MalwareViz

PWS-Zbot.dx

2014-06-04

MalwareViz_012d9088558072bc3103ab5da39ddd54 Malware Visualizer cluster1 Internet Traffic cluster2 Created Files Start CryptoLocker.exe VirusTotal VirusTotal Alerts=45 Start->VirusTotal point1 VirusTotal->point1 point2 VirusTotal->point2 184.164.136.134 184.164.136.134 point1->184.164.136.134 212.71.250.4 212.71.250.4 point1->212.71.250.4 igpimwgmxgxnq.net igpimwgmxgxnq.net point1->igpimwgmxgxnq.net vtqqucktlpmhp.biz vtqqucktlpmhp.biz point1->vtqqucktlpmhp.biz npvhpbngokncs.ru npvhpbngokncs.ru point1->npvhpbngokncs.ru orwkjgticicrs.org orwkjgticicrs.org point1->orwkjgticicrs.org ootndrsjfxmbu.co.uk ootndrsjfxmbu.co.uk point1->ootndrsjfxmbu.co.uk zj3hku3gchriygognwe26y52e75ok5ih4wkjs2fxdym6mgv2ef5qfz4s5bz237x.7ayrgykd7t4lhja6olobrlxy4dli3fqpustnqqocg2povidqwdcua-----x.e4c5.sinkdns.org zj3hku3gchriygognwe26y52e75ok5ih4wkjs2fxdym6mgv2ef5qfz4s5bz237x.7ayrgykd7t4lhja6olobrlxy4dli3fqpustnqqocg2povidqwdcua-----x.e4c5.sinkdns.org point1->zj3hku3gchriygognwe26y52e75ok5ih4wkjs2fxdym6mgv2ef5qfz4s5bz237x.7ayrgykd7t4lhja6olobrlxy4dli3fqpustnqqocg2povidqwdcua-----x.e4c5.sinkdns.org pquqwwylsvbql.info pquqwwylsvbql.info point1->pquqwwylsvbql.info pxalcvfbrdpis.com pxalcvfbrdpis.com point1->pxalcvfbrdpis.com qabovbldfbexs.net qabovbldfbexs.net point1->qabovbldfbexs.net qwxrpmkeiqohc.biz qwxrpmkeiqohc.biz point1->qwxrpmkeiqohc.biz ryyujrqgvodws.ru ryyujrqgvodws.ru point1->ryyujrqgvodws.ru lsrdhucfyvnbb.org lsrdhucfyvnbb.org point1->lsrdhucfyvnbb.org ygslpdpsbatqa.co.uk ygslpdpsbatqa.co.uk point1->ygslpdpsbatqa.co.uk zj3hku3gchriygognwe26y52e75ok5ih4wkjs2d4f7llgfmxfpxafz4s5bz237x.7hktzsdz3jowpkdts56e53xddrkv6be4nff5ql7zo2vh5t2gz7xha-----x.e4c5.sinkdns.org zj3hku3gchriygognwe26y52e75ok5ih4wkjs2d4f7llgfmxfpxafz4s5bz237x.7hktzsdz3jowpkdts56e53xddrkv6be4nff5ql7zo2vh5t2gz7xha-----x.e4c5.sinkdns.org point1->zj3hku3gchriygognwe26y52e75ok5ih4wkjs2d4f7llgfmxfpxafz4s5bz237x.7hktzsdz3jowpkdts56e53xddrkv6be4nff5ql7zo2vh5t2gz7xha-----x.e4c5.sinkdns.org noptxlhundjnt.info noptxlhundjnt.info point1->noptxlhundjnt.info bcqcgtuiphpdc.com bcqcgtuiphpdc.com point1->bcqcgtuiphpdc.com nbvhtptacophp.net nbvhtptacophp.net point1->nbvhtptacophp.net bowpcxhnesvwo.biz bowpcxhnesvwo.biz