'
metaflows logo
Category Started On Completed On Duration Cuckoo Version
FILE 2018-03-31 12:25:16.935766 2018-03-31 12:27:30.448719 133 seconds 2.0-dev
Machine Label Manager Started On Shutdown On
win7cuckoo win7 Clone 1 VirtualBox 2018-03-31 12:25:18 2018-03-31 12:27:30

File Details

File name 4c206cdfb62e07451f11d555f286d887501287cb.exe
File size 830520 bytes
File type PE32 executable (GUI) Intel 80386, for MS Windows
CRC32 183BBE0A
MD5 89af05ca21e15ab475f66646f721fd37
SHA1 4c206cdfb62e07451f11d555f286d887501287cb
SHA256 0e2700d1e307a2fe8ca77c0274843a58ac85a5087d93f733b09e354aed2812aa
SHA512 036a6cdd0e4f0e13913c12274304c01226eef0e03d3384de2cbacd5f7cc23b897452d6eb6d5bb73887f593a95bf7a4db2b4a1fe28120235a2608c4e75beed782
Ssdeep None
PEiD None matched
Yara
  • Str_Win32_Http_API (Match Windows Http API call)
VirusTotal Permalink
VirusTotal Scan Date: 2018-03-31 05:08:45
Detection Rate: 3/66 (Expand)

MetaFlows Scores

Metaflows Analysis Results (Signatures=75, Anomalies=0, PEiD=0, Yara=0, VT[1522513765]=0): Snort Events=3, AV Events=0
Total Score=75

SNORT EVENTS:
ETPRO TROJAN Common Downloader Header Pattern UH
ET INFO EXE - Served Inline HTTP
ET POLICY Executable served from Amazon S3

Dropped File/Buffer Yara Signatures:
f766df180452c176_fmod.dll: GenerateTLSClientHelloPacket_Test
30237c1972b6eaed_robloxplayerbeta.exe: GenerateTLSClientHelloPacket_Test
0e2700d1e307a2fe_robloxplayerlauncher.exe: Str_Win32_Http_API

Signatures

generic_aws_url_accessed details
recon_fingerprint details
has_pdb details
pe_features details
openprocess_nonchild details
Startup_File_Accessed details
allocates_rwx details
antisandbox_foregroundwindows details
antivm_disk_size details
creates_shortcut details
infostealer_keylogger details

Screenshots

No screenshots available.

