MALICIOUS — 672e6f77055a74ead02327a71695b78c94478a30c9e8c218cb7f020eb50aa758
Verdict: malicious (100/100) · Family: Fileinfector
File type: pe · SHA-256: 672e6f77055a74ead02327a71695b78c94478a30c9e8c218cb7f020eb50aa758
MITRE ATT&CK
- T1543.003
- T1112
- T1105
YARA
Dynamic analysis (windows)
75918 behavior events · 2 ATT&CK techniques · 28 dropped files.
Runtime network
- www.msftconnecttest.com
- rb.symcd.com
- rb.symcb.com
- inference.location.live.net
- www.freeav.com
- www.avira.com
- script.crazyegg.com
- www.webassetscdn.com
- nexus.ensighten.com
- assets.adobedtm.com
- t.nc0.co
- doh.cq0.co
- dpm.demdex.net
- symantec.demdex.net
- symantec.tt.omtrdc.net
- s.go-mpulse.net
- widget.trustpilot.com
- edge-consumer-static.azureedge.net
- data.privacy.ensighten.com
- www.nortonlifelock.com
Analyzed on MalwareAnalyzer by Cyble · Open interactive report