Size | 53.2KB |
---|---|
Type | HTML document, ASCII text, with very long lines (3384), with CRLF, LF line terminators |
MD5 | b71688f9bf4450d622b73a1e197dd4d0 |
SHA1 | 1c65895f8698a1e3cdcfa89912094ebac86957b6 |
SHA256 | 526472d4b55eed11efc411e927a1aacc39c5afd8f19e16acfe29421f9d222c0b |
SHA512 |
29225e7761ee584b3594c4546e6f909fc3383a96fbb39448e69ab3360846a3b01096e401d65ba600d2832eaa1950a679d43c6904d55553fe429e4185048afb88
|
CRC32 | 7D90979B |
ssdeep | None |
Yara | None matched |
Please notice: The scoring system is currently still in development and should be considered an alpha feature.
Expecting different results? Send us this analysis and we will inspect it. Click here
Category | Started | Completed | Duration | Routing | Logs |
---|---|---|---|---|---|
FILE | Feb. 13, 2025, 11:55 p.m. | Feb. 14, 2025, 12:04 a.m. | 553 seconds | internet |
Show Analyzer Log Show Cuckoo Log |
2025-02-10 23:36:58,030 [analyzer] DEBUG: Starting analyzer from: C:\tmpzepe2z 2025-02-10 23:36:58,030 [analyzer] DEBUG: Pipe server name: \??\PIPE\ZDOUDztRcAwunOWjTEGVrsE 2025-02-10 23:36:58,030 [analyzer] DEBUG: Log pipe server name: \??\PIPE\QiNnMFTqVWoobDAMacy 2025-02-10 23:36:58,467 [analyzer] DEBUG: Started auxiliary module Curtain 2025-02-10 23:36:58,467 [analyzer] DEBUG: Started auxiliary module DbgView 2025-02-10 23:36:59,217 [analyzer] DEBUG: Started auxiliary module Disguise 2025-02-10 23:36:59,467 [analyzer] DEBUG: Loaded monitor into process with pid 504 2025-02-10 23:36:59,467 [analyzer] DEBUG: Started auxiliary module DumpTLSMasterSecrets 2025-02-10 23:36:59,467 [analyzer] DEBUG: Started auxiliary module Human 2025-02-10 23:36:59,467 [analyzer] DEBUG: Started auxiliary module InstallCertificate 2025-02-10 23:36:59,483 [analyzer] DEBUG: Started auxiliary module Reboot 2025-02-10 23:36:59,530 [analyzer] DEBUG: Started auxiliary module RecentFiles 2025-02-10 23:36:59,530 [analyzer] DEBUG: Started auxiliary module Screenshots 2025-02-10 23:36:59,530 [analyzer] DEBUG: Started auxiliary module Sysmon 2025-02-10 23:36:59,530 [analyzer] DEBUG: Started auxiliary module LoadZer0m0n 2025-02-10 23:36:59,530 [modules.packages.js] INFO: Submitted file is missing extension, added .js 2025-02-10 23:36:59,750 [lib.api.process] INFO: Successfully executed process from path 'C:\\Windows\\System32\\wscript.exe' with arguments [u'C:\\Users\\ADMINI~1\\AppData\\Local\\Temp\\526472d4b55eed11efc411e927a1aacc39c5afd8f19e16acfe29421f9d222c0b.js'] and pid 2712 2025-02-10 23:37:00,046 [analyzer] DEBUG: Loaded monitor into process with pid 2712 2025-02-10 23:37:00,483 [analyzer] INFO: io=NULL 2025-02-10 23:37:00,483 [analyzer] DEBUG: Error resolving function jscript!ActiveXObjectFncObj_Construct through our custom callback. 2025-02-10 23:37:00,483 [analyzer] INFO: io=NULL 2025-02-10 23:37:00,483 [analyzer] DEBUG: Error resolving function jscript!COleScript_Compile through our custom callback. 2025-02-10 23:37:00,483 [analyzer] INFO: io=NULL 2025-02-10 23:37:00,483 [analyzer] DEBUG: Error resolving function jscript!Math_random through our custom callback. 2025-02-10 23:37:00,546 [analyzer] INFO: io=NULL 2025-02-10 23:37:00,546 [analyzer] DEBUG: Error resolving function jscript!ActiveXObjectFncObj_Construct through our custom callback. 2025-02-10 23:37:00,562 [analyzer] INFO: io=NULL 2025-02-10 23:37:00,578 [analyzer] DEBUG: Error resolving function jscript!COleScript_Compile through our custom callback. 2025-02-10 23:37:00,687 [analyzer] INFO: io=NULL 2025-02-10 23:37:00,687 [analyzer] DEBUG: Error resolving function jscript!Math_random through our custom callback. 2025-02-10 23:37:28,750 [analyzer] INFO: Analysis timeout hit, terminating analysis. 2025-02-10 23:37:29,062 [analyzer] INFO: Terminating remaining processes before shutdown. 2025-02-10 23:37:29,062 [lib.api.process] INFO: Successfully terminated process with pid 2712. 2025-02-10 23:37:29,062 [analyzer] INFO: Analysis completed.
