'
metaflows logo
Category Started On Completed On Duration Cuckoo Version
FILE 2016-11-08 16:27:15.442950 2016-11-08 16:53:30.119036 1574 seconds 2.0-dev
Machine Label Manager Started On Shutdown On
win7cuckoo win7 Clone 1 VirtualBox 2016-11-08 16:30:22 2016-11-08 16:53:29

File Details

File name ed1be0eb0b7b329723a3d17c0f9a2eb3e7469f8e.zip
File size 1100 bytes
File type Zip archive data, at least v2.0 to extract
CRC32 2762DCDA
MD5 730ec8c08d25a1d5a75fa444a814c89d
SHA1 ed1be0eb0b7b329723a3d17c0f9a2eb3e7469f8e
SHA256 e6dece5c59edc92911e8a34b334b8e6076cc70048d3a7de12478eb5feaa417ee
SHA512 5d216226426aa5a0d7f08bba0ad87387351b1aa9729d7037717281ae474fe0e543a25f586c5a3f3caab010956c56c046f716b8763c5ba621857fc57fbdc1afff
Ssdeep 24:9IF1WQYRZlAHlbAdDIuR5woPq1pGm2l0QOsIuJe03wRNGj+F6:9IF1WQY3OHBx/X1pGm21OUJeLRNhF6
PEiD None matched
Yara
  • PM_Zip_with_js ()
VirusTotal Permalink
VirusTotal Scan Date: 2016-11-08 13:43:45
Detection Rate: 7/56 (Expand)

MetaFlows Scores

Metaflows Analysis Results (Signatures=125, Anomalies=0, PEiD=0, Yara=2, VT[1478624372]=100): Snort Events=2, AV Events=2
Total Score=125

SNORT EVENTS:
ET POLICY PE EXE or DLL Windows file download HTTP
ET MALWARE Possible Windows executable sent when remote host claims to send a Text File

CLAMAV DETECTED:
Sanesecurity.Malware.26447.JsHeur.UNOFFICIAL FOUND
DROPPED FILE - NRV_4H18M360_.js: Sanesecurity.Malware.26447.JsHeur.UNOFFICIAL FOUND

Dropped File/Buffer Yara Signatures:
65f052cf886b446f0ec6e8d8359781f4f23b0c46 [BUFFER]: Str_Win32_Http_API

Signatures

antivm_queries_computername details
recon_fingerprint details
antivm_memory_available details
dumped_buffer details
creates_doc details
antivm_network_adapters details
dumped_buffer2 details
antivm_vbox_files details
Windows_Proxy_Tinkering details
network_wscript_downloader details
persistence_ads details
antiav_detectfile details
exploit_heapspray details
malicious_document_urls details
network_document_file details
network_downloader_exe details
antivm_vbox_devices details
antivm_vbox_files details
modifies_files details

Screenshots

No screenshots available.

Static Analysis

Nothing to display.

