Analysis date (UTC): 5 September 2024, 19:03Analysis environment: Windows 10 Pro, build 19045, x64

bad

MD5:59B7B8D29252A9128536FBD08D24375F

SHA1:7221B9125608A54F9DD706166F936C16EE23164A

SHA256:B7AEC5F73D2A6BBD8CD920EDB4760E2EDADC98C3A45BF4FA994D47CA9CBD02F6

Analysis result

Threat level:Malicious activity

Tags:

warmcookiebackdoorbadspace

PID	Process	Class	Message
2128	rundll32.exe	A Network Trojan was detected	ET MALWARE BadSpace/WarmCookie CnC Activity (GET)
2128	rundll32.exe	Potentially Bad Traffic	ET INFO Unconfigured nginx Access
2128	rundll32.exe	A Network Trojan was detected	ET MALWARE BadSpace/WarmCookie CnC Activity (GET)
2128	rundll32.exe	Potentially Bad Traffic	ET INFO Unconfigured nginx Access
2128	rundll32.exe	A Network Trojan was detected	ET MALWARE BadSpace/WarmCookie CnC Activity (GET)
2128	rundll32.exe	Potentially Bad Traffic	ET INFO Unconfigured nginx Access
2128	rundll32.exe	A Network Trojan was detected	ET MALWARE BadSpace/WarmCookie CnC Activity (GET)
2128	rundll32.exe	Potentially Bad Traffic	ET INFO Unconfigured nginx Access
2128	rundll32.exe	A Network Trojan was detected	ET MALWARE BadSpace/WarmCookie CnC Activity (GET)
2128	rundll32.exe	Potentially Bad Traffic	ET INFO Unconfigured nginx Access

Rows per page