70fa2300...7665 | Network
Try VMRay Analyzer
VTI SCORE: 100/100
Dynamic Analysis Report
Classification:
Dropper
Downloader
Threat Names:
VBA:Amphitryon.1265
Gen:Variant.Graftor.596138
Gen:Variant.Zusy.308149
...

Pyongyang stores low on foreign goods amid North Korean COVID-19 paranoia.doc

Word Document

Created at 2020-12-23T15:02:00

Remarks (1/1)

(0x0200000E): The overall sleep time of all monitored processes was truncated from "11 minutes" to "1 minute, 50 seconds" to reveal dormant functionality.

General

Total Sent: 8.62 KB
Total Received: 319.02 KB
2 ports: 80 , 443
3 contacted IP addresses
0 URLs extracted
2 files downloaded
1 malicious hosts detected

DNS

23 DNS requests for 2 domains
1 nameserver contacted
0 total requests returned errors

HTTP/S

2 URLs contacted, 2 servers
12 sessions, sending 7.03 KB, receiving 315.02 KB
Function Logfile
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Before

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
After

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Screenshot
Expand-Icon
Exit-Icon
icon_left
icon_left
image