wannacry | 995fc47f5a93290bfb55d81aa2ef7ab8cdc318fede83ad870c1bafceb28e3ea1

Analysis

max time kernel
151s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
09/07/2023, 11:16 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9664768f5ad1faexeexeexeex.exe
Size

5.0MB
MD5

9664768f5ad1fa15c107ec79a8dc797a
SHA1

0dbb80e9eb16654dd57bf01f8112e15aafea54c5
SHA256

995fc47f5a93290bfb55d81aa2ef7ab8cdc318fede83ad870c1bafceb28e3ea1
SHA512

9cced82693b2e52bce9f478aa29eee2a21be43cf4a974c184f37d097f2ce3c4d96b94c6f3bb5ef3a5953c932c6ebca22976954c9a149c490ac3f9fd72d3b3835
SSDEEP

98304:yDqPoBhz1aRxcSUDk36SAEdhvxWa9P5AR8yAVp2:yDqPe1Cxcxk3ZAEUadiR8yc4

Score

10^/10

wannacry discovery ransomware worm

Malware Config

Signatures

Wannacry
WannaCry is a ransomware cryptoworm.
ransomware worm wannacry
Contacts a large (3234) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Scanning
T1046

Executes dropped EXE 1 IoCs

pid	Process
3852	tasksche.exe

Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Scanning
T1046

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\WINDOWS\tasksche.exe	9664768f5ad1faexeexeexeex.exe

Modifies data under HKEY_USERS 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\	9664768f5ad1faexeexeexeex.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass = "1"	9664768f5ad1faexeexeexeex.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName = "1"	9664768f5ad1faexeexeexeex.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet = "1"	9664768f5ad1faexeexeexeex.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect = "0"	9664768f5ad1faexeexeexeex.exe

C:\Users\Admin\AppData\Local\Temp\9664768f5ad1faexeexeexeex.exe
"C:\Users\Admin\AppData\Local\Temp\9664768f5ad1faexeexeexeex.exe"
1⤵
- Drops file in Windows directory
PID:4764
- C:\WINDOWS\tasksche.exe
  C:\WINDOWS\tasksche.exe /i
  2⤵
  - Executes dropped EXE
  PID:3852

C:\Users\Admin\AppData\Local\Temp\9664768f5ad1faexeexeexeex.exe
C:\Users\Admin\AppData\Local\Temp\9664768f5ad1faexeexeexeex.exe -m security
1⤵
- Modifies data under HKEY_USERS
PID:4132

Network

DNS

www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com

9664768f5ad1faexeexeexeex.exe

Remote address:

8.8.8.8:53

Request

www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com

IN A

Response

www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com

IN A

104.17.244.81

www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com

IN A

104.16.173.80
GET

http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/

9664768f5ad1faexeexeexeex.exe

Remote address:

104.17.244.81:80

Request

GET / HTTP/1.1
Host: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Date: Sun, 09 Jul 2023 11:16:11 GMT
Content-Type: text/html
Content-Length: 607
Connection: close
Server: cloudflare
CF-RAY: 7e402742ba06b8df-AMS
GET

http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/

9664768f5ad1faexeexeexeex.exe

Remote address:

104.17.244.81:80

Request

GET / HTTP/1.1
Host: www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
Cache-Control: no-cache

Response

HTTP/1.1 200 OK

Date: Sun, 09 Jul 2023 11:16:11 GMT
Content-Type: text/html
Content-Length: 607
Connection: close
Server: cloudflare
CF-RAY: 7e402744385db6f3-AMS
DNS