Dropped Files

d3798f044cfa8dd1_076e35c0-5e29-6be8-e1f6-af8fedc462c8.thor

7496f00485c59b72_076e35c0-5e29-6be8-4f3a-05711de9280d.thor

1c96c1b188472a17_076e35c0-5e29-6be8-7ed3-56959ef1bd73.thor

2c1de7bcffdde5c4_076e35c0-5e29-6be8-ff8d-c6a1a841dd47.thor

1e831001b2efba8b_076e35c0-5e29-6be8-58a1-f228c616d930.thor

df90fe6dde75cbaf_076e35c0-5e29-6be8-9bc2-0211cd9979f2.thor

2e2ca3f4394240a3_076e35c0-5e29-6be8-cdfa-f435e93b822c.thor

a81d3905e525e8b9_076e35c0-5e29-6be8-aed9-ee107174d7f1.thor

46f91e9ee93a801a_076e35c0-5e29-6be8-7940-ae1924ed75a0.thor

f126f5b93c429914_076e35c0-5e29-6be8-c6c3-d2deca3e7b77.thor

9223c6b12018ee4e_076e35c0-5e29-6be8-6d2b-b739e664978b.thor

c9eec84b961394bb_076e35c0-5e29-6be8-abff-b0c447342054.thor

af933161a14c8318_076e35c0-5e29-6be8-32b8-d924c63c1999.thor

0d7b8b24da006e13_076e35c0-5e29-6be8-9931-e4d4214f4b6d.thor

7f63dee2fcde9174_076e35c0-5e29-6be8-cddd-45fe3a30c20d.thor

5f1bf8a0f72188bb_076e35c0-5e29-6be8-7816-8a9f20403415.thor

73500d91d111489d_076e35c0-5e29-6be8-338e-1ce017c0d6e5.thor

e0a0f1df846c59bc_076e35c0-5e29-6be8-b40e-15273fe602cb.thor

64dc69d93b6278bd_076e35c0-5e29-6be8-2918-73bb821f138e.thor

6d9921e9f5b997ff_076e35c0-5e29-6be8-eda2-4727fa4865a7.thor

3d02cb6e1e60a213_076e35c0-5e29-6be8-4a52-2c5e0995cc23.thor

f58a523c1ccc284a_076e35c0-5e29-6be8-1835-138e936c0390.thor

c9640262ee174e65_076e35c0-5e29-6be8-22b8-1d9af9cd0389.thor

0f3365d67ecee536_076e35c0-5e29-6be8-aeeb-176058a74000.thor

ea06506c62db31b3_076e35c0-5e29-6be8-74f5-d226bf9d0405.thor

1a58044940410cc4_076e35c0-5e29-6be8-d029-ef9f9c3ad89a.thor

c0ba6b74e702b819_076e35c0-5e29-6be8-588f-febb77d0c9f1.thor

1efade373f787cec_076e35c0-5e29-6be8-3540-0e189361c4bc.thor

d2a0f973aa81a170_076e35c0-5e29-6be8-36d7-645e2bc53b5d.thor

83a2f508a47eea48_076e35c0-5e29-6be8-097c-ece3a5e6228f.thor

db0c1c33ebd06b45_076e35c0-5e29-6be8-51f5-2fdb30e618c5.thor

bae7f9fd9f244158_076e35c0-5e29-6be8-4e9e-d7d95822e74f.thor

18f2e5b9f85a857e_076e35c0-5e29-6be8-3fc2-282ea92855ae.thor

3e905459715bab5a_076e35c0-5e29-6be8-d341-97623bc24ba1.thor

7e494ce489eb933e_076e35c0-5e29-6be8-fbed-725ecf79be21.thor

bfec7203bd49fdcd_076e35c0-5e29-6be8-44c6-14b1a064f81d.thor

62cf9a65db76120a_076e35c0-5e29-6be8-b512-40a880ba41d1.thor

56a25544159346c1_076e35c0-5e29-6be8-c7f4-90c6aa952112.thor

90322a3f26b7ef20_076e35c0-5e29-6be8-2afa-c981a62a1eff.thor

32c847a002db4230_076e35c0-5e29-6be8-ce82-ee5d740d1d1a.thor

eafe72392a08dbb1_076e35c0-5e29-6be8-ebf5-a2dc3a446f87.thor

d2aec3abc942c522_076e35c0-5e29-6be8-3ab4-bb510919c73f.thor

19f09d607d431340_076e35c0-5e29-6be8-85c4-647efa8da0f8.thor

e150ae859d79ab2b_076e35c0-5e29-6be8-d8fa-d6211ea9a8fb.thor

