7b5e5368...2eaf

VTI SCORE: 100/100

Dynamic Analysis Report

Classification:

Ransomware

Dropper

Threat Names:

Generic.Ransom.Matrix.4BE75F48

VBS.Heur.Laburrak.11.5A66A147.Gen

Trojan.GenericKD.40672878

...

dttcodexgigas.028ef1a52c04fce1f8d84e019167d54a9067fc13.exe

Windows Exe (x86-32)

Created 5 years ago

Remarks (1/1)

Anti-Sleep Triggered (0x0200000E): The overall sleep time of all monitored processes was truncated from "6 minutes" to "1 minute" to reveal dormant functionality.

Grouped Sequential

Monitored Processes

Process Overview

Behavior Information - Grouped by Category

Process #1: dttcodexgigas.028ef1a52c04fce1f8d84e019167d54a9067fc13.exe

34033

Process #3: cmd.exe

159

Process #5: nwxpvtxy.exe

413

Process #7: cmd.exe

Process #8: cmd.exe

Process #11: cmd.exe

126

Process #13: cmd.exe

123

Process #15: reg.exe

Process #16: wscript.exe

Process #17: cmd.exe

110

Process #19: cmd.exe

Process #21: reg.exe

Process #22: cmd.exe

Process #24: reg.exe

Process #25: cmd.exe

Process #27: cacls.exe

Process #28: cacls.exe

Process #29: cmd.exe

Process #31: cmd.exe

Process #32: cacls.exe

Process #34: cmd.exe

Process #36: cacls.exe

Process #37: cmd.exe

Process #39: cacls.exe

Function Logfile

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".

Remarks (1/1)

Monitored Processes

Behavior Information - Grouped by Category

Before

After