d1933850d05d345bc57356333ebe41446a5e1f7a7b09626a6906202f174852c1

Submit
Reports

Overview

overview

Static

static

15becbaa36...1f.exe

windows7_x64

15becbaa36...1f.exe

windows10_x64

Nuovo ordine .exe

windows7_x64

Nuovo ordine .exe

windows10_x64

189d5314ce...6e2b44

linux_amd64

189d5314ce...6e2b44

linux_mipsel

189d5314ce...6e2b44

linux_mips

18ccb7df2f...2a.exe

windows7_x64

18ccb7df2f...2a.exe

windows10_x64

1b11ae98b8...4f.dll

windows7_x64

1b11ae98b8...4f.dll

windows10_x64

204591aa6d...b8.exe

windows7_x64

204591aa6d...b8.exe

windows10_x64

2c7540c6d0...ff.exe

windows7_x64

2c7540c6d0...ff.exe

windows10_x64

2cb4d62827...d9.dll

windows7_x64

2cb4d62827...d9.dll

windows10_x64

4fd784c26d...49.exe

windows7_x64

4fd784c26d...49.exe

windows10_x64

553dc4c06c...5f.exe

windows7_x64

553dc4c06c...5f.exe

windows10_x64

5afed1cccc...2d.dll

windows7_x64

5afed1cccc...2d.dll

windows10_x64

62742e4698...10.exe

windows7_x64

62742e4698...10.exe

windows10_x64

6707289e11...1b.exe

windows7_x64

6707289e11...1b.exe

windows10_x64

69a43a40f0...e5.exe

windows7_x64

69a43a40f0...e5.exe

windows10_x64

6ca42fe27f...b7.exe

windows7_x64

6ca42fe27f...b7.exe

windows10_x64

6db4bb653b...97.jar

windows7_x64

Analysis

max time kernel
12s
max time network
126s
platform
windows10_x64
resource
win10v20210410
submitted
30-07-2021 15:25

Sharing

Copy URL

Twitter E-mail

Static task

static1

a310logger

Behavioral task

behavioral1

Sample

15becbaa3657b788030771ccb6072e63f14728533aac9f1dcfe2cf89ebdac51f.exe

Resource

win7v20210410

spyware stealer

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

15becbaa3657b788030771ccb6072e63f14728533aac9f1dcfe2cf89ebdac51f.exe

Resource

win10v20210410

spyware stealer

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral3

Sample

Nuovo ordine .exe

Resource

win7v20210408

agenttesla agilenet keylogger persistence spyware stealer trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral4

Sample

Nuovo ordine .exe

Resource

win10v20210410

agenttesla agilenet keylogger persistence spyware stealer trojan

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral5

Sample

189d5314ce773d4497cd2c8aacc99f939bbc32c188d9db8a09e12005ae6e2b44

Resource

ubuntu-amd64

linux_amd64

0 signatures

0 seconds

Behavioral task

behavioral6

Sample

189d5314ce773d4497cd2c8aacc99f939bbc32c188d9db8a09e12005ae6e2b44

Resource

debian9-mipsel

linux_mipsel

0 signatures

0 seconds

Behavioral task

behavioral7

Sample

189d5314ce773d4497cd2c8aacc99f939bbc32c188d9db8a09e12005ae6e2b44

Resource

debian9-mipsbe

linux_mips

0 signatures

0 seconds

Behavioral task

behavioral8

Sample

18ccb7df2f91787a9392bf60d2f7019c86af65584c8a9c4846dee62e3240912a.exe

Resource

win7v20210408

cryptbot spyware stealer

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral9

Sample

18ccb7df2f91787a9392bf60d2f7019c86af65584c8a9c4846dee62e3240912a.exe

Resource

win10v20210410

cryptbot discovery spyware stealer

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral10

Sample

1b11ae98b85bb0645abe36adcd852e6e84b51c6b5c811729f3c19f14f32d4e4f.dll

Resource

win7v20210408

cobaltstrike backdoor trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral11

Sample

1b11ae98b85bb0645abe36adcd852e6e84b51c6b5c811729f3c19f14f32d4e4f.dll

Resource

win10v20210410

cobaltstrike backdoor trojan

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral12

Sample

204591aa6d44da7eef69d7ee3d32a9b4cb8e405a575fc3cbcf2d5e0217879cb8.exe

Resource

win7v20210410

agenttesla keylogger persistence spyware stealer trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral13

Sample

204591aa6d44da7eef69d7ee3d32a9b4cb8e405a575fc3cbcf2d5e0217879cb8.exe

Resource

win10v20210408

agenttesla keylogger persistence spyware stealer trojan

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral14

Sample

2c7540c6d066510b73a1a5c668dc74ec6d0d3f0716bb3adb6cd83afdd07f35ff.exe

Resource

win7v20210410

formbook rat spyware stealer suricata trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral15

