`.
_G'c0
9`[NWp!-
;.{PO=D
w2pL%
l|&c~}
Y4l_F
;i2h`P
KI+,7+QxG
L`s)u
8sb.F9
lo0ZH
O_~"}
G8>v0
FV9Nb
bHZ`F
!Ke7B
mD^E_
7.s^e*
|omCe
[2O90w
42wz/>
|p#/Uv
`<x6}_
?~)j<
W0xL<v
\.BSl
4#{m1X+M
BQ"%[
B)l=_o
XEf_O
(:UHi
7agz)
x1n*A
lhv#*
,MT\(y
J> Vw
|I0cB
Y0R[W
.z=^3qX
hu$O&O
]!e~_
m%mX=
Fn^:{7
8Gc.*(
l+4f;
~p&~9
&i|:A
0*,6Rv
:!3Y27
)WO~F|
3;t%[s&2
+B{W+]
}[Kh?
fon||
=AOM8
Oxgma
=)L8eDI
9?p}&
whY,f
ys uA
E-"%)
KsZ1*
wGbu8
}}9y*
GV6No<
}/SR'
j:N:rg
Zx*VQ~
"HPB'
AKmP?e
(T<ag
kHliA/t
`.V%#j<
y%"lq
W}"{EG
/|gqs
dBe=?
D*Rnp
FOFxy#
m>W-dP
;SgJ#
JV=8I
E9j?g
^'}jr
Ob$O5NR
ZFXG?t
s^/EWn
oElD?
ALo>5
3P`XV
^"MR{
8Cyo y
O^y(_/
F7y1^-
N)N"
o/GzL
!R:jhP
Wib,
0u4N5
,%cu#~
owI[0
1G[z>Z
3B|?/
2,dxX
G<b9u'
v#QV]
T<F%"
4QuxNs
@B&Ng
^@z2$
H:6 <
q8Np|1{
8o|N`
9*5typ<
j+9du
-F|UmeW
5P4t%
v/}7_"
FAs3YG-
vf*)3
y?f=E
OLC<6
r`^/]
\S.fY
B\yxW
Z,OFK
T(+1D
*q2+z
<(@6$
n2Fgz
Dhfpp
!)XoKF
m wW.
u$Dk:
D)BN-B
EKw!Ee#
;?s{x%
!7fTS
LR+{s
lF]'c
4!?Ff
N!6u=w
LbYC?
wR4nj
/p_q(Rj
&y9A&
J'Quk6akM
bq]6;
P2Rew
~p2Mh
H|",B(G?
/]qt<
G+FCz
qj0wr
AAb<YC
H`E9k
PNHG3f
6KO|f
d6(R%
D#?`0
%1i|?R
bJ~NARA
%wF/l
3yxd"
A|=]wW
joVww
]wCDv;
@s2IFrH
Vl-u-
mSo&z
&pKa-
d\D-C
;}?]3
r{C{A0
O^7<e
Rwx2j0
ROiy5F
C<k'/
&.jdD
r$lf3_
uY:j%
I|g,u"[
#!XIK
If8">
Xfi=!
gNk:Sb
'v!rS
)$/w'
%,J: X
&ib9|
~*/wvpN,M
~o[B_
!sz]T
ZXj#t
u{%on
ctf%mFu
E'zR/p
GA>|z
-r5GW&
Gw8cl6
wL8#i
b"Wi#
ax%{mG!
DKP`}
3$oc9w
0Y$Zw
zq;ozMfd
jbcg c
#{/?d
Bt|-S
w)W$:H
(bfLC
);XrE
7Zzyl+
1u|Aj
3bAO.
AZL1z#
p/p$}C
srm#f
}9:z4N
ltNP'
W*y^S
!8t>KcLY
/a_a=1N
`.^XD
K5jb.
LRG/G
Pxc-J
$Ug=UV
d2Bk/em
dr#Mz;
k$Xb#
k$Fr
+F{a/
NRe$9
rK)Z=
bNqOy,Ko
hC<s-
LrBsI-
g<9uz"
R>nR%
cJV~a
l|)NJ
;beGI
jNX?f
or$7-
x?Kl%
U+n4F
`''?Kq
n7=$4
'5<^p
WhM?B
;pV.e
/flQ)
w1Wj/
H$xw"
$Cqq%C
T=_TK1{
)Z.Ff
"<F"v
0z\:Qw
*n?Hr
^gT/3
>IW8*,C
Q'[e37
n 2~>>
6&DOc
.[za9
h|=<H
J`7s4
kRiHLv%N
3o2ar0
EJ2BE
:5p`J
>L$nS3
znn\Cw
!lW4/
@I$&k
$$0_~
2}N|$1
F%R<n
^2oW3
Q0u&-
MA$onY
5dn2bTx
#9d2O
W9th4
E8W=$k
"]\'Y
0bb\7"
IigMa)
P*NtR9Y
we8ew
|?2oE(Q
ST*NY!d
\Cck%
;Z(PeMn
|):Ee
n![pf
kD.oD
-Kryn
U;yyd
QX=lb
'1pM`
\EdL5
CBY!~
I=I_C
4QSaI
26&E
c_%M~\
`>m{(
s>.pAq
aq^%6Q
b\;OS^
+m8+4A
f0Kz6
}#sP>q
<6qoX
-DVa#E
%~5)
>v']#
l+:O|
sx~6g-