81.244.17.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

81.244.17.104.in-addr.arpa

IN PTR

Response
DNS

171.39.242.20.in-addr.arpa

Request

171.39.242.20.in-addr.arpa

IN PTR

Response
DNS

203.151.224.20.in-addr.arpa

Request

203.151.224.20.in-addr.arpa

IN PTR

Response
DNS

9.35.101.155.in-addr.arpa

Request

9.35.101.155.in-addr.arpa

IN PTR

Response
DNS

1.35.101.155.in-addr.arpa

Request

1.35.101.155.in-addr.arpa

IN PTR

Response
DNS

48.196.220.134.in-addr.arpa

Request

48.196.220.134.in-addr.arpa

IN PTR

Response
DNS

1.196.220.134.in-addr.arpa

Request

1.196.220.134.in-addr.arpa

IN PTR

Response
DNS

2.196.220.134.in-addr.arpa

Request

2.196.220.134.in-addr.arpa

IN PTR

Response
DNS

3.196.220.134.in-addr.arpa

Request

3.196.220.134.in-addr.arpa

IN PTR

Response
DNS

4.35.101.155.in-addr.arpa

Request

4.35.101.155.in-addr.arpa

IN PTR

Response
DNS

1.173.189.20.in-addr.arpa

Request

1.173.189.20.in-addr.arpa

IN PTR

Response

104.17.244.81:80

http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/

http

9664768f5ad1faexeexeexeex.exe

376 B
990 B
6
5

HTTP Request

GET http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/

HTTP Response

200
104.17.244.81:80

http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/

http

9664768f5ad1faexeexeexeex.exe

376 B
990 B
6
5

HTTP Request

GET http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com/

HTTP Response

200
178.129.197.135:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.0.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.3.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.4.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.2.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.1.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.5.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.6.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.7.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.8.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.9.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.10.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
105.187.236.245:445

9664768f5ad1faexeexeexeex.exe

104 B
80 B
2
2
10.127.11.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.12.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.13.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.14.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.15.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.16.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.20.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.18.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.17.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
32.190.28.135:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.21.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.19.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
189.216.235.161:445

9664768f5ad1faexeexeexeex.exe

104 B
80 B
2
2
10.127.22.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.23.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.24.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.30.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.26.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.25.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.27.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.28.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.29.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.31.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.32.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
108.44.226.142:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.33.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.34.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
151.47.151.175:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.35.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.40.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.42.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.38.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.41.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
17.220.163.227:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.37.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.36.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
90.181.183.180:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.39.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
70.174.44.250:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.47.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.43.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.45.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.46.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.44.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.48.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.49.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.50.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.51.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.52.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.53.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.54.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
80.79.195.211:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.55.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.56.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
143.1.43.217:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.57.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
49.172.181.220:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.59.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
181.157.252.179:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.60.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
42.73.221.217:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.67.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.58.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.61.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.64.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.65.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.62.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
56.29.145.14:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.63.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
130.63.167.249:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.68.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.66.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.69.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.70.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.71.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.72.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.73.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.74.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.75.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.76.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.77.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.78.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
164.115.92.42:445

9664768f5ad1faexeexeexeex.exe

52 B
1
223.0.123.22:445

9664768f5ad1faexeexeexeex.exe

104 B
2
74.102.96.123:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.82.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.83.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.80.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
148.87.252.79:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.79.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.81.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
126.119.64.140:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.87.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
31.170.173.162:445

9664768f5ad1faexeexeexeex.exe

104 B
2
150.150.237.74:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.86.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.84.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.89.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.90.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.88.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
195.102.193.97:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.85.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.91.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.92.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.93.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.94.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.95.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
53.171.26.182:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.96.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.97.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.98.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
121.11.110.159:445

9664768f5ad1faexeexeexeex.exe

104 B
2
45.67.84.183:445

9664768f5ad1faexeexeexeex.exe

104 B
2
77.180.109.183:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.99.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.101.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.102.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
104.228.190.252:445

9664768f5ad1faexeexeexeex.exe

104 B
2
106.206.205.91:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.100.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
169.58.166.51:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.105.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.103.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.108.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
163.39.117.215:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.106.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.109.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.104.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
205.104.251.161:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.111.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.107.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.110.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
205.139.223.77:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.112.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.113.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.114.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.115.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.116.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
137.65.156.128:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.117.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
129.235.140.155:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.118.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
142.107.199.11:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.119.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.120.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
188.171.9.182:445

9664768f5ad1faexeexeexeex.exe

104 B
80 B
2
2
10.127.122.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.121.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
194.134.61.220:445

9664768f5ad1faexeexeexeex.exe

104 B
2
179.75.114.177:445

9664768f5ad1faexeexeexeex.exe

104 B
2
169.173.252.202:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.124.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.126.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.127.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
205.10.124.0:445

9664768f5ad1faexeexeexeex.exe

104 B
2
164.208.63.17:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.123.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
101.165.185.84:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.128.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.125.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
26.185.79.176:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.129.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
179.81.248.242:445

9664768f5ad1faexeexeexeex.exe

196 B
160 B
4
4
10.127.133.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.134.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.130.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.131.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.132.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.135.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.136.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.137.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.138.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
38.90.85.5:445

