Summary

Score

Please notice: The scoring system is currently still in development and should be considered an alpha feature.

Autosubmit

Parent_Task_ID:5847024

Feedback

Expecting different results? Send us this analysis and we will inspect it. Click here

Information on Execution

2025-01-24 20:52:18,015 [analyzer] DEBUG: Starting analyzer from: C:\tmpd0os1j
2025-01-24 20:52:18,015 [analyzer] DEBUG: Pipe server name: \??\PIPE\PkFFjAcMWIlLuQmPnpJzKqsTjJUxIFRn
2025-01-24 20:52:18,015 [analyzer] DEBUG: Log pipe server name: \??\PIPE\iAYkOkssAvIHQzKLrCslUCdrUcDng
2025-01-24 20:52:18,015 [analyzer] DEBUG: No analysis package specified, trying to detect it automagically.
2025-01-24 20:52:18,030 [analyzer] INFO: Automatically selected analysis package "generic"
2025-01-24 20:52:18,328 [analyzer] DEBUG: Started auxiliary module Curtain
2025-01-24 20:52:18,328 [analyzer] DEBUG: Started auxiliary module DbgView
2025-01-24 20:52:18,812 [analyzer] DEBUG: Started auxiliary module Disguise
2025-01-24 20:52:19,030 [analyzer] DEBUG: Loaded monitor into process with pid 512
2025-01-24 20:52:19,030 [analyzer] DEBUG: Started auxiliary module DumpTLSMasterSecrets
2025-01-24 20:52:19,030 [analyzer] DEBUG: Started auxiliary module Human
2025-01-24 20:52:19,030 [analyzer] DEBUG: Started auxiliary module InstallCertificate
2025-01-24 20:52:19,030 [analyzer] DEBUG: Started auxiliary module Reboot
2025-01-24 20:52:19,140 [analyzer] DEBUG: Started auxiliary module RecentFiles
2025-01-24 20:52:19,140 [analyzer] DEBUG: Started auxiliary module Screenshots
2025-01-24 20:52:19,140 [analyzer] DEBUG: Started auxiliary module Sysmon
2025-01-24 20:52:19,140 [analyzer] DEBUG: Started auxiliary module LoadZer0m0n
2025-01-24 20:52:19,250 [lib.api.process] INFO: Successfully executed process from path 'C:\\Windows\\System32\\cmd.exe' with arguments ['/c', 'start', '/wait', '"WMKiGJNROouVNDfj"', u'C:\\Users\\ADMINI~1\\AppData\\Local\\Temp\\f856a6e498ef9814_sys_min_inactive.bmp'] and pid 2868
2025-01-24 20:52:19,530 [analyzer] DEBUG: Loaded monitor into process with pid 2868
2025-01-24 20:52:19,890 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:19,937 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:19,953 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:19,953 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:19,953 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:19,967 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:19,967 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:19,983 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:19,983 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,015 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,015 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,046 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,046 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,062 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,062 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,062 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,062 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,062 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,062 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,078 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,078 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,078 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,546 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,562 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,562 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,562 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,562 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,562 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,578 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,578 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,578 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,578 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,578 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,703 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,703 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,703 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,703 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,717 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,717 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,717 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,717 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,733 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,733 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:20,733 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:28,312 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:28,312 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:28,312 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:28,312 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:28,328 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:28,328 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:28,328 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:28,328 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:28,328 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:28,328 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:28,342 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:28,608 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:28,608 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:28,608 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:28,608 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:28,608 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:28,625 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:28,625 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:28,625 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:28,625 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:28,625 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:28,640 [analyzer] CRITICAL: Unable to find closeby page for hooking!
2025-01-24 20:52:31,265 [analyzer] INFO: Process with pid 2868 has terminated
2025-01-24 20:52:31,265 [analyzer] INFO: Process list is empty, terminating analysis.
2025-01-24 20:52:32,546 [analyzer] INFO: Terminating remaining processes before shutdown.
2025-01-24 20:52:32,546 [analyzer] INFO: Analysis completed.