Static Analysis

Version Infos

Sections

Resources

Imports

Strings

Dropped Files

0ec7cc9f802b3194_RBX-9137E56C.tmp

558e784f1c857ce2_RBX-472E7DAD.tmp

4e1673118c404d1d_RBX-B4607E9F.tmp

fcb6d0aacae535b4_RBX-D3003000.tmp

17f50b55e571546d_RBX-AE5B9B55.tmp

94ebb27ba8f5582b_RBX-C6F6BFC5.tmp

814f2aaca52e37cb_RBX-A66CFBCC.tmp

1a535dcf1ab19528_RBX-55EB8910.tmp

1b5d330de6a6fda9_RBX-ABAE2A42.tmp

37ea1111ea934b8d_RBX-9063F139.tmp

7ef81b872d5dacbb_RBX-0D3C8864.tmp

5b7b875e07b5ae20_RBX-305C41D2.tmp

14c9cde5bd628e80_RBX-E0362183.tmp

284b28add6070b84_diffuse.dds

d2f0a5051c3ed995_r15composittorsobase.mesh

b15b56ce23cb362a_mouselock_on.png

0474719c996e5047_gr-card@2x.png

ce06bf3390256de2_menubackground.png

6cb759057b32d29b_ic-clear-solid.png

02bc11c818f65f5b_ic-more-on@3x.png

0ea6d9f0364a5d1d_ic-featured@2x.png

c13ed3515bedd78b_togglechatdown@2x.png

a8d858af50814354_hamburgerdown@2x.png

a965e81dae94708f_ic-avatar-on@2x.png

fdc6f6543bc7ee20_ic-top earning@2x.png

cf24f85e527afc06_ic-friend.png

6a4f256722349b2c_motorcursor.png

adefe78605533e9f_ic-popular in vr.png

77cc20a6f5e5d9f9_account_under13.png

614662071601592a_ic-game.png

e006b2b77ced662d_ic-top favorite@3x.png

4d9b1f6b8fe80571_playerstabicon.png

5dbf96da6b1447f6_ic-tbc.png

10239ecfa99c7563_explosion01_implosion_main.dds

6be04eb9ec77e60d_barright.png

01e15cb8baf402a5_abuttonlight@2x.png

98bc84d49b497268_gr-send@3x.png

9101a2f05e9def0f_ic-cancel@3x.png

ee048b6ec03b13da_slider_new_tab.png

8b785627eaafcd0e_scroll-middle@2x.png

c4176ffd3ccc8474_normal_10.dds

cbdbd60efd172f45_gr-contextual menu@2x.png

8ea213a3ea3dde0e_scroll_right.png

f211e59b3f4b0212_circle_blue@2x.png

53606e2ab42ab66e_explosion01_smoke_main.dds

0a69decf50c83fb9_avatarcontextarrow.rbxm

98124d201cb6db2a_ic-clear-gray@2x.png

1ac4441798747980_character.rbxm

9938f330d9ad199c_surfacesdefault.png

7be32547d861d525_normaldetail.dds

3d05d7fb15665d0a_gr-friend@3x.png

36e873413b419fd5_chat_teambutton@2x.png

f9856f466f39e2d1_ic-friend-on@3x.png

2a51ad9239a2102a_normaldetail.dds

a4806e53c8c4ee25_chat-bubble-self-tip.png

c0c6ad4f43b76006_normal_24.dds

711ee92c92cf8fe6_diffuse.dds

27ed2e689b5be44d_smoke_main.dds

346eff8b8292ef2b_inconsolata-regular.ttf

686e0cbd7db4d695_chat-bubble-tip@2x.png

0c1d3313b6e8efb7_forcefield_vortex_main.dds

04ac2492d24deeaf_buttonrightdown.png

960ab1aaa74d26c3_ic-chat-large.png

42387caf97173d13_compositfullatlasoverlaytexture.mesh

45f046be13cfa4d5_specular.dds

683edf159d1dc7e9_explosion01_smoke_color_new.dds

99879ffefe0a72fe_roblox studio.lnk

4dbdf62b7da0549d_ic-cancel@2x.png

36a6968d29550bce_blockupperleft.png

1687d153180b4a71_ic-recommended@2x.png

300577eca3d013a3_icon_follower-16.png

cc1d26bcc192b31b_btn_newwhiteglow.png

edd44a109e556b25_sky512_bk.tex

7465fad5e95184f2_selectionbox.png

0dcfbd2b59ca8eec_ic-clear-gray.png

9e8dfa0777451319_sourcesanspro-bold.ttf

fe50157b45c8814f_chatdown@2x.png

c6a87b5dbe707f77_togglechatdownflip@2x.png

cc837b406a90565e_ic-popular.png

f12224dba5d2b1fa_oldxboxcontroller.png

24d96090009a1008_specular.dds

4ba056bb0439992e_diffuse.dds

35cc0ee830f66260_ic-games-on.png

8f5ea31a3f5d8abf_ic-top favorite.png

f766df180452c176_fmod.dll

cd14396bdfe56cf4_ic-catalog-on@2x.png

b5c8dfe0203c5e79_send-white@2x.png

a31502158c1a3394_slider-bkg-center.png

e68d5ebdc487ad29_dialog_red.png

f47b0f494c73fc06_slider-fill-right-cap.png

00011967a4d5e2cc_modal@2x.png

8ae5a6f9c7d708ce_ic-game@2x.png

