Analysis
-
max time kernel
134s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
14/11/2024, 10:21 UTC
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Flycode_VPN_installer.exe
Resource
win7-20240729-en
3 signatures
150 seconds
General
-
Target
Flycode_VPN_installer.exe
-
Size
725KB
-
MD5
6214931316aef5b8f870d375a7649218
-
SHA1
cfbded8b49b5c4c4ad1ab594010d14cb236463b0
-
SHA256
32aaddf41bbed77709a5db74ed8a62e179f65486945cfb20ccaa6023686a6871
-
SHA512
8eaa85a23fc4c5b38b08afbaad9ad7101f7c43e85fdc3e2841dac42e484b8af07ccea04b74d304dff39573d4e49747b49ca66f80444222268d1b8ab318e6e78f
-
SSDEEP
12288:LxeQCJwvvFkyjj6ZqxdDXCXxFCQE1Vdr+iGkvii1KRlWPBboSWo69c32a6st7Ylm:NeQMwvNkn2DXCXxFCQE1Vdr+iGkvii1J
Malware Config
Signatures
Processes
Network
-
Remote address:8.8.8.8:53Request196.249.167.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request8.8.8.8.in-addr.arpaIN PTRResponse8.8.8.8.in-addr.arpaIN PTRdnsgoogle
-
Remote address:8.8.8.8:53Request172.214.232.199.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request134.32.126.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request95.221.229.192.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request241.150.49.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request212.20.149.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request18.31.95.13.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request172.210.232.199.in-addr.arpaIN PTRResponse
-
260 B 5
-
260 B 5
-
260 B 5
-
260 B 5
-
260 B 5
-
73 B 147 B 1 1
DNS Request
196.249.167.52.in-addr.arpa
-
66 B 90 B 1 1
DNS Request
8.8.8.8.in-addr.arpa
-
74 B 128 B 1 1
DNS Request
172.214.232.199.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
134.32.126.40.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
241.150.49.20.in-addr.arpa
-
73 B 144 B 1 1
DNS Request
95.221.229.192.in-addr.arpa
-
72 B 146 B 1 1
DNS Request
212.20.149.52.in-addr.arpa
-
70 B 144 B 1 1
DNS Request
18.31.95.13.in-addr.arpa
-
74 B 128 B 1 1
DNS Request
172.210.232.199.in-addr.arpa