Fs-?S
6V}#j
m(oK`
%{(;d}
R8f.A
@\m!"
r?IK4
,%Ef'
k/:>O
Ef]4;T
Ym:^&
|l*{o
{uhqK
fDrdH
-.9H
;},9~Y
=fJ%#:s/
;o)~CC
}!G,=
wX9a5
UK83`1
+M96O
J,lw0
V7s-`
ll%S9aU
0Ds2[
2J/|!
xy2_N
N*F"w
'4u:GD|
/E^t*;
^(8t3
9]Li`
&M|&ER;B
Tn[p{^;v
AlX2+C
-|_\C
-:c(h
_ppP79
vq7{?
dKn$f
sK1s]
C\r/~}
v/%w4
!3l&j
)WiGbP-
2OsCw*
se-];
g4Xs9
OU[:/j
1Ekh.id
e1vS"
6Qqw0
xR!8t
T%#k,q
KE]*O
ivmdg
h5n6v
|d&zY
k!Dq%\,#
%V5?F
`(QQBDB4I
[Cp?/
C<Z"EC
q<?iCa
>&K^q5*
Jh7g2{
}iaqn3
UIsb>
E<u!w
SS:PL
aM5V=
wXLug
Ko%'A
JWpBd0r5
'dXA|
V#N6f
Dqn-[kf"Y
()L{L
#}`>q#
ElY)C
VlgN '
ckXvf
F+1|U!
T&Sq&
gn9u.
1]Y4'7
H=`VB
t`wH=vnF
XN)%sb
%R|-_
7Bco3/
g\nIB
wNC/q;
SniurDS
m)%Z#x'{
2\^kJ
hfJkQ
I|7#.
wd:.R
17xt9
Tlq c
@gs65
C=N`;v
N]R<l
iK8Y0
h;MbE'
2j^SH
;(e^aM
w0td3
}|9f-r\X
-4\Nr
uiq"g
lwj%l
OD[q+
9b+9n
k.1sf3c3
nN>&I
zM$%&
Ix?C
6/#QH
lY0Kw
:x1{l
zz&24!
uV'Y 0
Ea_qjO
-N]@8
hxnF.e
L}N\8
S7yqY
>;n&
06E7`
Z\u\){
5;1hY/h
vQ{2C
{;Ib7
u|/(`
AX`4KG
u 1j
pQD=c
yEN\I;
&Kv|[
3Pm)-~m
*G&D^a
>oFbH<
VsPPB
e:l:8k!
Y4|0a
(NldI
Y[9z(
2oy3yNF
tf!fI
2H`r#7
a6I,-
w2o]6
aWy=c9"wK
'hlWf
X>i=`jY##
s[j5W|
&C~S9
@z&\%
=a67M
xR o#
4<EgH
dsx|"
g1zx=I
*n-aT
y#7M3
crd!W
LEJgy
dtj<V#
NPp<o
KKYL&
cH}dH
G&o8<m
t1S}2
hFtK0
-$#!ZRY
yp=q=
PJZCr
?('3R
}>?0%
'pf6M
&2Lfs
0:Fi\
KfaS!X
/vQ~T
2/x3g
r/@X2
b3o'K
diW#N
kGpNU
1e6??
m{~ '
Xqtu8
{Oq13
f7Q6H>A
n;).>
=W e}
7X6g"
6n;t1
8v~(>
\;VHez:
<Sf:(
v"?5p
'Ic~n
TtY}(
s\"+^
kE6|4
pNf)/M
v$wvr
`#3~"v
O!X=-+
~qlhX
Bt]_P
i>2sW
YbN<~
8zv$#
n~,+e
(t&z`,
L) jm<?
jFLoe
^ce*z
w0KRD
7?VU%p
M~B^u0f
O {OvM
hr>e:
_59Tn7
,=oL{
NQT%u
fU^>t
gi1n.j
]2CL+
^JiZ:e5z8
hy6In
bLP;X<k
!Qs({
|A&V+
CD>a<=
qo3WN
}O1[&tS
^mV8d
wx-Os
N]Ixf
vY~<3|
H_'ey
<z=4C
?rrJ5X
cMW_?
)Usn%
jc[mO
P*;7U
"Zu1#;<
wf;Sb
<&#p%
:gD{,
vUd?y
q1HR
b_p+[7F
mSizo
`rbu8
5Tfsm=
<vVB}A
!sxxj,s
XZm"H6
.._q&L/
KH_cCV
nFzc(
4jkWQb
DkG2|
FGP#2
bb-l=u
nfKJ)
F"]&X
_~Dvt
crQ?&.
HhmbA
y#6rA
EP2{H
4y?r'
WK8o?
k}MaJ+y
@+dFMF
6{2I}
{WdXR
N|JSZ6
ik/Z.
6;Vsp
}{:_fi
[>SjXN
DU3~)
my0:s
6[~!?
ahF;w
x?w3>
{xro#:
?|6kFB
@F]7d
CkPR}G
P2o4J
W9'NHm'
KYu:R
8'-#v
zBO+{Zl
Zbu-Y
_b6Us
<Gjzr!z
D:k"S
9,Fxm
6FH,"m
{$BWsi
R_E4m
j$,wa
<Ad^=
X>7"@
Go>q"p
%^X{=f
l+nqm
c_p'w2
BQ[!w
?)3{L
e4G:s