7b833d232d376a5e_gear.png

144819d00cfd40ab_icon_rotate5.png

188d4e364f393f20_slider-bkg-center@2x.png

61dbbda0944f6123_compositextraslot3.mesh

00369b957b2e8906_sky512_ft.tex

a7c1999967048e3a_emptytop.png

7f41882fddf1afa6_page0.png

888524c610132ad8_send-white@3x.png

af42447758ebff5c_transformtwentytwodegrees.png

b1f3fcef4fcd4b70_transformonedegree.png

3bdcd645c92a4482_ic-tbc-small@3x.png

92401200f1d6cea5_bbuttondark@2x.png

65f6307479fe02fa_dialog_blue@2x.png

6fa5b9d8e27309ca_explosion01_smoke_alpha.dds

7dcb296eaf866547_ic-send@2x.png

77bf3674958e5323_ybuttonlight@2x.png

cdcaf1991de7bd19_hamburgerdown.png

f0855486863b2b90_system-message.png

6824c884c599fbaf_scroll-middle.png

9930b62a8a2db58b_ic-popular in country@3x.png

73cf7bfea5df5828_charactersound.rbxmx

79cc45621665b95a_page8.png

2498947404ff4d79_usetoolgesture.png

37907674435b17b6_ic-checkbox@2x.png

dd64fca502606a27_bottom.png

a9c9c6e33d8b3137_ybuttonlight.png

731fd9d2bc7405b0_scroll-top@2x.png

aa073fdf931664ac_specular.dds

6437e2894f03ca42_advclosed-hand-no-weld.png

a2925e4f3c3c3270_ic-bc@2x.png

0a08c694374437d4_scroll-top.png

0f62895d67ca7115_diffuse.dds

7f394abe87ac7430_buttonleft.png

6c11d401301be399_selectedbarleft@2x.png

cee662aaec2c56ca_ic-checkbox@3x.png

765b358af2f4ea1b_scroll_up.png

0be6229450483a64_ic-orange-instudio@2x.png

29d54b5a1e868f4f_chat-bubble-self-tip@2x.png

0ab24d553e82033f_arrowcursor.png

54da9656d7b1eef9_ic-notification.png

fdcddd712fe08c2a_scroll-bottom.png

2acac84c70b65627_ic-search@2x.png

5919e357c8980482_scroll-top@2x.png

454ee746e774d4a1_specular.dds

51412acf35014899_gr-indicator-ingame@3x.png

f152b2f196a460b1_ic-checkbox-on copy@2x.png

2d5a49e4f8fe0c49_ic-obc.png

e0629f9b4af54aba_normal_13.dds

312e9c46440ee593_normaldetail.dds

cdb34555cf2c9184_gr-indicator-online.png

4becac9487f1cc70_close_button_icon.png

59c386c0d2ba41dd_normal_21.dds

79f8b4cdf82cdbda_headm.mesh

82adc11cba661895_gr-tail@2x.png

5a3c4159d0c69e1c_backgrounddark.png

39161e10b5a0c7a0_gr-send.png

c45cb06f619b4116_sourcesanspro-light.ttf

48cbc3ea2afb2cfe_specular.dds

8e5250e5a5f3ce76_chatflip.png

00d7110947b044b1_diffuse.dds

7b2023d832e884c8_ic-purchased.png

3ca57472bec74824_rbx-82fa4c7e.log

3daed90e524274bb_ic-tbc-small.png

fa76d70f68d3c470_new-message-indicator@3x.png

30237c1972b6eaed_robloxplayerbeta.exe

8852cb86b27095dc_ic-home-on@3x.png

74d3c20d6a8c409c_gamesettingstab@2x.png

88730fb09a499533_ic-back-android@2x.png

2b6fe024a3467be7_menubuttonselected.png

4903f498472e3ad6_ic-blue-dot.png

e75e8ee4a3ae2760_ic-alert.png

a84932296175c0c7_gr-shadow@2x.png

0efdd92341ef16c6_ic-group.png

e2f97a33f2d6294b_explosion_color.dds

161de7b6c142ccba_menuselection.png

802cbf8300deee4b_gr-indicator-online@3x.png

ff67ee3248187369_slider-fill-right-cap@2x.png

8118791563f2baa6_speculararray.dds

4c324c6d7252edba_btn_red.png

482e78287491feef_escapeicon.png

9026301503a6571b_compositextraslot4.mesh

60a3ecba22b2ded0_messagecounter.png

4a03ef22161e70b7_rotationarrow.png

0985ce9843a757fa_normal_08.dds

15e35f8eb0d71ca7_forcefield_glow_main.dds

54b006ca180af7a4_advclosed-hand-anchored.png

9d0848cf69eb12e7_btn_newblueglow@2x.png

f99a68c41df10a3d_transformfivedegrees.png

c3a16f2be9676c94_ic-default@3x.png

4f3f39f1972f3cbd_motor.png

6042c2f0a083963a_transformninetydegrees.png

c797c2c6c032a1b0_abuttonlight.png

bbbf0ab4170ce717_normal_22.dds

6177ea772eaac9f0_ic-avatar@2x.png

668cdd8611377971_ic-clear-gray@3x.png