Xcitium Cloud Verdict

File Name: LixoDestructive.exe

File Type: PE32 executable (GUI) Intel 80386, for MS Windows

SHA1: 2add11e25d07dc9e154ae1be916c869804047146

MD5: 7d538a430eb4e0bfd7671b921a8b76a1

Download Kill Chain Report

Contacted IPs

Network Port Distribution

Name	IP	Country	ASN	ASN Name	Trigger Process Type
	8.8.4.4	United States	15169	Level 3 Parent, LLC	Malware Process
	142.251.41.14	United States	15169	Google LLC	Malware Process
	142.251.40.174	United States	15169	Google LLC	Malware Process
	142.251.40.142	United States	15169	Google LLC	Malware Process
	142.251.40.110	United States	15169	Google LLC	Malware Process
	142.251.35.174	United States	15169	Google LLC	Malware Process
	142.251.32.110	United States	15169	Google LLC	Malware Process
	142.250.81.238	United States	15169	Google LLC	Malware Process
	142.250.80.78	United States	15169	Google LLC	Malware Process
	142.250.80.46	United States	15169	Google LLC	Malware Process
	142.250.80.14	United States	15169	Google LLC	Malware Process
	142.250.80.110	United States	15169	Google LLC	Malware Process
	142.250.65.238	United States	15169	Google LLC	Malware Process
	142.250.65.206	United States	15169	Google LLC	Malware Process
	142.250.65.174	United States	15169	Google LLC	Malware Process
	142.250.64.78	United States	15169	Google LLC	Malware Process
www.youtube.com	142.250.72.110	United States	15169	Google LLC	Malware Process

HTTP Packets

Host	Port	Method	Version	User Agent	Count	Call Time During Execution(Sec)

DNS Queries/Answers

Request	Type
www.youtube.com	A
Answers - 142.250.65.238 (A) - 142.251.40.110 (A) - 142.251.32.110 (A) - 142.250.80.14 (A) - 142.251.35.174 (A) - 142.250.65.174 (A) - youtube-ui.l.google.com (CNAME) - 142.250.72.110 (A) - 142.251.41.14 (A) - 142.250.65.206 (A) - 142.250.64.78 (A) - 142.250.80.78 (A) - 142.251.40.142 (A) - 142.251.40.174 (A) - 142.250.80.110 (A) - 142.250.80.46 (A) - 142.250.81.238 (A)

TCP Packets

Call Time During Execution(sec)	Source IP	Dest IP	Dest Port

UDP Packets

Call Time During Execution(sec)	Source IP	Dest IP	Dest Port
-1.74859285355	Sandbox	192.168.56.255	137
-0.490409851074	Sandbox	224.0.0.252	5355
3.53992319107	Sandbox	239.255.255.250	3702
42.7684600353	Sandbox	8.8.4.4	53

Loading...