2025-01-29 04:50:33,029 [cuckoo.core.scheduler] INFO: Task #5847050: acquired machine win7x6429 (label=win7x6429)
2025-01-29 04:50:33,033 [cuckoo.core.resultserver] DEBUG: Now tracking machine 192.168.168.229 for task #5847050
2025-01-29 04:50:33,520 [cuckoo.auxiliary.sniffer] INFO: Started sniffer with PID 896552 (interface=vboxnet0, host=192.168.168.229)
2025-01-29 04:50:33,547 [cuckoo.machinery.virtualbox] DEBUG: Starting vm win7x6429
2025-01-29 04:50:34,582 [cuckoo.machinery.virtualbox] DEBUG: Restoring virtual machine win7x6429 to vmcloak
2025-01-29 04:53:15,094 [cuckoo.core.guest] INFO: Starting analysis #5847050 on guest (id=win7x6429, ip=192.168.168.229)
2025-01-29 04:53:16,112 [cuckoo.core.guest] DEBUG: win7x6429: not ready yet
2025-01-29 04:53:21,134 [cuckoo.core.guest] INFO: Guest is running Cuckoo Agent 0.10 (id=win7x6429, ip=192.168.168.229)
2025-01-29 04:53:21,221 [cuckoo.core.guest] DEBUG: Uploading analyzer to guest (id=win7x6429, ip=192.168.168.229, monitor=latest, size=6660546)
2025-01-29 04:53:22,472 [cuckoo.core.resultserver] DEBUG: Task #5847050: live log analysis.log initialized.
2025-01-29 04:53:23,449 [cuckoo.core.resultserver] DEBUG: Task #5847050 is sending a BSON stream
2025-01-29 04:53:23,852 [cuckoo.core.resultserver] DEBUG: Task #5847050 is sending a BSON stream
2025-01-29 04:53:24,751 [cuckoo.core.resultserver] DEBUG: Task #5847050: File upload for 'shots/0001.jpg'
2025-01-29 04:53:24,787 [cuckoo.core.resultserver] DEBUG: Task #5847050 uploaded file length: 114556
2025-01-29 04:53:36,063 [cuckoo.core.resultserver] DEBUG: Task #5847050: File upload for 'shots/0002.jpg'
2025-01-29 04:53:36,069 [cuckoo.core.resultserver] DEBUG: Task #5847050 uploaded file length: 70580
2025-01-29 04:53:36,864 [cuckoo.core.resultserver] DEBUG: Task #5847050: File upload for 'curtain/1737748352.38.curtain.log'
2025-01-29 04:53:36,870 [cuckoo.core.resultserver] DEBUG: Task #5847050 uploaded file length: 36
2025-01-29 04:53:37,016 [cuckoo.core.resultserver] DEBUG: Task #5847050: File upload for 'sysmon/1737748352.53.sysmon.xml'
2025-01-29 04:53:37,025 [cuckoo.core.resultserver] DEBUG: Task #5847050 uploaded file length: 1134224
2025-01-29 04:53:37,107 [cuckoo.core.resultserver] DEBUG: Task #5847050 had connection reset for <Context for LOG>
2025-01-29 04:53:37,195 [cuckoo.core.guest] INFO: win7x6429: analysis completed successfully
2025-01-29 04:53:37,206 [cuckoo.core.plugins] DEBUG: Stopped auxiliary module: Redsocks
2025-01-29 04:53:37,224 [cuckoo.core.plugins] DEBUG: Stopped auxiliary module: Sniffer
2025-01-29 04:53:38,437 [cuckoo.machinery.virtualbox] INFO: Successfully generated memory dump for virtual machine with label win7x6429 to path /srv/cuckoo/cwd/storage/analyses/5847050/memory.dmp
2025-01-29 04:53:38,452 [cuckoo.machinery.virtualbox] DEBUG: Stopping vm win7x6429
2025-01-29 04:55:07,022 [cuckoo.core.resultserver] DEBUG: Stopped tracking machine 192.168.168.229 for task #5847050
2025-01-29 04:55:09,874 [cuckoo.core.scheduler] DEBUG: Released database task #5847050
2025-01-29 04:55:13,444 [cuckoo.core.scheduler] INFO: Task #5847050: analysis procedure completed