Try VMRay Platform
Malicious
Classifications

Trojan Banker Injector

Threat Names

QBot

Dynamic Analysis Report

Created on 2023-05-30T21:30:57+00:00

696156d9a4117cba652b18b012db376fddfbd7db8b26a638c760d61b98d3590d.msi

MSI Setup

Remarks (1/1)

(0x0200000E): The overall sleep time of all monitored processes was truncated from "1 hour, 8 minutes, 18 seconds" to "4 minutes, 40 seconds" to reveal dormant functionality.

General

1.93 KB total sent, 6.45 KB total received
3 ports: 443, 53, 995
4 contacted IP addresses
141 URLs extracted
0 files downloaded
0 malicious hosts detected

DNS

55 Bytes sent, 71 Bytes received
1 queries for 1 domains
1 name server contacted
0 queries returned errors

HTTP/S

1015 Bytes sent, 6.38 KB received
1 URLs, 1 contacted servers
1 sessions detected
Function Logfile
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting \"security.fileuri.strict_origin_policy\".


    
Before

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting \"security.fileuri.strict_origin_policy\".


    
After

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting \"security.fileuri.strict_origin_policy\".


    
Screenshot
Expand-Icon
Exit-Icon
icon_left
icon_left
image