9664768f5ad1faexeexeexeex.exe

52 B
1
143.199.37.217:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.139.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.140.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
20.211.98.101:445

9664768f5ad1faexeexeexeex.exe

104 B
2
191.164.178.245:445

9664768f5ad1faexeexeexeex.exe

104 B
2
175.219.138.49:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.142.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
164.108.29.169:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.141.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.144.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
162.119.82.186:445

9664768f5ad1faexeexeexeex.exe

52 B
1
107.121.174.29:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.143.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.148.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
193.10.235.200:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.145.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
96.189.90.72:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.146.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
35.77.135.147:445

9664768f5ad1faexeexeexeex.exe

52 B
1
205.77.186.136:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.149.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
185.129.29.66:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.152.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.147.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.151.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.150.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
101.183.232.5:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.153.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.154.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.155.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.156.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
168.43.5.132:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.157.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
104.64.39.234:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.158.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.159.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.160.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
50.191.225.220:445

9664768f5ad1faexeexeexeex.exe

104 B
2
54.176.230.237:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.161.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
135.114.120.7:445

9664768f5ad1faexeexeexeex.exe

104 B
2
72.207.55.237:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.162.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
192.218.113.92:445

9664768f5ad1faexeexeexeex.exe

104 B
2
166.105.49.39:445

9664768f5ad1faexeexeexeex.exe

104 B
2
147.196.92.228:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.163.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
185.9.145.204:445

9664768f5ad1faexeexeexeex.exe

52 B
1
48.240.105.156:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.168.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.165.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.167.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
102.4.65.135:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.166.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
56.97.12.82:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.164.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.170.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
144.117.96.232:445

9664768f5ad1faexeexeexeex.exe

104 B
2
59.68.195.34:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.174.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.169.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.173.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
50.124.176.14:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.171.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.172.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.177.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.175.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.176.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.178.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
217.115.45.232:445

9664768f5ad1faexeexeexeex.exe

104 B
2
143.208.55.11:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.179.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
196.252.36.233:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.180.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
217.229.225.67:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.183.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
51.67.0.112:445

9664768f5ad1faexeexeexeex.exe

104 B
2
94.142.24.19:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.181.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.185.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.182.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
164.244.240.115:445

9664768f5ad1faexeexeexeex.exe

104 B
2
128.219.247.232:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.186.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.187.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
151.219.230.178:445

9664768f5ad1faexeexeexeex.exe

104 B
2
192.135.124.54:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.184.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
49.208.237.243:445

9664768f5ad1faexeexeexeex.exe

104 B
2
168.116.154.233:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.188.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
203.234.91.132:445

9664768f5ad1faexeexeexeex.exe

104 B
2
98.252.109.157:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.191.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.189.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
1.127.14.56:445

9664768f5ad1faexeexeexeex.exe

104 B
2
217.35.219.244:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.193.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.195.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
218.149.168.77:445

9664768f5ad1faexeexeexeex.exe

52 B
1
130.85.81.177:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.192.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.194.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.190.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.199.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
82.75.110.155:445

9664768f5ad1faexeexeexeex.exe

104 B
2
215.212.238.127:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.196.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.197.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.198.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.200.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.201.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
121.24.33.95:445

9664768f5ad1faexeexeexeex.exe

104 B
2
181.20.39.138:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.202.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
90.219.243.154:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.204.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
6.52.183.153:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.203.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.205.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
133.121.137.179:445

9664768f5ad1faexeexeexeex.exe

104 B
2
106.124.137.251:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.206.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
110.134.0.88:445

9664768f5ad1faexeexeexeex.exe

52 B
1
168.25.171.173:445

9664768f5ad1faexeexeexeex.exe

52 B
1
143.95.164.128:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.207.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
152.34.103.150:445

9664768f5ad1faexeexeexeex.exe

104 B
2
109.232.63.137:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.211.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.208.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.209.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.210.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
107.197.35.42:445

9664768f5ad1faexeexeexeex.exe

52 B
1
199.219.87.217:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.213.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
179.140.84.74:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.216.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
147.162.18.245:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.212.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.214.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.215.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
135.18.238.3:445