1bf60ec85f1cd713_076e35c0-5e29-6be8-800b-943a529aeb79.thor

5963821a73b8cf4f_076e35c0-5e29-6be8-549e-8002b49e4a52.thor

0a4f928f6b96e415_076e35c0-5e29-6be8-388a-0a269fd0ecec.thor

11adb4b11f780139_076e35c0-5e29-6be8-9854-3d54c8ea672a.thor

db6a46974cfd97f1_076e35c0-5e29-6be8-c841-d3b0e1a5f14a.thor

8bb73d584ad2e2cf_076e35c0-5e29-6be8-783b-a6020eb247d1.thor

f54c1ffb4ebb4b09_076e35c0-5e29-6be8-f3e2-ff3013efbf20.thor

1b7e9839a6ca5f19_076e35c0-5e29-6be8-43b6-96a0c2cdd303.thor

64aa4738778b6d68_076e35c0-5e29-6be8-c170-09276d28499c.thor

d44d8107f56ebea3_076e35c0-5e29-6be8-c8b6-0fa8878fd4b3.thor

ea6bead01c78c491_076e35c0-5e29-6be8-5578-ef89ed5e0af3.thor

0163172b0a091664_076e35c0-5e29-6be8-7320-f8ecfce4e092.thor

998e5f29ff268aac_076e35c0-5e29-6be8-c6b9-5d0f94957d87.thor

561068b4b0c5d4ae_076e35c0-5e29-6be8-964c-7854387ea660.thor

6820ed8c2af0055e_076e35c0-5e29-6be8-4013-7049babe909b.thor

d219779b0573a950_076e35c0-5e29-6be8-7768-6ce88edd9a93.thor

b987d659a6a0656a_076e35c0-5e29-6be8-cf74-dc1f665ff48f.thor

b76585afa787e7f5_076e35c0-5e29-6be8-9eea-fe4ddaeefc57.thor

5fac6a20e0afdba7_076e35c0-5e29-6be8-8b23-24fdf31d0307.thor

dfcad4ec8e87c086_076e35c0-5e29-6be8-c4b6-7e881e876d82.thor

1906efd82e773bf2_076e35c0-5e29-6be8-77e2-250a574d24cb.thor

56e0a96c56f6a956_076e35c0-5e29-6be8-a469-a4be818a00b5.thor

667fb3584bfa26cc_076e35c0-5e29-6be8-9f7a-b46703797b78.thor

831a4645a59d53e9_076e35c0-5e29-6be8-aab4-635989ffbdc2.thor

4dc4b526d7b3b909_076e35c0-5e29-6be8-0280-68e5e7156499.thor

a9356903dc8ab6d1_076e35c0-5e29-6be8-3d28-6905637b5868.thor

dc4f628b98642ba8_076e35c0-5e29-6be8-fea2-054badc4d377.thor

d8c9a54ae7a7f3e1_076e35c0-5e29-6be8-471c-3558c9aa95b3.thor

532a43596e1df096_076e35c0-5e29-6be8-e960-188671b41639.thor

d0582e4e3c4850cb_076e35c0-5e29-6be8-c94a-e5cfd9c0542b.thor

49ab10dd17b5e805_076e35c0-5e29-6be8-5bfa-490886830ddf.thor

9fce9cf934316b0b_076e35c0-5e29-6be8-436c-4d1195fd7611.thor

0d70ee54ebcc0ed2_076e35c0-5e29-6be8-32d4-55f0b2553a3a.thor

76a5f4e7850eb71a_lbrisge[1].txt

0849fb27b0bf74d6_076e35c0-5e29-6be8-151b-51214d45edb7.thor

4383cb7f01cab0dd_076e35c0-5e29-6be8-6666-4f65408dffcc.thor

db09d83e4253960b_076e35c0-5e29-6be8-9fcd-165c926e44af.thor

fe2acab02648e090_076e35c0-5e29-6be8-ba4c-1e53ca416bc3.thor

4f278a627d8685cb_076e35c0-5e29-6be8-3c7e-85f9e85b526c.thor

bb748b814acaa863_076e35c0-5e29-6be8-56e7-ca7223c2a08b.thor

ec1d56a117d8854a_076e35c0-5e29-6be8-414a-2edf9a939319.thor

4e9b965f28e8a6f7_076e35c0-5e29-6be8-31eb-33e8c6e157e2.thor

685ceefadb71d89c_076e35c0-5e29-6be8-9019-451f2d231cde.thor

ffd12a6adbb28c48_076e35c0-5e29-6be8-b969-a8498771d29c.thor