point1->bowpcxhnesvwo.biz pwtxkgypqvltp.ru pwtxkgypqvltp.ru point1->pwtxkgypqvltp.ru dkugsomdsarjx.org dkugsomdsarjx.org point1->dkugsomdsarjx.org tjamkkgljgvqx.co.uk tjamkkgljgvqx.co.uk point1->tjamkkgljgvqx.co.uk zj3hku3gchriygognwe26y52e75ok5ih4wkjs2cadv2yjqoggrcafz4s5bz237x.7emnx7iuomkmhayhcrkoldtwjadb45azvsqaf3j7uxpzvt5xyfe7a-----x.e4c5.sinkdns.org zj3hku3gchriygognwe26y52e75ok5ih4wkjs2cadv2yjqoggrcafz4s5bz237x.7emnx7iuomkmhayhcrkoldtwjadb45azvsqaf3j7uxpzvt5xyfe7a-----x.e4c5.sinkdns.org point1->zj3hku3gchriygognwe26y52e75ok5ih4wkjs2cadv2yjqoggrcafz4s5bz237x.7emnx7iuomkmhayhcrkoldtwjadb45azvsqaf3j7uxpzvt5xyfe7a-----x.e4c5.sinkdns.org ulbpesvqlysko.info ulbpesvqlysko.info point1->ulbpesvqlysko.info vfxdbblbxnrdq.com vfxdbblbxnrdq.com point1->vfxdbblbxnrdq.com whygujbgagowq.net whygujbgagowq.net point1->whygujbgagowq.net vreqwfxgmyxwx.biz vreqwfxgmyxwx.biz point1->vreqwfxgmyxwx.biz wtftqnnloruqo.ru wtftqnnloruqo.ru point1->wtftqnnloruqo.ru xnchnvdvbgtjx.org xnchnvdvbgtjx.org point1->xnchnvdvbgtjx.org ypdkhesbdyqdx.co.uk ypdkhesbdyqdx.co.uk point1->ypdkhesbdyqdx.co.uk zj3hku3gchriygognwe26y52e5dmnwjrcvzuxfmjrdfsshdpn2jafz4s5bz237x.7hq7ya3wskwrdse4sydba5bqd72paiciwpa3lfgljq5xcckt63kxq-----x.e4c5.sinkdns.org zj3hku3gchriygognwe26y52e5dmnwjrcvzuxfmjrdfsshdpn2jafz4s5bz237x.7hq7ya3wskwrdse4sydba5bqd72paiciwpa3lfgljq5xcckt63kxq-----x.e4c5.sinkdns.org point1->zj3hku3gchriygognwe26y52e5dmnwjrcvzuxfmjrdfsshdpn2jafz4s5bz237x.7hq7ya3wskwrdse4sydba5bqd72paiciwpa3lfgljq5xcckt63kxq-----x.e4c5.sinkdns.org oeyuthmwwwymk.info oeyuthmwwwymk.info point1->oeyuthmwwwymk.info cttjjmqsjjfws.com cttjjmqsjjfws.com point1->cttjjmqsjjfws.com pyjsgrymvuqut.net pyjsgrymvuqut.net point1->pyjsgrymvuqut.net doehvwdiihwfs.biz doehvwdiihwfs.biz point1->doehvwdiihwfs.biz sgdwwopriffkr.ru sgdwwopriffkr.ru point1->sgdwwopriffkr.ru gvxlmttnurlua.org gvxlmttnurlua.org point1->gvxlmttnurlua.org tbnujychhdwst.co.uk tbnujychhdwst.co.uk point1->tbnujychhdwst.co.uk zj3hku3gchriygognwe26y52e5dmnwjrcvzuxfkkvv7zxge66auafz4s5bz237x.75uh6u2idno7jw4f6mdmivu2ptquowkvfcharbb4hxcfz7buor2ga-----x.e4c5.sinkdns.org zj3hku3gchriygognwe26y52e5dmnwjrcvzuxfkkvv7zxge66auafz4s5bz237x.75uh6u2idno7jw4f6mdmivu2ptquowkvfcharbb4hxcfz7buor2ga-----x.e4c5.sinkdns.org