9664768f5ad1faexeexeexeex.exe

52 B
1
34.39.13.182:445

9664768f5ad1faexeexeexeex.exe

104 B
2
181.16.58.221:445

9664768f5ad1faexeexeexeex.exe

104 B
2
140.96.64.76:445

9664768f5ad1faexeexeexeex.exe

104 B
2
113.96.66.253:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.217.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.218.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.219.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.220.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.221.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.222.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
211.205.183.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
9.217.225.121:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.224.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
197.24.104.73:445

9664768f5ad1faexeexeexeex.exe

52 B
1
32.201.149.186:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.226.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
194.65.29.68:445

9664768f5ad1faexeexeexeex.exe

104 B
2
31.20.32.18:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.225.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
31.242.148.186:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.227.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
121.15.183.149:445

9664768f5ad1faexeexeexeex.exe

52 B
1
57.174.51.112:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.230.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.223.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
78.32.215.95:445

9664768f5ad1faexeexeexeex.exe

52 B
1
29.183.100.6:445

9664768f5ad1faexeexeexeex.exe

104 B
2
103.61.176.190:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.228.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
31.217.190.99:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.232.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
4.102.218.31:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.229.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.231.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.233.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.234.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.235.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.236.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.237.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
32.139.206.61:445

9664768f5ad1faexeexeexeex.exe

104 B
2
56.197.129.249:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.238.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.239.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
97.198.12.67:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.240.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
119.114.35.116:445

9664768f5ad1faexeexeexeex.exe

52 B
1
148.164.223.82:445

9664768f5ad1faexeexeexeex.exe

104 B
2
152.158.202.136:445

9664768f5ad1faexeexeexeex.exe

52 B
1
82.11.119.212:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.241.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.242.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.243.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
65.251.142.233:445

9664768f5ad1faexeexeexeex.exe

104 B
2
119.129.56.116:445

9664768f5ad1faexeexeexeex.exe

52 B
1
12.47.44.247:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.244.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
171.130.105.84:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.245.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
98.202.211.239:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.246.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
2.244.171.23:445

9664768f5ad1faexeexeexeex.exe

104 B
2
186.136.221.205:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.248.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
51.144.156.44:445

9664768f5ad1faexeexeexeex.exe

104 B
2
214.23.13.66:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.251.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
113.97.70.56:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.250.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
16.244.142.254:445

9664768f5ad1faexeexeexeex.exe

104 B
2
36.183.91.165:445

9664768f5ad1faexeexeexeex.exe

104 B
2
18.197.36.76:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.249.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.247.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.253.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
201.244.219.160:445

9664768f5ad1faexeexeexeex.exe

104 B
80 B
2
2
53.250.152.157:445

9664768f5ad1faexeexeexeex.exe

104 B
2
16.244.179.146:445

9664768f5ad1faexeexeexeex.exe

104 B
2
3.169.39.100:445

9664768f5ad1faexeexeexeex.exe

104 B
2
18.246.160.155:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.255.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.0.2:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.1.2:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.252.1:445

9664768f5ad1faexeexeexeex.exe

104 B
2
92.1.218.10:445

9664768f5ad1faexeexeexeex.exe

104 B
2
149.107.186.221:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.254.1:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.6.2:445

9664768f5ad1faexeexeexeex.exe

52 B
1
104.227.178.167:445

9664768f5ad1faexeexeexeex.exe

104 B
2
200.72.121.128:445

9664768f5ad1faexeexeexeex.exe

104 B
2
183.53.38.16:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.2.2:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.4.2:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.5.2:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.3.2:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.7.2:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.8.2:445

9664768f5ad1faexeexeexeex.exe

52 B
1
37.38.66.109:445

9664768f5ad1faexeexeexeex.exe

104 B
2
156.103.168.183:445

9664768f5ad1faexeexeexeex.exe

52 B
1
190.224.166.164:445

9664768f5ad1faexeexeexeex.exe

104 B
2
105.35.68.214:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.9.2:445

9664768f5ad1faexeexeexeex.exe

104 B
2
20.221.170.214:445

9664768f5ad1faexeexeexeex.exe

104 B
2
168.25.117.127:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.12.2:445

9664768f5ad1faexeexeexeex.exe

104 B
2
25.160.88.27:445

9664768f5ad1faexeexeexeex.exe

104 B
2
49.144.233.13:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.10.2:445

9664768f5ad1faexeexeexeex.exe

104 B
2
21.68.48.241:445

9664768f5ad1faexeexeexeex.exe

104 B
2
80.176.240.116:445

9664768f5ad1faexeexeexeex.exe

104 B
2
191.93.36.187:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.17.2:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.11.2:445