d5ad98704a0d6ffe_076e35c0-5e29-6be8-3172-459b11956271.thor

3d9a49751ea1ecb7_076e35c0-5e29-6be8-412a-0887b9e8475f.thor

e1a5c510a4dc3127_076e35c0-5e29-6be8-5243-1118f55ff6ce.thor

2b61c75ac03377eb__5_what_is.html

6516f5973f089475_076e35c0-5e29-6be8-7940-006b1e8c70b3.thor

4823082ee7433e0a_076e35c0-5e29-6be8-5366-73fd78af7e12.thor

8cdf0044e54bfd80_076e35c0-5e29-6be8-288b-2311f4b9f658.thor

c238c3169a70b5a2_076e35c0-5e29-6be8-9d22-3562c096d8bf.thor

53b96a69e779e96a_076e35c0-5e29-6be8-e9e4-ab2e1ee589cb.thor

0ee91e3dbf350e3d_076e35c0-5e29-6be8-23c9-d42c2f88b8a3.thor

ac2cad9890018bab_076e35c0-5e29-6be8-5c01-e7787eae01b8.thor

837eaa64043f0777_076e35c0-5e29-6be8-f194-c24a8ad9c9b6.thor

c938c84e5d66e0bf_076e35c0-5e29-6be8-da38-adf5e8b99613.thor

86b22be920db0bbd_076e35c0-5e29-6be8-4f8b-00518df9e78c.thor

349d375c47a1a653_076e35c0-5e29-6be8-ad5d-97c6f9b8ae56.thor

03a859558fab2110_076e35c0-5e29-6be8-1236-99dca60fd37b.thor

593523c41581027e_076e35c0-5e29-6be8-0280-9c1df46e2a8b.thor

359379f791ff8028_076e35c0-5e29-6be8-d1ae-a9341cd166ee.thor

fc7ea1f47ec94345_076e35c0-5e29-6be8-1058-8de07ca56467.thor

bd5b2afbdcb160b2_076e35c0-5e29-6be8-1897-bab662febf59.thor

201ce0bb3da06cdd_076e35c0-5e29-6be8-8cda-ce41e7c6b839.thor

588b5e2ea7826383_076e35c0-5e29-6be8-b87e-3545c9b1045f.thor

31fe2889583fcb06_076e35c0-5e29-6be8-62ed-92bfe570ebde.thor

b7f51a083507eb93_076e35c0-5e29-6be8-792c-400ce7bc560b.thor

f6d9ea9257ae14cd_076e35c0-5e29-6be8-cac1-ae01ab18aa29.thor

63876fb41034365a_076e35c0-5e29-6be8-37c2-01a744c4168c.thor

a6886d9c2a6b017f_076e35c0-5e29-6be8-c328-69212098197a.thor

ae1fc2bcfb1ba4c0_076e35c0-5e29-6be8-048d-962562e4f9a3.thor

afdda151a7fc3af1_076e35c0-5e29-6be8-2ce7-e69b2e5b7d6f.thor

cd4100263320035d_076e35c0-5e29-6be8-d82b-76c1d7045afb.thor

67e9ff1c9b7377fa_076e35c0-5e29-6be8-73b8-aa936c05f1a1.thor

5fc6c51e2b6fdc61_076e35c0-5e29-6be8-9e4b-0560efd6231c.thor

f5ac43b79b352a23_076e35c0-5e29-6be8-25c3-a29275a2d08d.thor

f2987fc898423305_076e35c0-5e29-6be8-0582-ceb91ed8f687.thor

b2233fca7ce7b74e_076e35c0-5e29-6be8-58e9-c11154070695.thor

4455fac6184e8031_076e35c0-5e29-6be8-2613-c3a1f694e70e.thor

b9d2d174dafc20c4_076e35c0-5e29-6be8-cc64-66ec7ff7389c.thor

46f7ea6d48bcbac9_076e35c0-5e29-6be8-c40d-5009a36efe8d.thor

f432db7b4380eb19_076e35c0-5e29-6be8-e165-90600817f2c1.thor

676368a67aaa0a15_076e35c0-5e29-6be8-492a-6a4932ceab50.thor

50f242ade48da613_076e35c0-5e29-6be8-b6a3-177ef43461aa.thor

c809553f1a5625e8_076e35c0-5e29-6be8-6adf-44f8afad00d2.thor

21373ea37ccf769e_076e35c0-5e29-6be8-62bb-131798f5834b.thor

3e64f332417a8ea9_076e35c0-5e29-6be8-52ab-ec94396fd6f9.thor