{(rN!%o
z,\>0[
zPzf.E
MG&a#=
hT?V'wrd
?O-&
N'&cK
-#Yot
/kQq)
(T|Iu
uWYu#
>v'yXP
{D7sR
z{9}<v1R
%EF[-
z{)h* i
Dg/3F
`Kg{.j
Cg#,6
PdG{s%p
|s%[o
Cgx>c
mj;'r
=xZ}b
:n'f1{e
zVhL$
h\+Az
^7Lyn
yx,Y2
LVt%*<
< oO.-
zg\Fh
W_`Pn>t
j"EJ;
$wKqqF,
[a75!}
fc~()b&/
?^@.R
}<[+MbQ
o- ^q
+"zZi
rb-?\
rLVJ2DL
a9'cUp+
$iP.K_T
$)~A\
39l$GF
y`32W}
UT00T
sx:eNf
_seCV
K"gV*?4
H$5Uy?e=_
%v\P=
O28l5/c
Kw2={'
et1I7
S<-cp
tGs<7
|Kwc
$`2u}
?"5s1
=&{(I
m\<?qe
=[3.\
Xd)1Q
y,.gvs
}RF'L
"?g/W
)LzI|
lGM^+cn
Cb7^g
jdR6\
,\k?Q
}I>%0(
u^.!;
H{lFsv7
1RtNkDdK
~^^*aX
!eC(N
tu:C^?$
gYN!ye?
IDATA
o%i{/]#
>vL<5
,_hHt~=^
(y#/S
.R.C9
s}#Fd
p^wo$
_o"IB
VEFp!
H%bz)n
WrGc".
$R!OH
kdlf_
"BJH)%
:s:M3
uxws4k
(UCcs
|U]EX
q ~3l)s
N+a=X
?TY:1
#x=JD
]Y]|O9s
:;1|\
mk*qW
r[u*_%
BQzdt
4e4!Sh
4|.^f
g| Y#
:gg2y
vs$i+S+e
HDwXp
\+rbK
~6uVWq=
&u3Lj0E
vl!kNM
H^T0J
1eC8\)
/8&ZK
LZQ?6
yl9$L
_qT~.
]tOpf
s&E/ nB
-[,\v
v?o+W0l
-DE]0
y;Q{l
lz5%()Kg
26Z}0
B& ~b/M
A8J]F
ihQBx
47TO}
$J\bW
}-k%n
a<U3lx
CcO+E
L9%Cy
@-urGh
NZO*2
ll`XE
}mLX_
JhSy/
Alu^J
9r2;T[8f
^>"X=
onlag
|>VP&
[1(u>Q
69v/*
GVL#$}
AqwY8i
1+oSz
Vw*'/
+?rR[
Xw4?j
.4C:C
B9:h.
Cs4xu
$aOgc
2O`i:
i%x.YM~|)
D$&M!
gbB/*
29oaH
uv'o&)
1|9/IBf:
"5k=Y&
Jif%w
v^kY2K
Xh*Rx?
MhdOe
OsWr
m#0=}
uq~h=f
qBtUI
~c*#7
}'RYr
?Fptx
XELcp
g;Na*
-n^d|z
%K&q+
$\kC1s
6u#o=
Qs8Qv
xl/rNUDV
fJ}%8u
)j2wh*
p-p';
oe-y;s.
'G79sW
QURD]
6o$Ge!
.[twpd
vf"wC
;_/Fq
kJ]5ii
<Sv<f
![r1CW
wDbtYw
KQnj-
MKxsRp
VN~Hc
|-/n&#?
mGwI9
!)?"`
a0R3F
a<KYC
})GUCy2
o(g]&
P45^!
95a~L
uuN{'-9N
m%2,i
lFui'k
\Nm!t
wZ(O-
*X }z8
g?OF<F
+K-x_
RmY}M
+91s8NS
E`CB})
sl{"}7
n8k`l
$q|6<
)/mvemA
dON8AS^
cOZv*W
>[2xU
5huj#
6G.\F
.M<}%BHF0
^}~mS`
e+5y,
[c+/K
Nbk}*]
#S-=y
9Or>ad;
bk9?I
$3x#[
?r$N}g
pSV~O`
LpK !
022#r
8b%}/8
[o|N%!<
QiLx8
vM [#
o4TMi2
>nJA2
u._n%
VtRe$
2`e5S
O_oQ+*
x^)-S
PR6AR
:bp9{
%0.-2
:l2,`
#'nm`
%_GKQ
J,>car
oZXQoA
wc<kN
y4!Kc)
K5a+nr
n=.yKIy
UBY;h
E"\S{M
GIqYm&-
qoq./
_B[$Qv_
6}87r%7
D}y{u&
`%#7=ftC
qF$fp
8h+ao
,zjWq
io,9Z
v 9n1
J2r#X
q\k>I
)"mt0
aHi$W
@k[!'
OGE{6W
6Hg(u
Dc;9A2
.CyTj
B$F| t
#Rs%>
pUPCF
NAX`0
&6vq0K
Oa{x/
+bcbi4
^;r]/
;GQM'
3LF.!
a#3Mz
djk2R
>p6%B
N&>q" u
;,Iqg
=PSQ%
`BA =
\xVfN
ES. ?
9{aye
jX2~c
Y3XXq
7+(}P
5c.1A"