Sample

2c7540c6d066510b73a1a5c668dc74ec6d0d3f0716bb3adb6cd83afdd07f35ff.exe

Resource

win10v20210408

formbook rat spyware stealer suricata trojan

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral16

Sample

2cb4d628278053eba42c82d58fb894c230451ffe70d519ff79c5f1cc76f32fd9.dll

Resource

win7v20210410

cobaltstrike backdoor trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral17

Sample

2cb4d628278053eba42c82d58fb894c230451ffe70d519ff79c5f1cc76f32fd9.dll

Resource

win10v20210408

cobaltstrike backdoor trojan

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral18

Sample

4fd784c26daf0b1877d7ffd53710b7312d89c8af0f3e640c1584d238e7e68949.exe

Resource

win7v20210410

agenttesla keylogger spyware stealer trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral19

Sample

4fd784c26daf0b1877d7ffd53710b7312d89c8af0f3e640c1584d238e7e68949.exe

Resource

win10v20210410

agenttesla keylogger spyware stealer trojan

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral20

Sample

553dc4c06cd2a8a13eebb90e6c2a9e7fc09a81858d7233199f0f03d2051bfb5f.exe

Resource

win7v20210408

amadey smokeloader backdoor suricata trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral21

Sample

553dc4c06cd2a8a13eebb90e6c2a9e7fc09a81858d7233199f0f03d2051bfb5f.exe

Resource

win10v20210410

amadey smokeloader backdoor suricata trojan

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral22

Sample

5afed1ccccb12db0f6da9f25c43d10b4e63995881b65526004cd6f6a390c792d.dll

Resource

win7v20210408

bazarloader dropper loader

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral23

Sample

5afed1ccccb12db0f6da9f25c43d10b4e63995881b65526004cd6f6a390c792d.dll

Resource

win10v20210410

bazarloader dropper loader

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral24

Sample

62742e4698b352658390b6b4f5088ddebb673503d5a4151f19c2face25932210.exe

Resource

win7v20210408

lokibot spyware stealer suricata trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral25

Sample

62742e4698b352658390b6b4f5088ddebb673503d5a4151f19c2face25932210.exe

Resource

win10v20210410

lokibot spyware stealer suricata trojan

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral26

Sample

6707289e11e16158e605882cdd2ce2fc9574428dd0114c6d6246146cb6ba7b1b.exe

Resource

win7v20210408

xloader loader rat

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral27

Sample

6707289e11e16158e605882cdd2ce2fc9574428dd0114c6d6246146cb6ba7b1b.exe

Resource

win10v20210410

xloader loader rat

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral28

Sample

69a43a40f02660c2065fe3b76861dab28cc292301c180f1eafbf6c3f7b57afe5.exe

Resource

win7v20210410

agenttesla evasion keylogger spyware stealer trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral29

Sample

69a43a40f02660c2065fe3b76861dab28cc292301c180f1eafbf6c3f7b57afe5.exe

Resource

win10v20210408

agenttesla evasion keylogger spyware stealer trojan

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral30

Sample

6ca42fe27fbffcc87eb0995f36e945d8e62e0c06ea606be6a32382eb557970b7.exe

Resource

win7v20210410

agenttesla evasion keylogger persistence spyware stealer trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral31

Sample

6ca42fe27fbffcc87eb0995f36e945d8e62e0c06ea606be6a32382eb557970b7.exe

Resource

win10v20210410

agenttesla evasion keylogger persistence spyware stealer trojan

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral32

Sample

6db4bb653b7dc11b7cda176c18697d9b2a758b2e1de9b83e3804dce2fbc8ba97.jar

Resource

win7v20210410

windows7_x64

0 signatures

0 seconds

Report Analysis Logs

General

Target

15becbaa3657b788030771ccb6072e63f14728533aac9f1dcfe2cf89ebdac51f.exe
Size

26KB
MD5

facf63137dbdea9cacefa9ec4daa3f00
SHA1

eb63911b6cee65a41d7b5493bf2c30ef60b78800
SHA256

15becbaa3657b788030771ccb6072e63f14728533aac9f1dcfe2cf89ebdac51f
SHA512

68cf68f5e851b2a5f073741c375b9e347bf7e7eed5071106effa2ca83d180a61f54d49206093569f8c2b188a872a2a9c1a17bb1f00b37d293599679b5b8da19b

Score

7^/10

spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials in Files
T1081

Processes

C:\Users\Admin\AppData\Local\Temp\15becbaa3657b788030771ccb6072e63f14728533aac9f1dcfe2cf89ebdac51f.exe
"C:\Users\Admin\AppData\Local\Temp\15becbaa3657b788030771ccb6072e63f14728533aac9f1dcfe2cf89ebdac51f.exe"
1⤵
PID:3968

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

T1081

Discovery

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3968-114-0x0000000002AE0000-0x0000000002AE2000-memory.dmp

Filesize
8KB

Download