Classification: Malicious
http://billyjons.net/ is a malicious file sample. Reported by Hybrid-Analysis, last seen 2020-01-07.
Detection summary
- 0 antivirus detections (1% detection ratio)
- 0 IDS alerts
- 3 processes observed
- 2 contacted hosts
- 1 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Malware site |
Hybrid-Analysis |
2020-01-07 17:30:14 |
2020-01-07 17:30:14 |
|
|
Sample information
- Filenames
- http://billyjons.net/
- MD5
f601dc80c6fb18806e7890e8873ebbe5- SHA-1
8a701e45cec2284248715c10e30b06acd2ea2993- SHA-256
cd7fa01bdb1c976db9064be03ddb77d92cbc37f351b61905a0e14e36af71d777- First indexed
- 2020-01-07 17:30:14
- Last updated
- 2020-01-07 17:30:14
Process list
| Name | Command line |
|---|
| rundll32.exe | "%WINDIR%\System32\ieframe.dll",OpenURL C:\cd7fa01bdb1c976db9064be03ddb77d92cbc37f351b61905a0e14e36af71d777.url |
| iexplore.exe | http://billyjons.net/ |
| iexplore.exe | SCODEF:2056 CREDAT:275457 /prefetch:2 |