]%4o!?
&n''c^
h!z*y
{-\Gmb
L5,%-
*'1Z>
>BCx}
o$s01;
syyq2K
o$F<&
TcDiZ
[1!'[
JL\aC
Xn+%f
!mTLu
?y<f"
B|j72sV"
2]k,#
nF\w1Z
Y73XX
p"~Odvp
_pJe;
ge9b2
Z(KnL
-czb:s
;n2#g
1|v&z
+Dk{9
}=}^%
6j(cJ
|Ax%R
WEJu*S
m0?bM11_LP
?'^g5
7k~;s
*2`~6
o8)+K
hTZN#.s
lro&=}
dGh#w
0gGDJ/q
FlK?2
voG5`/
8!KMI:<
0Yo*y
oNpnU
T$N_$
oN"m~
E4L?E
j8W5M
t7;T,
=w&7m<
4V1G'
a_A>1
>o?Mm
*OS0%
BNv.'
1y\Y,
k^Chi1f
@Dt*9
1h%S%
@IT%%s
0y2c4g
XO/B{
w?cYS7Ii
P`lKO
7ssa3
Ou)Q;%pM
|s(#Q
k^%-g
MsQ}\FdS22
bn$6S
|S82(
DHhyM
<X'PQ_
$SI1l
mjp[oA[e$
A?2x'
Gg0^b#
wn`EY_
R{n4A
?l{VQ{e'
a^<S'd
i8:x#
/f2/R
`W$q;T0~
*G*g0g
bk$&4
Yve"=
bR5lN
?EtyW
1F;_r
>q%u^
67OFS{
':i?*
Qd5:s
kIheH
U)2o|"v
ukKI8
DDX_^'?
cv1`H)
`~c1s
6ND1M
]CDW*
.Sw^$
bE&9W
|RGt}6
&aq {
N6DmG
=cy1j2
+iBFl
zQ=2-
&_tc81
um<bUXi
;v<kV
0?%}H
]X-06
)K~5=
DnMJg
v'gF8
ZvYUbXv
3zf3]/
WKOc7
l`np.F
F&3lp
1~<#n
xW>aq
d`C:k
$r2l1
ef(qu
Gv[<6
Z"/nG
=hlNd
0+]@D
]W!j#D
5tTG`'jK
sdI\)x
D?#$l
5^c48
'w= KB
AH?4'
umGtP
j2JH}
;Sr%0
_"#w0
4IK{8{
61Bs2
nfQF5
h66rs
VVIgb
L:'nx`
t)YOl
/?!7g8
Y4e}f
<cCRi
=_e3h
c:O<^br
~kF2A
o\?PC
Frgng
dovBQ
P(KNm
"LIy
\5[@A/p>
p$lq*E
dSD_%
XK^4{c
.E;Tg
H&l}+
_*/p\w
sr~-+/
rZ$^/d
3s[<-
oX -W
jLGt2
|o}Pa
g.~mB
':)8N
Y'qhc
Y?`-6c=p
nc{t+
l0+WEp
y0.{_2hh
3vyoXz;
X=mJ&
'&u1)rv
CI&6~
CwYz0
A954r
]@el,[
#/Epz
ddG,%
9{h:u
KckH-_
Oe9i=
Xd`:z3e
olDWV
r<BA)L
-G]N?
OL>yR
gh^>f\
CBL=w
"uj;{
lZDzI
_H7_Hv
?5?yrL
f9*MF
+zkm)
U%+K,
7Sr*Yr
1ou=Y
\}yY7
wo$ZcmQ
t'(qs
$[6oB
8xepE6
RX`";Py
I3i9~
hrlcX
6&.Tg
jpUq4
pn?:,
=vt^M
lbNV2
Z3*x0
c}bQL
3\k,)
MT,P%
}z;'O
68u3|
d|S+?"
0yI99[D
y7c,+
W9pWo0
O-&.V
Y%QT.U
Z<~W.
QDDneRW
X27[7r
r&t7#l{(
2TNJP'4
Z7n8wq
c9fVE
srbH_hAx
YbPRA
cUy.0
C/w16i5.
kGq|y)
hWIAg
<clK9_
k2Jnc
]CGG"
K'2nB-
+)nK
6?_Jb
33Zdf
bK5ey
7{Ats
Qq&Nv!
r1{<u
=jL[{
iMCw={
`r8'[
?>N_LE
fOY>o
DSBB&q
/sdvrv
E/s!F
oic19
vPjSCX
, &b
x5g=;
ao )k
~&9.6
[&6z1
:3}N.
a#+l{0\UL
Odi_\S
.$~5$
fLB'x!
2;g'C
*L+,b
O$sS
OLS5gQ
|,$py
V`~J<
gl|jp
DVoRC
?[-fc|
0]flQ
RV'm#"
qWw08G
o\VP:
j+VJu
]qgL+n
qj31+
8M%Ml
y`YIc
f?RnC
PQIP[;?
sn 1F=
N}bel&
9aUJ\
a9?F~
!imzX7m
t9A`v>
9~q(+
?rokH
~fOu/Ou
G_)fX
#$v-a
F.&=&
uv(c6v
tLC>a3
g}}hNqg
s-!`l
A"3nX1
nYBEv
M\)3fd
&%w+5
eJ)7EfRT
tf+2u
3?n{YQ