point1->zj3hku3gchriygognwe26y52e5dmnwjrcvzuxfkkvv7zxge66auafz4s5bz237x.75uh6u2idno7jw4f6mdmivu2ptquowkvfcharbb4hxcfz7buor2ga-----x.e4c5.sinkdns.org hqijyegdtpdds.info hqijyegdtpdds.info point1->hqijyegdtpdds.info sihqlvtopphws.com sihqlvtopphws.com point1->sihqlvtopphws.com tmcrlbaccvxds.net tmcrlbaccvxds.net point1->tmcrlbaccvxds.net tdroxggeonyfc.biz tdroxggeonyfc.biz point1->tdroxggeonyfc.biz uhmpxlmrbtpls.ru uhmpxlmrbtpls.ru point1->uhmpxlmrbtpls.ru wklsodwjbxnuo.org wklsodwjbxnuo.org point1->wklsodwjbxnuo.org xogtoidwneebo.co.uk xogtoidwneebo.co.uk point1->xogtoidwneebo.co.uk zj3hku3gchriygognwe26y52e5dmnwjrcvzuxfidwrwjpyzz4hrafz4s5bz237x.7byvgj46seewhlketfaptmo3lri3g2y55drb35caf3ihjonfy2xwa-----x.e4c5.sinkdns.org zj3hku3gchriygognwe26y52e5dmnwjrcvzuxfidwrwjpyzz4hrafz4s5bz237x.7byvgj46seewhlketfaptmo3lri3g2y55drb35caf3ihjonfy2xwa-----x.e4c5.sinkdns.org point1->zj3hku3gchriygognwe26y52e5dmnwjrcvzuxfidwrwjpyzz4hrafz4s5bz237x.7byvgj46seewhlketfaptmo3lri3g2y55drb35caf3ihjonfy2xwa-----x.e4c5.sinkdns.org xfvqbnjyavfdq.info xfvqbnjyavfdq.info point1->xfvqbnjyavfdq.info yjqrbspmmcvjh.com yjqrbspmmcvjh.com point1->yjqrbspmmcvjh.com diffiiwjxeupx.net diffiiwjxeupx.net point1->diffiiwjxeupx.net qxatxqkitvsvw.biz qxatxqkitvsvw.biz point1->qxatxqkitvsvw.biz fapeasjfuohsx.ru fapeasjfuohsx.ru point1->fapeasjfuohsx.ru spkspbweqgfyg.org spkspbweqgfyg.org point1->spkspbweqgfyg.org hkjhlpaejmbnf.co.uk hkjhlpaejmbnf.co.uk point1->hkjhlpaejmbnf.co.uk zj3hku3gchriygognwe26y52e5dmnwjrcvzuxfmiw2ym3xf5t2mafz4s5bz237x.7eg62pxqo7tt577sw6hyzrxy4qbnlhe3oolkv645haw3jabdjtjyq-----x.e4c5.sinkdns.org zj3hku3gchriygognwe26y52e5dmnwjrcvzuxfmiw2ym3xf5t2mafz4s5bz237x.7eg62pxqo7tt577sw6hyzrxy4qbnlhe3oolkv645haw3jabdjtjyq-----x.e4c5.sinkdns.org point1->zj3hku3gchriygognwe26y52e5dmnwjrcvzuxfmiw2ym3xf5t2mafz4s5bz237x.7eg62pxqo7tt577sw6hyzrxy4qbnlhe3oolkv645haw3jabdjtjyq-----x.e4c5.sinkdns.org uaevbxndfeyte.info uaevbxndfeyte.info point1->uaevbxndfeyte.info jctgdamagwnqx.com jctgdamagwnqx.com point1->jctgdamagwnqx.com wrousiaycolwg.net wrousiaycolwg.net point1->wrousiaycolwg.net hmnbawemqwuvj.biz hmnbawemqwuvj.biz point1->hmnbawemqwuvj.biz iqicaftgmitga.ru iqicaftgmitga.ru point1->iqicaftgmitga.ru