Size | 179.5KB |
---|---|
Type | PE32 executable (DLL) (GUI) Intel 80386 Mono/.Net assembly, for MS Windows |
MD5 | b1a739b6807f1e88e71d5fd45ad7421e |
SHA1 | c45ef2f9a0c40406697fa2e092b2d95cd40170c7 |
SHA256 | 43c0a3191e418016758395f9028dd1bed133aea6d04b0988ee4fd0b067d55c1e |
SHA512 |
7975b28586558cc5b97dfcbfe56f4983041af1cdabdfb966e96a9e1fb2a55fb90c060aad007608b04e8ef39bef3fd1a7c26ebc725a64c4b58da30da0c8dc6ff8
|
CRC32 | B1A67F2D |
ssdeep | None |
Yara |
|
Please notice: The scoring system is currently still in development and should be considered an alpha feature.
Expecting different results? Send us this analysis and we will inspect it. Click here
Category | Started | Completed | Duration | Routing | Logs |
---|---|---|---|---|---|
FILE | July 3, 2025, 12:23 p.m. | July 3, 2025, 12:32 p.m. | 515 seconds | internet |
Show Analyzer Log Show Cuckoo Log |
2025-07-03 12:15:21,015 [analyzer] DEBUG: Starting analyzer from: C:\tmpsgyfoe 2025-07-03 12:15:21,030 [analyzer] DEBUG: Pipe server name: \??\PIPE\pwHxwHBzpOxCgXcGknXThnuXSnDouu 2025-07-03 12:15:21,030 [analyzer] DEBUG: Log pipe server name: \??\PIPE\yCjWNBnekihGEoXwwnS 2025-07-03 12:15:21,405 [analyzer] DEBUG: Started auxiliary module Curtain 2025-07-03 12:15:21,405 [analyzer] DEBUG: Started auxiliary module DbgView 2025-07-03 12:15:21,890 [analyzer] DEBUG: Started auxiliary module Disguise 2025-07-03 12:15:22,092 [analyzer] DEBUG: Loaded monitor into process with pid 516 2025-07-03 12:15:22,092 [analyzer] DEBUG: Started auxiliary module DumpTLSMasterSecrets 2025-07-03 12:15:22,092 [analyzer] DEBUG: Started auxiliary module Human 2025-07-03 12:15:22,092 [analyzer] DEBUG: Started auxiliary module InstallCertificate 2025-07-03 12:15:22,092 [analyzer] DEBUG: Started auxiliary module Reboot 2025-07-03 12:15:22,217 [analyzer] DEBUG: Started auxiliary module RecentFiles 2025-07-03 12:15:22,217 [analyzer] DEBUG: Started auxiliary module Screenshots 2025-07-03 12:15:22,217 [analyzer] DEBUG: Started auxiliary module Sysmon 2025-07-03 12:15:22,217 [analyzer] DEBUG: Started auxiliary module LoadZer0m0n 2025-07-03 12:15:22,296 [lib.api.process] ERROR: Failed to execute process from path u'C:\\Users\\ADMINI~1\\AppData\\Local\\Temp\\DBEnAccountGroup.dll' with arguments ['bin\\inject-x86.exe', '--app', u'C:\\Users\\ADMINI~1\\AppData\\Local\\Temp\\DBEnAccountGroup.dll', '--only-start', '--curdir', 'C:\\Users\\ADMINI~1\\AppData\\Local\\Temp'] (Error: Command '['bin\\inject-x86.exe', '--app', u'C:\\Users\\ADMINI~1\\AppData\\Local\\Temp\\DBEnAccountGroup.dll', '--only-start', '--curdir', 'C:\\Users\\ADMINI~1\\AppData\\Local\\Temp']' returned non-zero exit status 1)
2025-07-03 12:23:54,414 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:23:55,461 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:23:56,487 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:23:57,511 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:23:58,542 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:23:59,571 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:00,593 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:01,622 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:02,648 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:03,682 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:04,706 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:05,730 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:06,752 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:07,908 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:08,933 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:09,963 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:10,988 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:12,013 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:13,039 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:14,063 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:15,089 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:16,130 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:17,166 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:18,270 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:19,396 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:20,474 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:21,521 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:22,563 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:23,589 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:24,622 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:25,657 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:26,674 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:27,713 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:28,738 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:29,763 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:30,789 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:31,828 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:32,859 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:33,880 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:34,905 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:35,933 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:36,960 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:37,981 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:39,017 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:40,043 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:41,071 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:42,264 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:43,285 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:44,314 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:45,339 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:46,363 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:47,392 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:48,495 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:49,627 