NovCon Minotaur Analysis System

Enter the MD5, SHA1 or SHA256 hash to search for:

Summary

Sections

Summary
FileType Stats
Identity Stats
Static Analysis
Screenshots
Origin Stats
Primary Domain Stats
Network Traffic
HTTP Requests
DNS Requests
Discussion

MD5:	2394ee41a371d9d2242b7a4bfc68b1d7
SHA1:	4078b2181487bdf7cd994c4af7f362978eee437d
SHA256:	c63144bbfc89b6a3669366765430f58d6e37eb6b00b51db4ccf12ccee44a6efc
Date Submitted:	6/23/2012 11:31:38 PM
Malicious:	True
Executable:	False

Minotaur Sample ID

163942

FileType Statistics

FileType:

 83.3% (.RAR) RAR Archive (5000/1)
 16.6% (.RBT) REALbasic Project (1002/3)

Identity Statistics

Vendors Declaring Malicious:
TotalVendors:

VirusTotal Report:
http://www.virustotal.com/file/c63144bbfc89b6a3669366765430f58d6e37eb6b00b51db4ccf12ccee44a6efc/analysis/

Malware Family Detections:

Trojan/Win32.HDC
ADSPY/Craagle.18
AdWare/Craagle.18.gen
Win32:Craagle [Adw]
Generic.GMX
Adware.Craagle-1
Application.Win32.Adware.Craagle
Tool.HackDiy
Win32.Hacktool
W32/Adware.DKE
Win32:Craagle
not-a-virus:AdWare.Win32.Craagle
AdWare/Craagle.e
not-a-virus:AdWare.Win32.Craagle.18
Generic PUP.x
HackTool:Win32/CrackSearch.A
Win32/Adware.Craagle
W32/Craagle.BP
Hack.Win32.CrackSearch.a
Adware/Craagle.18
TROJ_GEN.R4FH1IB
Adware.Agent!rYi290LZwyQ
Riskware.AdWare.Win32.Craagle!IK
Adware

Static Analysis Data

Origin Statistics

URL ID	Date Added	URL	IP	Source
166344	6/23/2012 11:31:38 PM	http://www.indirline.com/downloads/craagle.rar	indirline.com.	Clean-MX

Primary Domain Information

Level 3 (control)	188.124.15.125	Control
Google	188.124.15.125	ALLOWED
OpenDNS	188.124.15.125	ALLOWED
Norton	188.124.15.125	ALLOWED
Comodo	188.124.15.125	ALLOWED