0839aabe...ae0d

VTI SCORE: 100/100

Dynamic Analysis Report

Classification:

Ransomware

Threat Names:

DragonFly

Sodinokibi

Gen:Heur.Ransom.RTH.1

...

idfoodsf.exe

Windows Exe (x86-32)

Created 4 years ago

Remarks (1/1)

Auto Reboot Triggered (0x02000007): The operating system was rebooted during the analysis because the sample modified the master boot record (MBR).

General

Total Sent: 0.07 KB

Total Received: 0.13 KB

1 ports: 53

1 contacted IP addresses

0 URLs extracted

0 files downloaded

0 malicious hosts detected

DNS

1 DNS requests for 1 domains

1 nameserver contacted

1 total requests returned errors

HTTP/S

0 URLs contacted, 0 servers

0 sessions, sending 0.00 KB, receiving 0.00 KB

1 Host

Requests

Severity

192.168.0.153

DNS Requests (1)

Type	Domain Name	Resolved IPs	Success	Reputation

192.168.0.1

N/A

LookupFunction Logs (1)Stream (2)

Timestamp	169.846000
Type	-
Hostnames	-
IPs	192.168.0.1

Function Logfile

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".

Remarks (1/1)

General

DNS

HTTP/S

1 Host

Before

After