7bd916d7...711d

7bd916d7...711d | Network

Try VMRay Analyzer

VTI SCORE: 100/100

Dynamic Analysis Report

Classification:

Dropper

Spyware

Threat Names:

Gen:Trojan.Heur.GC.@JZ@qjDCvxmay

Gen:Trojan.Heur.GC.GIZ@qvwWuIfay

Gen:Trojan.Heur.GC.mGX@qvCUy8gay

...

lxwjyk.exe

Windows Exe (x86-32)

Created 5 years ago

General

Total Sent: 0.83 KB

Total Received: 0.74 KB

1 ports: 80

2 contacted IP addresses

0 URLs extracted

0 files downloaded

0 malicious hosts detected

DNS

1 DNS requests for 1 domains

1 nameserver contacted

0 total requests returned errors

HTTP/S

1 URLs contacted, 1 servers

1 sessions, sending 0.83 KB, receiving 0.74 KB

1 Host

Requests

Severity

api.keen.io80, 53

HTTP Requests (1)DNS Requests (1)

Method	URL	Response	Dest. IP	Dest. Port	-	Severity

GET

http://api.keen.io/3.0/projects/57b37f2f80a7bd714c4f66d0/events/key?api_key=f6e3537decd42999efaa57798b66df8aeb7cece04ae830e2c449a547ba629e6724e812fd7327cee0557d96c9bee474d127199290ecd9e3863ea67cf4963b8e02197133375d52d92e656f0490bfeaadf3004db0b1c85f1cfde1c81a9aadd2cc5d&data=eyAia2V5IjogIjJ5Tno5Mk1TMkFRcFptZ3lvTUNQajZvakFzdmJlR1NSIiwgInVzZXJuYW1lIjogIjVwNU5yR0puMGpTIEhBTFBtY3h6IiwgImlwX2FkZHJlc3MiOiIke2tlZW4uaXB9Iiwia2VlbiI6eyJhZGRvbnMiOlt7Im5hbWUiOiJrZWVuOmlwX3RvX2dlbyIsImlucHV0Ijp7ImlwIjoiaXBfYWRkcmVzcyJ9LCJvdXRwdXQiOiJpcF9nZW9faW5mbyJ9XX19

200

54.213.2.131

Unknown

RequestResponseFunction Logs (2)Stream (2)

Request Headers

Timestamp	133.294000
URL	http://api.keen.io/3.0/projects/57b37f2f80a7bd714c4f66d0/events/key?api_key=f6e3537decd42999efaa57798b66df8aeb7cece04ae830e2c449a547ba629e6724e812fd7327cee0557d96c9bee474d127199290ecd9e3863ea67cf4963b8e02197133375d52d92e656f0490bfeaadf3004db0b1c85f1cfde1c81a9aadd2cc5d&data=eyAia2V5IjogIjJ5Tno5Mk1TMkFRcFptZ3lvTUNQajZvakFzdmJlR1NSIiwgInVzZXJuYW1lIjogIjVwNU5yR0puMGpTIEhBTFBtY3h6IiwgImlwX2FkZHJlc3MiOiIke2tlZW4uaXB9Iiwia2VlbiI6eyJhZGRvbnMiOlt7Im5hbWUiOiJrZWVuOmlwX3RvX2dlbyIsImlucHV0Ijp7ImlwIjoiaXBfYWRkcmVzcyJ9LCJvdXRwdXQiOiJpcF9nZW9faW5mbyJ9XX19
Version	1.1
Method	GET

Accept-Encoding	identity
Host	api.keen.io
Connection	close
User-Agent	Python-urllib/2.7

URL Reputation

Reputation

Unknown

Function Logfile

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".

Before

After

Screenshot