Try VMRay Platform
Malicious
Classifications

Downloader Spyware Backdoor

Threat Names

XWorm Mal/HTMLGen-A Troj/RAT-FJ

Remarks (2/3)

(0x0200003A): A task was rescheduled ahead of time to reveal dormant functionality.

(0x02000050): This analysis has been updated with the latest reputation and static analysis results from the original analysis with the ID #24019913.

(0x0200000E): The overall sleep time of all monitored processes was truncated from "1 minute" to "10 seconds" to reveal dormant functionality.

General

2.87 KB total sent, 85.46 KB total received
2 ports: 443, 53
4 contacted IP addresses
0 URLs extracted
1 files downloaded
2 malicious hosts detected

DNS

189 Bytes sent, 285 Bytes received
3 queries for 3 domains
0 name server contacted
0 queries returned errors

HTTP/S

2.33 KB sent, 84.97 KB received
2 URLs, 2 contacted servers
2 sessions detected
Function Logfile
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting \"security.fileuri.strict_origin_policy\".


    
Before

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting \"security.fileuri.strict_origin_policy\".


    
After

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting \"security.fileuri.strict_origin_policy\".


    
Screenshot
Expand-Icon
Exit-Icon
icon_left
icon_left
image