?h6d!t8
Ajg5N
N;Y[V
hr`i:
!Gx05
$Vi(q*
?3&I=
3S80]
Da_3~
nnG_
Kf;'3Y
}/e1^\\
0ex_f
&z\B()
EnW/m
J,+MBC?
HX#je
w&Q{9
g[-y#87
8p-&7
gJV2o
YpBx2
v~ov$
%fI8sb
:Jir=
p3t$M
H1O0_
~y28u
jfJ/C
!(7C6[
fP:BE
O`s%8
zovq7b
cM2]9
lJXCH
{Mlh6
K9 Ps
&w-Z1
a]{"3
_BTb=k6
_HG&]
E?{5nC
CXu8A;
7#G'c{D
n/P[<
~>K:gs
Vrooe
Uf1mR
MB8*l
U`pvW
1T:eRZ{
0gg0wf~
OaZ+EA
o~Uda5
$K*E$
0sh>W%
CiZmW
`~}7AJ
G';Dl
s3FxhcQp
Id]3%
dU^pYS
8%^${
-~wyVgC
WGq:^``U
WJ88S
V/%6QP
u$d{s
hUDMm
L0o&=b
c%7{Lq5
j>+\>"^,
EVV"k~
~a$O$
1M~+'
EwczNlDHB
O;.3ub0
_FjV&S
5L9yJ
SY+'F
G&]!I2
0_uvH
;3~\!
kF3Wg=-
~['rw
71jW*J
tm:+(OM
=%7's(k:
AN?s.z
(qp%n
c<W`z
#z'a>
I|3"w
1Cc/3Z
"tV"z
+'Q_8
Q28,t
r`Pa.&v
H_<_%
[tE0`
/v=2B
[}WqV
Knt&R
+DOk"
g2\c+
xn(]`A
z6+2r
EIt;X
SMM~.
G]I(O
I |u9V
V~.zBq
GBT-_
$#KPnj
j3iU'Ol_
/CYz>
~26k71
y[$!"
KyU,K
`!,D}
(b.4`
#"j-]
Xsq(#7
ws7}!4_
a\L.y!i
kVbVy
zGNm6v
4>*el
vA1[fa
~)$k{3:
(a7~0
AS:i0h
AmT;2
GYas,
n&.m')
^/4>u
wv!v}
ojC8Q
byGxy[
ADFucx|(
y&&?G
Ek1(=
0Vb,w>
o*"K`
sOQ0Y
OR, -
|leWq+
(!{y6
mMdtA
vu!t~
h6Trr
V4#Wv
r_Q:F
~kDLa
`~_1ve$)
W5ILZAON
%RPN{
S_#TZN
G7n9w
/P"66
n.3kbI4
YFYoC;P
+N"y|uqg
yNAOa
<y9\p
WpO}#
Zv]lt
sGk`\
F*qd\
vIlWz
1cf9y{
!CWHQ}
ucts3
_c_jD
k*zH;
cOz_CJT
G#q^O
~=S<Vb
4WZdV2F
h}(c&
6D{K3
><4~M
~t%K'
Xx+{d
6p'R{
XM`KZ,
L*?_`F
c68^n
zcEY3
cO#q
1\p-kLy
+"#l4+>;
- dC%
yJ\d&Y
SE*jo3
-%h}9M
"Ci[2
t$g4bt{
Wj8ze}1
\!\t2
eswI<I
oLjP,
PChz9
wv1;'
8^Tfg
|f{/!*
d|CH_U
^"&)_
~WeP91
N +q,
/Sh{;
1lSK$
-:7wS
0]Pdg
]t+4#i
0`i>s
^E<KIP
yQsy(
3%4lg
N`|F"
&Z!;"
Fpqp:
e3n!<-
IOS'b
f^F9C
*e|f}
'i8 C
Nm#{a
"sPl_
/`:Gmn`
`,NE2
h7[.M
PJW^E
/4N=#[
E?D{ob
kj0^+
0hL)e
a=+,_
^qBVb
,]1v+
6=\(V"$
=4j:3
W$^Qu
r7=y|6
sen<Z
<DKu$
NYx.y
}Jn3u
|In(O
8%aA.
tNnfn
E.gGi
:DvnfV
*wcZb$
\b^P9
=Lv:Dm
7(+oa
Kd~;=
&v3X?bx
a(k:r"v
ESu2Tt(
?IhufK
mVO\OK
p$Qjo
>Js[}
RsO =
,f`A=#R
k4%Ne
8L:nq
-Q'(z
{d?4+
IDAT/
KxE#W
k*?~j
>q}\)84
;+PY:
/;D>m
lWJqS
LP|}}Iv]
'~3;<
.%"N]
.DOgK
X,mC}
&eu<l
owVq2
Qd.OC>
H[a2W
K*LNph
5ach_y
y<+tWq
%t>-!
t73eH
hnkk#n
/e_V6+68`<
kjy1R
6&g%1
htN:1K
$)2*D$
Lr!EC
ou(l,
C538`b
U~U<!
_vsCu
"5)u=
fbit9
Xym1=gn
/("*M
j[Y.-
*Nc5e
H-Cqo
X']ec
{,q]7
*rR&<81
gHSj!po1
Ow? -
Tj?I*
&v9'y
Gv2P"
E/r&'
>s2#G
2mr7y
n+1W{YV
