| Packed MD5 | 53123fadccfc009a6d9508086e4b0e08 |
| Priority | 20 |
| First | 01/26/2008 |
| Last | 06/25/2008 |
| Count | 61 |
| History | 61 hits: 01-26 to 06-25 |
| Unpacked MD5 | |
| AV Hits | 13 |
| AV Count | 32 |
| CC Servers | 67.19.50.66:7000 222.177.11.165:7000 211.96.97.44:7000 209.250.232.240:7000 218.93.14.236:7000 |
| DNS Lookups | CN:scorti1.dns2go.com US:scorti1.dns2go.com |
| Failed Connects | CN:211.96.97.44:7000 US:65.23.35.204:7000 US:208.101.48.210:7000 US:67.19.50.66:7000 CN:222.177.11.165:7000 US:209.250.232.240:7000 KR:210.217.196.11:7000 |
| AV Name | AhnLab-V3:Win-Privateexeprotector.199884, AntiVir:TRCrypt.XPACK.Gen, Authentium:MISSED, Avast:MISSED, AVG:MISSED, BitDefender:Packer.PrivateExeProtector.A, CAT-QuickHeal:MISSED, ClamAV:MISSED, DrWeb:MISSED, eSafe:MISSED, eTrust-Vet:MISSED, Ewido:MISSED, FileAdvisor:MISSED, Fortinet:MISSED, F-Prot:MISSED, F-Secure:Suspicious_Malware!Gemini, Ikarus:Packer.PrivateExeProtector.A, Kaspersky:MISSED, McAfee:MISSED, Microsoft:MISSED, NOD32v2:MISSED, Norman:Smalltroj.CLBJ, Panda:MISSED, Prevx1:MISSED, Rising:MISSED, Sophos:SusUnkPacker, Sunbelt:Crypt.XPACK.Gen, Symantec:MISSED, TheHacker:MISSED, VBA32:MISSED, VirusBuster:MISSED, Webwasher-Gateway:Crypt.XPACK.Gen |
| WinXP Files | msnnmaneger.exe |
| WinXP Processes | CMD.EXE, CSRSS.EXE, EXPLORER.EXE, LSASS.EXE, MSMSGS.EXE, msnnmaneger.exe, SERVICES.EXE, SPOOLSV.EXE, SVCHOST.EXE, WINLOGON.EXE |
| WinXP Registries | HKEY_LOCAL_MACHINE@...CurrentVersion\RunServices, HKEY_USERS@...CurrentVersion\RunOnce, HKEY_LOCAL_MACHINE@...CurrentVersion\\RunServices, HKEY_USERS@...CurrentVersion\\RunOnce |
| WinXP Ports | 1042, 11959, 1038, 14598, 1034, 18933, 1035, 18882, 14116, 1370, 1487, 1488, 1489, 1037, 10954, 1105, 1106, 1220, 1221, 1222, 1223, 1224, 1225, 1226, 1227, 1228, 1229, 1230, 1231, 1232, 1233, 1234, 1235, 1236, 1237, 1238, 1239, 1240, 1241, 1242, 1243, 1244, 1245, 1246, 1247, 1248, 15557, 1047, 18680, 1040, 11970, 1036, 17350, 1191, 1192, 1196, 1351, 1352, 1415, 1416, 1424, 1425, 1426, 1427, 1428, 1429, 1430, 1431, 1432, 1433, 1434, 1435, 1436, 1437, 1438, 1439, 1440, 1441, 1442, 15177, 18018, 12916, 21986, 4174, 4175, 4176, 4177, 4178, 4179, 4180, 4181, 4182, 4183, 4184, 4185, 4186, 4187, 4188, 4189, 4190, 4191, 4192, 4193, 4194, 4195, 4196, 4197, 4198, 4199, 4200, 4201, 4202, 4203, 4204, 4205, 4206, 4207, 4208, 4209, 4210, 4211, 4212, 4213, 4214, 4215, 4216, 4217, 4218, 4219, 4220, 4221, 4222, 4223, 4224, 4225, 4226, 4227, 4228, 4229, 4230, 4231, 4232, 4233, 4234, 4235, 4236, 4237, 4238, 4239, 4240, 4241, 4242, 4243, 4244, 4245, 4246, 4247, 4248, 4249, 4250, 4251, 4252, 4253, 11395, 2680, 2681, 2682, 2683, 2684, 2685, 2686, 2687, 2688, 2689, 2690, 2691, 2692, 2693, 2694, 2695, 2696, 2697, 2698, 2699, 2700, 2701, 2702, 2703, 2704, 2705, 2706, 2707, 2708, 2709, 2710, 2711, 2712, 2713, 2714, 2715, 2716, 2717, 2718, 2719, 2720, 2721, 2722, 2723, 2724, 2725, 2726, 2727, 2728, 2729, 2730, 2731, 2732, 2733, 2734, 2735, 1039, 6033, 15925, 18594, 1064, 1065, 1122, 1123, 1589, 1590, 1591, 1593, 1594, 1595, 1596, 1597, 1598, 1599, 1600, 1601, 1602, 1603, 1604, 1605, 1606, 1607, 1608, 1609, 1610, 1611, 1612, 1613, 1614, 1615, 1616, 1617, 1618, 1619, 1620, 1621, 1622, 1623, 1624, 1625, 1626, 1627, 1628, 1629, 1630, 1631, 1632, 1633, 1634, 1635, 1636, 22218, 1032, 1120, 1121, 1266, 1267, 1268, 1269, 1270, 1271, 1272, 1273, 1274, 1275, 1276, 15785 |
| Win-2Kf Files | |
| Win-2Kf Processes | msnnmaneger.exe |
| Win-2Kf Registries | HKEY_LOCAL_MACHINE@...CurrentVersion\\RunServices, HKEY_USERS@...CurrentVersion\\Run |
| Win-2Kf Ports | 1030, 21658, 1041, 12368, 17545, 1043, 1044, 10927, 1027, 1154, 1155, 1156, 1157, 1158, 1159, 1160, 1161, 1162, 1163, 1164, 1165, 1166, 1167, 1168, 1169, 1170, 1171, 1172, 1173, 1174, 1175, 1176, 1177, 1178, 1179, 1180, 1181, 6606, 1052, 6845, 4053, 1048, 11224, 1050, 1049, 15933, 17639, 12493, 1047, 14110, 1040, 8348, 1055 |
| Create Events | |
| Create Files | |
| Create RegKeys | |
| Open RegKeys | |
| Service Starts | |
| Service Deletes | |
| Service Creates | |
| Cluster | |
| Cluster Confidence | |
| Packer ID1 | none |
| Packer ID2 | none |
| Embedded DNS | |
| String Count | |
| String Link | text |
| String MD5 | |
| Timerange | 365 Days |
| Unpack Status | unknown (FAILED : 4 : Unpacking Timed Out) |
| Countries | 28 |
| Unpacked Link | none[4] |
| Callgraph | none:none |
| API Resolution | |
| Comment | none |