9664768f5ad1faexeexeexeex.exe

52 B
1
91.8.177.17:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.18.2:445

9664768f5ad1faexeexeexeex.exe

104 B
2
5.109.99.155:445

9664768f5ad1faexeexeexeex.exe

104 B
2
20.70.251.142:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.13.2:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.14.2:445

9664768f5ad1faexeexeexeex.exe

104 B
2
15.196.240.175:445

9664768f5ad1faexeexeexeex.exe

52 B
1
169.157.133.198:445

9664768f5ad1faexeexeexeex.exe

104 B
2
128.45.237.94:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.15.2:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.16.2:445

9664768f5ad1faexeexeexeex.exe

52 B
1
156.120.233.196:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.21.2:445

9664768f5ad1faexeexeexeex.exe

52 B
1
68.60.40.84:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.22.2:445

9664768f5ad1faexeexeexeex.exe

104 B
2
156.248.79.61:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.19.2:445

9664768f5ad1faexeexeexeex.exe

104 B
2
30.164.236.110:445

9664768f5ad1faexeexeexeex.exe

104 B
2
100.168.129.66:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.27.2:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.20.2:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.25.2:445

9664768f5ad1faexeexeexeex.exe

104 B
2
159.158.53.166:445

9664768f5ad1faexeexeexeex.exe

104 B
2
52.94.234.218:445

9664768f5ad1faexeexeexeex.exe

104 B
2
159.7.67.235:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.24.2:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.29.2:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.23.2:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.26.2:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.28.2:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.30.2:445

9664768f5ad1faexeexeexeex.exe

104 B
2
204.189.140.3:445

9664768f5ad1faexeexeexeex.exe

52 B
1
153.159.234.1:445

9664768f5ad1faexeexeexeex.exe

52 B
40 B
1
1
87.166.86.194:445

9664768f5ad1faexeexeexeex.exe

52 B
1
143.140.88.135:445

9664768f5ad1faexeexeexeex.exe

104 B
2
44.184.219.60:445

9664768f5ad1faexeexeexeex.exe

52 B
1
87.183.14.63:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.31.2:445

9664768f5ad1faexeexeexeex.exe

52 B
1
91.133.156.15:445

9664768f5ad1faexeexeexeex.exe

104 B
2
53.128.175.180:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.32.2:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.33.2:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.34.2:445

9664768f5ad1faexeexeexeex.exe

52 B
1
125.168.63.217:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.35.2:445

9664768f5ad1faexeexeexeex.exe

52 B
1
99.201.108.151:445

9664768f5ad1faexeexeexeex.exe

104 B
2
139.24.212.79:445

9664768f5ad1faexeexeexeex.exe

52 B
1
39.248.87.216:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.37.2:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.36.2:445

9664768f5ad1faexeexeexeex.exe

104 B
2
140.166.147.216:445

9664768f5ad1faexeexeexeex.exe

104 B
2
1.240.102.86:445

9664768f5ad1faexeexeexeex.exe

104 B
2
164.45.8.98:445

9664768f5ad1faexeexeexeex.exe

104 B
2
10.127.38.2:445

9664768f5ad1faexeexeexeex.exe

52 B
1
10.127.39.2:445

9664768f5ad1faexeexeexeex.exe

104 B
2

8.8.8.8:53

www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com

dns

9664768f5ad1faexeexeexeex.exe

95 B
127 B
1
1

DNS Request

www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com

DNS Response

104.17.244.81

104.16.173.80
8.8.8.8:53

81.244.17.104.in-addr.arpa

dns

72 B
134 B
1
1

DNS Request

81.244.17.104.in-addr.arpa

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

T1046

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\tasksche.exe

Filesize
3.4MB

MD5
b6b4a7192b64c3ff5db94c5a92cc2ecc

SHA1
96644ddd07d959934c1bfd7be656ab3ece931954

SHA256
c67c2b56bdce5f3839d7eb2f84c715e5b7709e08faef23481d9a01f0920f6bd5

SHA512
7a4151589997f1e8abc2dd0bdc0837b2713555999a5844289920191e1f7c3dc251c8749d7b88cb69e6c78f1972d6daaf860f7c69c63980c5605a07f3f770fbf3

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Response