jexarhqinhhyj.org jexarhqinhhyj.org point1->jexarhqinhhyj.org kisbrpgcjsgjj.co.uk kisbrpgcjsgjj.co.uk point1->kisbrpgcjsgjj.co.uk zj3hku3gchriygognwe26y52e5dmnwjrcvzuxfn35zttnrvpjkoafz4s5bz237x.75jen3witb5ls2ymogazriellfqf2s7ejeie6sgmzabsfu3chmtla-----x.e4c5.sinkdns.org zj3hku3gchriygognwe26y52e5dmnwjrcvzuxfn35zttnrvpjkoafz4s5bz237x.75jen3witb5ls2ymogazriellfqf2s7ejeie6sgmzabsfu3chmtla-----x.e4c5.sinkdns.org point1->zj3hku3gchriygognwe26y52e5dmnwjrcvzuxfn35zttnrvpjkoafz4s5bz237x.75jen3witb5ls2ymogazriellfqf2s7ejeie6sgmzabsfu3chmtla-----x.e4c5.sinkdns.org lorddehhcfbtf.info lorddehhcfbtf.info point1->lorddehhcfbtf.info msmedmwbxqaev.com msmedmwbxqaev.com point1->msmedmwbxqaev.com ngccuotdypnwx.net ngccuotdypnwx.net point1->ngccuotdypnwx.net okwduwjwubmhx.biz okwduwjwubmhx.biz point1->okwduwjwubmhx.biz cnnrgaluhtypb.ru cnnrgaluhtypb.ru point1->cnnrgaluhtypb.ru pdigvfpqtgfaj.org pdigvfpqtgfaj.org point1->pdigvfpqtgfaj.org dixpsqqxdetod.co.uk dixpsqqxdetod.co.uk point1->dixpsqqxdetod.co.uk zj3hku3gchriygognwe26y52e5dmnwjrcvzuxfley537mvg4vauqfz4s5bz237x.7l3dp5gsopnhzmjz35n254dypuclftf6whmvq4ukqsembjgu6yvyq-----x.e4c5.sinkdns.org zj3hku3gchriygognwe26y52e5dmnwjrcvzuxfley537mvg4vauqfz4s5bz237x.7l3dp5gsopnhzmjz35n254dypuclftf6whmvq4ukqsembjgu6yvyq-----x.e4c5.sinkdns.org point1->zj3hku3gchriygognwe26y52e5dmnwjrcvzuxfley537mvg4vauqfz4s5bz237x.7l3dp5gsopnhzmjz35n254dypuclftf6whmvq4ukqsembjgu6yvyq-----x.e4c5.sinkdns.org CryptoLocker.exe CryptoLocker.exe point2->CryptoLocker.exe igpimwgmxgxnq.net-> vtqqucktlpmhp.biz-> npvhpbngokncs.ru-> orwkjgticicrs.org-> ootndrsjfxmbu.co.uk->212.71.250.4 zj3hku3gchriygognwe26y52e75ok5ih4wkjs2fxdym6mgv2ef5qfz4s5bz237x.7ayrgykd7t4lhja6olobrlxy4dli3fqpustnqqocg2povidqwdcua-----x.e4c5.sinkdns.org->212.71.250.4 pquqwwylsvbql.info-> pxalcvfbrdpis.com-> qabovbldfbexs.net-> qwxrpmkeiqohc.biz-> ryyujrqgvodws.ru-> lsrdhucfyvnbb.org-> ygslpdpsbatqa.co.uk->212.71.250.4 zj3hku3gchriygognwe26y52e75ok5ih4wkjs2d4f7llgfmxfpxafz4s5bz237x.7hktzsdz3jowpkdts56e53xddrkv6be4nff5ql7zo2vh5t2gz7xha-----x.e4c5.sinkdns.org->212.71.250.4 noptxlhundjnt.info-> bcqcgtuiphpdc.com-> nbvhtptacophp.net-> bowpcxhnesvwo.biz-> pwtxkgypqvltp.ru-> dkugsomdsarjx.org-> tjamkkgljgvqx.co.uk->212.71.250.4 