2025-02-13 23:55:18,292 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:19,323 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:20,367 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:21,407 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:22,438 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:23,460 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:25,022 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:26,142 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:27,173 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:28,196 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:29,222 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:30,254 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:31,359 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:32,793 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:33,834 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:34,885 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:36,039 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:37,092 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:38,136 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:39,189 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:40,450 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:41,486 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:42,535 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:43,586 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:44,783 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:45,891 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:46,957 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:48,027 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:49,094 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:50,441 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:51,507 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:52,559 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:53,604 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:54,654 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:55,696 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:56,748 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:57,789 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:55:58,854 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:00,025 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:01,114 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:02,187 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:03,258 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:04,328 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:05,393 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:06,483 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:07,556 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:08,652 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:09,732 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:10,839 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:11,943 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:13,038 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:14,135 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:15,232 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:16,318 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:17,558 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:18,645 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:19,740 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:20,844 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:21,919 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:23,007 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:24,126 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:25,480 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:26,753 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:27,882 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:28,927 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:29,982 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:31,073 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:32,158 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:33,313 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:34,437 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:35,510 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:36,630 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:37,692 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:38,753 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:39,838 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:40,914 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:42,465 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:43,580 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:44,702 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:45,790 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:47,458 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:48,514 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:49,543 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:50,568 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:51,592 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:52,618 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:53,713 