orMz*r
39h"G#N0>
yy.s.<
oVrO!
~%n*cx
9TmUA
;GFg'
1Dw&+^
v6,\M
n.glb
oUNS-0
{q3mw
RBC`{
L:04K
4j-Or?3
Ro_Z?<f{V4
!,X[l
K`UOhx
3>#'3
2kj>G^t
Si(U3
eaN%;Z~
~eIrNZ
=[8S/A
b%+^.'
{c0'O
kV%=n
`ffC1
Idz,A
|_qik&
zN.1$N
cB}>"
x`1s0
zb6K09n!1
e\@:y22
{y'z/
1${"G
fLZ<S
8;q3&s
nA1Ga
b5T#"
4V$tr
<\q?*
VrN|%
5& W^
:;01m!
8wB%y
y.s/LB
OAp/<'
r.y.g
Iye*s
R{=XQh
SUKNVus1z
NEE`q
lH.E1
:.&#p;
kg(Us
t&{8#
[.%Bb6
b##,(
{8N2_9u
3Bw]Bsx_
(-' z
!edd-p
+[R(4
!tG(!
!5c0^
uXhTr
#4V`&
=Kve"
71od"
3(k4B
_v'_k'V
Ji,yr
u9uRtMx"
@D/%3
! f{N
Y]i4/v']
C%Yu$
#"g=q
7&~;K
rj>!+
G1t\!
7nVm`}?
mee?e
,feY#
vS2n/
0md;y
.n<>CH
h"DJQR24P4
p&rp3
Tejn-
_,z&B
>#?}9S
PQ!\&
Sh3e#Nqx
yy} ?'
Ypa7W
$MRbbZ6
U=7iZ
NlciF/
"GQfm
;H|9J
y475"
^\HKo>b
K4!K:
a7JW_
qtH4C6
0jO#UI
\U#/=
Mm_s"
Y.{dq
K{_wb
}9;m,
Y}gSlP
Fbr$vM
=xG-'q
,hNE;
?^+0X
'|:^H
r]F=|
vD_d-
czyr(
OK0Q$
\*4aWd
iPO$t
\+ #y
;g9=_
lcra*
qH;db
pwiF7
[f"blCt
4BPdIS
LG-"6s-
<&]ja
*N%|M
K<wsgL
a%_fy
Q^<NK
UnLRDa
(}+Bx
g18u/
EN<6a
J;g1f
s8ag|
D=6bz
Qmlwjs?D
m!jwvry
WYcfw
/(Ku0Yi
ThOF-
3KY6=
mo!Jzm
QDOMA
,&3s1
`f]r"
.9~BGl
Hai?m^8&
u/nrFg
2w1]q
\+/7?A(A
iS8.(
o1p4!
.Pt ~
V{Yo(I
Fsym?^9
q0|)V
7gr)-
7,Phe
Xf>O3
U7pQZ
arNlA2
feS%(
|M5F;'
vITEj
hCV-<
_fo8F
2Ij&s
&7~MnB
{Xtw0
Vbf+I
{_ DC
w7M#{
,^Ma
?Mp>+A
"_f1Jk6
z&I%'
?C_sG
DNJ`)
"o$Ju
Do:MG
p| TI
\xMIu
0lWi2
&3hl<
Ku6\6
}o8swr=
U=c&}_F
xsf)wk;8
Vn'oc
]O9#:
;QQUe
0Zk>+
_0Xr?QOO23M
4Xn%.
OR~^$2
k`+cUB
9|)8M
o.YO!
sjxql;o
W1qq:s
{GQ,(
CG~_|
0?~)+^q
S}+?H
uEzIa
\[h}T;
Aa>=>
JxUWp
8fYz{
?r~rN
Esy]&
3p\Co
*-bQL
dATo)
~')3g^
?Y?+F
jjg6t5
*Rr}o
wsbJF
MJH.y
)CV~l~
G=Su+i!1
[54\]
W_'..
x.|<F[8`
PyY}Q
4^%{|
8A1W"
1lqiK
C3C*~
=V0kI7
W1[pcQ
R&l.8_
scz{_
5hVBF
2VVO~
`jW1&]x
S<xS/D
${~gL
DiV1q
?s`]E
Ve#Ne]
G;suW;-
8nkrw
I;hE)
NR|n3
SxF_
6`P|-VJ
]}6Es
89ME=
7*_M7
h"%b5c
C,{pHz
9A_-8
a<-MH
OmU)&]
l&^>x5k
CuLdni
u[R.y
>+O6p
?I<4m
Oetzv
eLx&9
93sth
:FKL7
?HKxS
-1ohhg
$65-"
2(!8:
JkdFRt(H
kP!<#
-("(4
0atZ$
YF""GUz
SxZ%S
["bQ-n
`3ai0
!V3C 0
90_a2
lJj4l
Tct"L
zeXgu
gkQ-<
72Q)f
Ha#t;
1LIA$
42I4
VkXL5
X5N4"
\<&9.
F$Qi#[
GTb9`
&s8(;
Cq;4$|
,0AcJV
GAT"$
''BcL
'D0769^c
L:<r8
Ub^8C
(L:GI
6^nOC
maZ5S
YhBjT4
dJ #iFMZ
44Fg
#YrqZ
hM4_l
LJ$_A
.Qe61RX8
