Try VMRay Platform
Malicious
Classifications

Injector Banking Trojan

Threat Names

Mal/Generic-S CryptOne QBot Mal/HTMLGen-A

Dynamic Analysis Report

Created on 2022-05-16T17:12:09+00:00

d2c969098c9a689728a5f5ac942fa4f75c88738d0367d471276ac4c470504ded.dll

Windows DLL (x86-32)

Remarks (2/2)

(0x02000009): DLL files normally need to be submitted with an appropriate loader. Analysis result may be incomplete if an appropriate loader was not submitted.

(0x0200000E): The overall sleep time of all monitored processes was truncated from "52 days, 2 hours, 2 minutes, 58 seconds" to "6 hours, 14 minutes, 26 seconds" to reveal dormant functionality.

General

83.14 KB total sent, 12.75 KB total received
2 ports: 995, 53
2 contacted IP addresses
151 URLs extracted
0 files downloaded
0 malicious hosts detected

DNS

0 Bytes sent, 0 Bytes received
0 queries for 0 domains
0 name server contacted
0 queries returned errors

HTTP/S

0 Bytes sent, 0 Bytes received
0 URLs, 0 contacted servers
0 sessions detected
Function Logfile
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting \"security.fileuri.strict_origin_policy\".


    
Before

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting \"security.fileuri.strict_origin_policy\".


    
After

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting \"security.fileuri.strict_origin_policy\".


    
Screenshot
Expand-Icon
Exit-Icon
icon_left
icon_left
image