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:54,779 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:55,897 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:56,970 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:58,035 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:56:59,285 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:57:00,556 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:57:01,593 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:57:02,629 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:57:03,677 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:57:04,697 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:57:05,749 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:57:06,801 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:57:07,871 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:57:08,939 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:57:10,005 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:57:11,048 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:57:12,083 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:57:13,121 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:57:14,146 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:57:15,164 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:57:16,186 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:57:17,233 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:57:18,263 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:57:19,542 [cuckoo.core.scheduler] DEBUG: Task #5936649: no machine available yet 2025-02-13 23:57:20,607 [cuckoo.core.scheduler] INFO: Task #5936649: acquired machine win7x6417 (label=win7x6417) 2025-02-13 23:57:20,608 [cuckoo.core.resultserver] DEBUG: Now tracking machine 192.168.168.217 for task #5936649 2025-02-13 23:57:21,141 [cuckoo.auxiliary.sniffer] INFO: Started sniffer with PID 3605471 (interface=vboxnet0, host=192.168.168.217) 2025-02-13 23:57:21,188 [cuckoo.machinery.virtualbox] DEBUG: Starting vm win7x6417 2025-02-13 23:57:22,040 [cuckoo.machinery.virtualbox] DEBUG: Restoring virtual machine win7x6417 to vmcloak 2025-02-14 00:00:24,797 [cuckoo.core.guest] INFO: Starting analysis #5936649 on guest (id=win7x6417, ip=192.168.168.217) 2025-02-14 00:00:25,810 [cuckoo.core.guest] DEBUG: win7x6417: not ready yet 2025-02-14 00:00:31,201 [cuckoo.core.guest] INFO: Guest is running Cuckoo Agent 0.10 (id=win7x6417, ip=192.168.168.217) 2025-02-14 00:00:33,015 [cuckoo.core.guest] DEBUG: Uploading analyzer to guest (id=win7x6417, ip=192.168.168.217, monitor=latest, size=6660546) 2025-02-14 00:00:35,503 [cuckoo.core.resultserver] DEBUG: Task #5936649: live log analysis.log initialized. 2025-02-14 00:00:36,978 [cuckoo.core.resultserver] DEBUG: Task #5936649 is sending a BSON stream 2025-02-14 00:00:37,555 [cuckoo.core.resultserver] DEBUG: Task #5936649 is sending a BSON stream 2025-02-14 00:00:38,205 [cuckoo.core.resultserver] DEBUG: Task #5936649: File upload for 'shots/0001.jpg' 2025-02-14 00:00:38,232 [cuckoo.core.resultserver] DEBUG: Task #5936649 uploaded file length: 133496 2025-02-14 00:00:39,335 [cuckoo.core.resultserver] DEBUG: Task #5936649: File upload for 'shots/0002.jpg' 2025-02-14 00:00:39,351 [cuckoo.core.resultserver] DEBUG: Task #5936649 uploaded file length: 136488 2025-02-14 00:00:50,302 [cuckoo.core.guest] DEBUG: win7x6417: analysis #5936649 still processing 2025-02-14 00:01:05,560 [cuckoo.core.guest] DEBUG: win7x6417: analysis #5936649 still processing 2025-02-14 00:01:06,414 [cuckoo.core.resultserver] DEBUG: Task #5936649: File upload for 'curtain/1739227048.89.curtain.log' 2025-02-14 00:01:06,417 [cuckoo.core.resultserver] DEBUG: Task #5936649 uploaded file length: 36 2025-02-14 00:01:06,593 [cuckoo.core.resultserver] DEBUG: Task #5936649: File upload for 'sysmon/1739227049.06.sysmon.xml' 2025-02-14 00:01:06,873 [cuckoo.core.resultserver] DEBUG: Task #5936649 uploaded file length: 947308 2025-02-14 00:01:07,362 [cuckoo.core.resultserver] DEBUG: Task #5936649: File upload for 'shots/0003.jpg' 2025-02-14 00:01:07,796 [cuckoo.core.resultserver] DEBUG: Task #5936649 uploaded file length: 133496 2025-02-14 00:01:07,808 [cuckoo.core.resultserver] DEBUG: Task #5936649 had connection reset for <Context for LOG> 2025-02-14 00:01:08,581 [cuckoo.core.guest] INFO: win7x6417: analysis completed successfully 2025-02-14 00:01:08,593 [cuckoo.core.plugins] DEBUG: Stopped auxiliary module: Redsocks 2025-02-14 00:01:08,662 [cuckoo.core.plugins] DEBUG: Stopped auxiliary module: Sniffer 2025-02-14 00:01:09,976 [cuckoo.machinery.virtualbox] INFO: Successfully generated memory dump for virtual machine with label win7x6417 to path /srv/cuckoo/cwd/storage/analyses/5936649/memory.dmp 2025-02-14 00:01:09,988 [cuckoo.machinery.virtualbox] DEBUG: Stopping vm win7x6417 2025-02-14 00:04:29,640 [cuckoo.core.resultserver] DEBUG: Stopped tracking machine 192.168.168.217 for task #5936649 2025-02-14 00:04:30,788 [cuckoo.core.scheduler] DEBUG: Released database task #5936649 2025-02-14 00:04:31,233 [cuckoo.core.scheduler] INFO: Task #5936649: analysis procedure completed
registry | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\MachineGuid |
Microsoft | Trojan:HTML/Phish.DG!MTB |
MaxSecure | Trojan.WIN32.cryxos.5913 |