Qbjr,
vsp"_h
ir(%(X
l#S!w
wd:|.
5!Ly4%
P+f0Z
a4!038b$:
8%;"R
f.aQc
;S$ij
Cjg}K
ai#Oo
@Nrq4
Nf6r8
/!Oi.
7K$0]\
Y?O|9U
up?-^
Hz>'$
~<ODm
J^%9h
r>b*0
+y4q;
7CL58H
K|Brw
Oku?6
GA~od
H'~D2
\C\(y
%q,qg
7V0}3f
oz&*6}
vU7}3};
;5~'p
V(#nc
T}.q'
z>J .B
z>Ja*qo
.z>J9
/c>J9
9/c>J9
q1z>*
'`>*9
Tw}| _
i!w}|,
oMOU'Oi
?%sTu
f>OW*
t`='|
uqf]g
U9T,!~SF
$6u8J
R|mn1
y>I+5w
:3/"K)>
I=O|W^T
cW!nO\
+h]N<
,s>CV
}Cc}?
/9+Kl]
ZI:n%
U3bDh
?#zfD
H3t3t;#
NB{BX
I!,C{
i(5li(7|
5zJtb
K|G|g
E#(D#
I'K:[
\I'K:
v3mZm
8D}3S
/V#08
|%x%sS
You>a
E_9{X
f[+mOum
7m(T:@
r2~t_
{]4F;`
X2(u7u
4%cz!/
%62D;
}V0>t
J6|C&
M|!%w
h8XMn-6
-b=w~w
]s_[i
]Z[rS
S`/ou#
562[g
i+!jr
_*Bv%
?Lqex
-y5|6<
V%va3
hL;hsF
>_B-4
]GIhZ
^(('2`
^u7.2}
6'g7XW
4<-x{=
lfvDPx
}Z8yy
)TJ~P\1pQ
AW{dN
$*]v<
_U88El
[U%,0
{H&75
t>Ddt
55{?:Dl/
'98V_E%
m&@Q
9jiUk
\vBK"
h)gz,@
JKnxG
MMRa!
jA)=qR
Bo=+]
/AY*4
>}'92
C$:9+(
[*d']
[B&dX)
,,]]2
B>EMp`
Il*;0
+Nu~!
/3,L^t
PNtqpW
o77]d
yx2Z=
)%JIw
X$"~fR4
J~%Bmle5
uf#1A
CD-z[
Sx:$q
gSd-%B
<y/tRI
_]TrC)
oS6L-
|Q=\(
v00:z.
:^:~c
z}~t|z
[}r%Y
ZQd TY
jD|z]+N
ojaI`
a>_g>~
Q"rb"
Ld5m&
jQT]i2k
-I&[Et
)c`CL
K(vLw
M,<\H
ku5*?
"HW)gZ
H:t)S
dmmef
dB8k\6
QAJ4g
&MmL}z
OOwzO
V_>o~
{M.n:
6?[bu
aGqv7
7B2|2
0=w#tZ
wOrv'
$dZbe
g9dA_U
RS>[G
AARQ&DcG
;iD]t
[.b4x
M} d-
]JL)E
Qo2:>
hX-w(
(*Tv$`C
fPK6Dj
;VtTTl~[H
G"SHW
3+Fk;
<D410p0
Tlvz&J
g+9=g
c)Z1}
+!`Z*Oz,
"kU )
-0rud
4(7lZ
OV0_zE
;H><}
}Xy j
9$x5/
xwJN~
~y(#e
(M:^qQM
Z:.qW
K<At.
>eMWs
AZD?b
`FW U
W:"jd
?G-iDA
n%O:/
WnTi_Ksn'
EwlN:.A
i\bfq
RGh2fZ
`P3*7
{3~S
8MvzS
y~4Q"
%Lg<&
42}FBZ
aIT27M
#7G7p
.h)`
vpLJX
48{@=
0v7W[e
kAaI$P
&`#jK
q2+wZT
\cio
daEFQ
Vy} k
L)whZJ
([2R"
%,0}<
/VUMAJ
se6^5^
FBb8z
\j~PFMc
K#>Ww
[i$H%;F
oRXJ"
Evp&a
xXGLQ
8IHax
UvR2%jD
d%1YK
*Krhd?
Xzdam
|rb>P
'{*_1
TkPx6
A$yfG
}#;KO
hmXq</
dzHa}
#6RE/mC
CZLU[
qF{r*
3v?bm
y$pG'
^wKaeO
Uf$f2
K9CliX0
3&^4s
fj)Zy
g/Y.Z
Pjl;{
_r-I>
Mdq/N
yf90$Q
g1B7W
w{~Bg+
*l{/_
;+q[y
K<Sv=j
$ lq%N
Bg/_!
^ow9H
0d>GW
4{`#z7m
8dOzcs
~J_^/aO
T/>DIS\
FZ;"Z
f%{_b
-.!-~L
@1UdUQ
Zm|tl
9jkv(9
M*Au3
-v|?0
#lQ&w
)S,@[
a\-ils
I}@A}`
%(9kB
dMhkb
VsW[j
K>/&"
|LL&q
%|"Ky
kwjS-F
FQk>o
PuuvHnOLTlbSd3Y.exe
No antivirus signatures available.
Sorry! No behavior.