c006b2e7b3a58dc8_076e35c0-5e29-6be8-5ea5-22e5721b1a0f.thor

8561d9bf1de45e1d_076e35c0-5e29-6be8-5159-b6288795ba29.thor

eb92499ec47933d7_076e35c0-5e29-6be8-0b78-b16a90f253bf.thor

eb3faa03e0864aaf_076e35c0-5e29-6be8-c9b3-7bd7ab007b08.thor

9da3e61b743154a4_076e35c0-5e29-6be8-cebe-43d2385e6e3d.thor

c0bc9559d1e82e47_076e35c0-5e29-6be8-97fe-1d8dbebe2b37.thor

0dd9bf82a708d877_076e35c0-5e29-6be8-6436-d32970c91533.thor

c7d190637be368a5_076e35c0-5e29-6be8-f1f8-5ce00fd947a6.thor

1cf0bb35f0fd5c48_076e35c0-5e29-6be8-cb8e-04b0df842962.thor

4dbd02e7072bc449_076e35c0-5e29-6be8-04b1-63537a9833ae.thor

dea3f72af1198742_076e35c0-5e29-6be8-bf94-13cb5bacb3f8.thor

be10854e675f15e2_076e35c0-5e29-6be8-c4a2-73e179765138.thor

17e58ac4838b2788_076e35c0-5e29-6be8-fe5d-5598a573882f.thor

7a6a8dd13c02c423_076e35c0-5e29-6be8-04ac-ce81f85f611a.thor

95002fad486e1741_076e35c0-5e29-6be8-cd31-0c5a48b8916e.thor

12c2505080fb1ef3_076e35c0-5e29-6be8-1634-b881761b3641.thor

6d1b6f99d972a2b6_076e35c0-5e29-6be8-8dbc-413277ecda3e.thor

2e7cb602419e8b18_076e35c0-5e29-6be8-9ce2-7e2c15ad068b.thor

95c59889f5fdff0b_076e35c0-5e29-6be8-94fb-fc3e21353319.thor

93e461daa5421df4_076e35c0-5e29-6be8-5c53-2e391083a367.thor

cbc2887a737aa7ce_076e35c0-5e29-6be8-e454-598936a3f37a.thor

108ec4837e2e2b51_076e35c0-5e29-6be8-e053-64e6344d0ed0.thor

eb377aa483f5660c_076e35c0-5e29-6be8-c456-4e73b7cfb35e.thor

ec16241988e48714_076e35c0-5e29-6be8-9798-3f7716aa4017.thor

8b2e11323630d775_076e35c0-5e29-6be8-5292-6f4044c4cd10.thor

ad01237a3e33a0c0_076e35c0-5e29-6be8-95a0-678e25246cc3.thor

00703e120dcd3982_076e35c0-5e29-6be8-8861-0e1514534d13.thor

0b7b8eec1c4cbf04_076e35c0-5e29-6be8-8bb6-05d2052f1eb4.thor

ba25b70433040e5c_076e35c0-5e29-6be8-825f-73a579cb2c0b.thor

8916d567e46dfffa_076e35c0-5e29-6be8-2b82-470597e33954.thor

e12084311657e41a_076e35c0-5e29-6be8-6a9b-ebde56dd8e4b.thor

a391e2a71e17c72e_076e35c0-5e29-6be8-5e89-70ff8211b9c0.thor

3a22b9723adfc2ed_076e35c0-5e29-6be8-ca83-91857a05951f.thor

ae9859b2b681e97e_076e35c0-5e29-6be8-f988-53fa82d951fc.thor

a52266a9684ac0cc_076e35c0-5e29-6be8-989a-741342b7c888.thor

0389656da874b992_076e35c0-5e29-6be8-0877-6b7ab6f291d7.thor

2244c927652bdc0b_076e35c0-5e29-6be8-c277-778335385d12.thor

b90303cdf56cc9da_076e35c0-5e29-6be8-9c6d-069a7a762957.thor

8f0ae9f3636427d9_076e35c0-5e29-6be8-2ab9-3ab4cb72cf15.thor

dd329a869e4c64b6_076e35c0-5e29-6be8-92fb-451a205a1838.thor

c25786d0445ed013_076e35c0-5e29-6be8-c09e-5662f14176c6.thor

63466849f9986a14_076e35c0-5e29-6be8-653d-37dfef003080.thor

343c0132b53cefe2_076e35c0-5e29-6be8-2efb-f0a373e1f54a.thor

NRV_4H18M360_.js

Network Analysis

Hosts Involved

DNS Requests

HTTP Requests