zj3hku3gchriygognwe26y52e75ok5ih4wkjs2cadv2yjqoggrcafz4s5bz237x.7emnx7iuomkmhayhcrkoldtwjadb45azvsqaf3j7uxpzvt5xyfe7a-----x.e4c5.sinkdns.org->212.71.250.4 ulbpesvqlysko.info-> vfxdbblbxnrdq.com-> whygujbgagowq.net-> vreqwfxgmyxwx.biz-> wtftqnnloruqo.ru-> xnchnvdvbgtjx.org-> ypdkhesbdyqdx.co.uk->212.71.250.4 zj3hku3gchriygognwe26y52e5dmnwjrcvzuxfmjrdfsshdpn2jafz4s5bz237x.7hq7ya3wskwrdse4sydba5bqd72paiciwpa3lfgljq5xcckt63kxq-----x.e4c5.sinkdns.org->212.71.250.4 oeyuthmwwwymk.info-> cttjjmqsjjfws.com-> pyjsgrymvuqut.net-> doehvwdiihwfs.biz-> sgdwwopriffkr.ru-> gvxlmttnurlua.org-> tbnujychhdwst.co.uk->212.71.250.4 zj3hku3gchriygognwe26y52e5dmnwjrcvzuxfkkvv7zxge66auafz4s5bz237x.75uh6u2idno7jw4f6mdmivu2ptquowkvfcharbb4hxcfz7buor2ga-----x.e4c5.sinkdns.org->212.71.250.4 hqijyegdtpdds.info-> sihqlvtopphws.com-> tmcrlbaccvxds.net-> tdroxggeonyfc.biz-> uhmpxlmrbtpls.ru-> wklsodwjbxnuo.org-> xogtoidwneebo.co.uk->212.71.250.4 zj3hku3gchriygognwe26y52e5dmnwjrcvzuxfidwrwjpyzz4hrafz4s5bz237x.7byvgj46seewhlketfaptmo3lri3g2y55drb35caf3ihjonfy2xwa-----x.e4c5.sinkdns.org->212.71.250.4 xfvqbnjyavfdq.info-> yjqrbspmmcvjh.com-> diffiiwjxeupx.net-> qxatxqkitvsvw.biz-> fapeasjfuohsx.ru-> spkspbweqgfyg.org-> hkjhlpaejmbnf.co.uk->212.71.250.4 zj3hku3gchriygognwe26y52e5dmnwjrcvzuxfmiw2ym3xf5t2mafz4s5bz237x.7eg62pxqo7tt577sw6hyzrxy4qbnlhe3oolkv645haw3jabdjtjyq-----x.e4c5.sinkdns.org->212.71.250.4 uaevbxndfeyte.info-> jctgdamagwnqx.com-> wrousiaycolwg.net-> hmnbawemqwuvj.biz-> iqicaftgmitga.ru-> jexarhqinhhyj.org-> kisbrpgcjsgjj.co.uk->212.71.250.4 zj3hku3gchriygognwe26y52e5dmnwjrcvzuxfn35zttnrvpjkoafz4s5bz237x.75jen3witb5ls2ymogazriellfqf2s7ejeie6sgmzabsfu3chmtla-----x.e4c5.sinkdns.org->212.71.250.4 lorddehhcfbtf.info-> msmedmwbxqaev.com-> ngccuotdypnwx.net-> okwduwjwubmhx.biz-> cnnrgaluhtypb.ru-> pdigvfpqtgfaj.org-> dixpsqqxdetod.co.uk->212.71.250.4 zj3hku3gchriygognwe26y52e5dmnwjrcvzuxfley537mvg4vauqfz4s5bz237x.7l3dp5gsopnhzmjz35n254dypuclftf6whmvq4ukqsembjgu6yvyq-----x.e4c5.sinkdns.org->212.71.250.4

File Details

File Name CryptoLocker.exe
File Size 351744 bytes
MD5 012d9088558072bc3103ab5da39ddd54
SHA1 a6eee7369eb008fe48789ad4e8d2d8dcba4f23d9
SHA256 0dd7f3dffe8c6e69df6137cb413ad25c474d73a86f1d46d52846990aa66e6f43