Hosts

No hosts contacted.

TCP

No TCP connections recorded.

UDP

No UDP connections recorded.

DNS

No domains contacted.

HTTP Requests

No HTTP requests performed.

SMTP traffic

No SMTP traffic performed.

IRC traffic

No IRC requests performed.

ICMP traffic

No ICMP traffic performed.

CIF Results

No CIF Results

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Suricata HTTP

No Suricata HTTP

Sorry! No dropped Suricata Extracted files.

JA3

No JA3 hashes found.

Sorry! No dropped files.
Sorry! No CAPE files.
Sorry! No process dumps.

Processing ( 5.356 seconds )

  • 2.632 CAPE
  • 2.611 TargetInfo
  • 0.089 AnalysisInfo
  • 0.019 Strings
  • 0.004 Debug
  • 0.001 BehaviorAnalysis

Signatures ( 0.05900000000000001 seconds )

  • 0.011 ransomware_files
  • 0.008 ransomware_extensions
  • 0.006 antiav_detectreg
  • 0.004 antiav_detectfile
  • 0.003 persistence_autorun
  • 0.003 antianalysis_detectfile
  • 0.003 infostealer_ftp
  • 0.003 territorial_disputes_sigs
  • 0.002 geodo_banking_trojan
  • 0.002 infostealer_bitcoin
  • 0.002 infostealer_im
  • 0.001 kibex_behavior
  • 0.001 tinba_behavior
  • 0.001 antianalysis_detectreg
  • 0.001 antivm_vbox_files
  • 0.001 browser_security
  • 0.001 disables_backups
  • 0.001 disables_browser_warn
  • 0.001 azorult_mutexes
  • 0.001 infostealer_mail
  • 0.001 masquerade_process_name
  • 0.001 revil_mutexes
  • 0.001 ursnif_behavior

Reporting ( 1.404 seconds )

  • 1.404 BinGraph