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:50,716 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:51,790 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:52,869 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:54,013 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:55,100 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:56,150 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:57,205 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:58,269 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:24:59,334 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:00,391 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:01,445 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:02,698 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:03,767 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:04,861 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:05,998 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:07,089 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:08,152 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:09,237 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:10,307 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:11,400 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:12,510 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:13,629 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:14,703 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:15,831 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:17,005 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:18,833 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:20,134 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:21,411 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:22,440 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:23,468 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:24,499 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:25,521 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:26,547 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:27,576 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:28,603 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:29,631 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:30,656 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:31,685 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:32,710 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:33,739 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:35,093 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:36,126 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:37,155 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:38,177 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:39,248 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:40,319 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:41,385 [cuckoo.core.scheduler] DEBUG: Task #6655688: no machine available yet 2025-07-03 12:25:42,533 [cuckoo.core.scheduler] INFO: Task #6655688: acquired machine win7x6413 (label=win7x6413) 2025-07-03 12:25:42,542 [cuckoo.core.resultserver] DEBUG: Now tracking machine 192.168.168.213 for task #6655688 2025-07-03 12:25:43,024 [cuckoo.auxiliary.sniffer] INFO: Started sniffer with PID 701010 (interface=vboxnet0, host=192.168.168.213) 2025-07-03 12:25:43,331 [cuckoo.machinery.virtualbox] DEBUG: Starting vm win7x6413 2025-07-03 12:25:43,993 [cuckoo.machinery.virtualbox] DEBUG: Restoring virtual machine win7x6413 to vmcloak 2025-07-03 12:29:03,161 [cuckoo.core.guest] INFO: Starting analysis #6655688 on guest (id=win7x6413, ip=192.168.168.213) 2025-07-03 12:29:04,171 [cuckoo.core.guest] DEBUG: win7x6413: not ready yet 2025-07-03 12:29:09,202 [cuckoo.core.guest] INFO: Guest is running Cuckoo Agent 0.10 (id=win7x6413, ip=192.168.168.213) 2025-07-03 12:29:09,275 [cuckoo.core.guest] DEBUG: Uploading analyzer to guest (id=win7x6413, ip=192.168.168.213, monitor=latest, size=6660546) 2025-07-03 12:29:10,929 [cuckoo.core.resultserver] DEBUG: Task #6655688: live log analysis.log initialized. 2025-07-03 12:29:11,978 [cuckoo.core.resultserver] DEBUG: Task #6655688 is sending a BSON stream 2025-07-03 12:29:13,312 [cuckoo.core.resultserver] DEBUG: Task #6655688: File upload for 'shots/0001.jpg' 2025-07-03 12:29:13,363 [cuckoo.core.resultserver] DEBUG: Task #6655688 uploaded file length: 133579 2025-07-03 12:29:13,596 [cuckoo.core.guest] WARNING: win7x6413: analysis #6655688 caught an exception Traceback (most recent call last): File "C:/tmpsgyfoe/analyzer.py", line 824, in <module> success = analyzer.run() File "C:/tmpsgyfoe/analyzer.py", line 673, in run pids = self.package.start(self.target) File "C:\tmpsgyfoe\modules\packages\exe.py", line 34, in start return self.execute(path, args=shlex.split(args)) File "C:\tmpsgyfoe\lib\common\abstracts.py", line 205, in execute "Unable to execute the initial process, analysis aborted." CuckooPackageError: Unable to execute the initial process, analysis aborted. 2025-07-03 12:29:13,625 [cuckoo.core.plugins] DEBUG: Stopped auxiliary module: Redsocks 2025-07-03 12:29:13,675 [cuckoo.core.plugins] DEBUG: Stopped auxiliary module: Sniffer 2025-07-03 12:29:14,800 [cuckoo.machinery.virtualbox] INFO: Successfully generated memory dump for virtual machine with label win7x6413 to path /srv/cuckoo/cwd/storage/analyses/6655688/memory.dmp 2025-07-03 12:29:14,802 [cuckoo.machinery.virtualbox] DEBUG: Stopping vm win7x6413 2025-07-03 12:32:29,597 [cuckoo.core.resultserver] DEBUG: Stopped tracking machine 192.168.168.213 for task #6655688 2025-07-03 12:32:29,598 [cuckoo.core.resultserver] DEBUG: Cancel <Context for LOG> for task 6655688 2025-07-03 12:32:30,233 [cuckoo.core.scheduler] DEBUG: Released database task #6655688 2025-07-03 12:32:30,252 [cuckoo.core.scheduler] INFO: Task #6655688: analysis procedure completed
description | Checks if being debugged | rule | anti_dbg | ||||||
description | Take screenshot | rule | screenshot |