390d7472201e8ea9bdc6c7fa2b4ab1f6faca02071f1f997037cc5f52759a9cb6

Submit
Reports

Overview

overview

Static

static

1.bin/1.exe

windows10_x64

2019-09-02...10.exe

windows10_x64

31.exe

windows10_x64

3DMark 11 ...on.exe

windows10_x64

5da0116af4...18.exe

windows10_x64

Archive.zi...3e.exe

windows10_x64

CVE-2018-1...oC.swf

windows10_x64

CVWSHSetup...1].exe

windows10_x64

DiskIntern...en.exe

windows10_x64

ForceOp 2....ce.exe

windows10_x64

HYDRA.exe

windows10_x64

Keygen.exe

windows10_x64

Lonelyscre...ox.exe

windows10_x64

LtHv0O2KZDK4M637.exe

windows10_x64

Magic_File...ja.exe

windows10_x64

OnlineInstaller.exe

windows10_x64

Remouse.Mi...cg.exe

windows10_x64

SecurityTa...up.exe

windows10_x64

Treasure.V...ox.exe

windows10_x64

VyprVPN.exe

windows10_x64

WSHSetup[1].exe

windows10_x64

___ _ ____...��.exe

windows10_x64

___ _ ____...��.exe

windows10_x64

amtemu.v0....ed.exe

windows10_x64

api.exe

windows10_x64

default.exe

windows10_x64

efd97b1038...ea4.js

windows10_x64

good.exe

windows10_x64

infected d...er.exe

windows10_x64

oof.exe

windows10_x64

ou55sg33s_1.exe

windows10_x64

update.exe

windows10_x64

Resubmissions

12-11-2021 18:04

211112-wnzb8aahhm 10

19-11-2020 10:08

201119-rhwlt38jrx 10

18-11-2020 17:26

201118-htd4fq29va 10

Analysis

max time kernel
135s
max time network
319s
platform
windows10_x64
resource
win10-en-20211104
submitted
12-11-2021 18:04

Sharing

Copy URL

Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

1.bin/1.exe

Resource

win10-en-20211014

agenttesla danabot dharma formbook gozi_rm3 guloader raccoon 7765746aa9cb9b6c88bb5a7789286d92b104fd16 86920224 app i0qi w9z agilenet banker botnet coreentity cryptone downloader evasion keylogger packer persistence ransomware rat rezer0 spyware stealer suricata trojan

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

2019-09-02_22-41-10.exe

Resource

win10-en-20211104

smokeloader backdoor trojan

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral3

Sample

31.exe

Resource

win10-en-20211014

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral4

Sample

3DMark 11 Advanced Edition.exe

Resource

win10-en-20211104

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral5

Sample

5da0116af495e6d8af7241da9b8281d918b9ff9a98a3deab4cca1aec1e456c18.exe

Resource

win10-en-20211104

discovery persistence ransomware upx

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral6

Sample

Archive.zip__ccacaxs2tbz2t6ob3e.exe

Resource

win10-en-20211014

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral7

Sample

CVE-2018-15982_PoC.swf

Resource

win10-en-20211104

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral8

Sample

CVWSHSetup[1].bin/WSHSetup[1].exe

Resource

win10-en-20211014

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral9

Sample

DiskInternals_Uneraser_v5_keygen.exe

Resource

win10-en-20211104

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral10

Sample

ForceOp 2.8.7 - By RaiSence.exe

Resource

win10-en-20211014

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral11

Sample

HYDRA.exe

Resource

win10-en-20211104

smokeloader backdoor persistence suricata trojan

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral12

Sample

Keygen.exe

Resource

win10-en-20211104

azorult oski raccoon 32365171a31c4583d6e3b7aad1690e41cefc38eb collection discovery infostealer persistence spyware stealer suricata trojan

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral13

Sample

Lonelyscreen.1.2.9.keygen.by.Paradox/Lonelyscreen.1.2.9.keygen.by.Paradox.exe

Resource

win10-en-20211014

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral14

Sample

LtHv0O2KZDK4M637.exe

Resource

win10-en-20211104

azorult rms xmrig aspackv2 discovery evasion infostealer miner persistence rat trojan upx

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral15

Sample

Magic_File_v3_keygen_by_KeygenNinja.exe

Resource

win10-en-20211014

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral16

Sample

OnlineInstaller.exe

Resource

win10-en-20211104

suricata

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral17

Sample

Remouse.Micro.Micro.v3.5.3.serial.maker.by.aaocg.exe

Resource

win10-en-20211014

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral18

Sample

SecurityTaskManager_Setup.exe

Resource

win10-en-20211104

discovery

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral19

Sample

Treasure.Vault.3D.Screensaver.keygen.by.Paradox.exe

Resource

win10-en-20211104

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral20

Sample

VyprVPN.exe

Resource

win10-en-20211014

persistence spyware stealer

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral21

Sample

WSHSetup[1].exe

Resource

win10-en-20211104

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral22

Sample

___ _ _____ __ ___/전산 및 비전산자료 보존 요청서/전산 및 비전산자료 보존 요.exe

Resource

win10-en-20211014

vidar 276 discovery spyware stealer

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral23

Sample

___ _ _____ __ ___/전산 및 비전산자료 보존 요청서/전산 및 비전산자료 보존 요.exe

Resource

win10-en-20211104

makop persistence ransomware spyware stealer

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral24

Sample

amtemu.v0.9.2.win-painter_edited.exe

Resource

win10-en-20211104

azorult betabot oski raccoon 32365171a31c4583d6e3b7aad1690e41cefc38eb backdoor botnet collection discovery evasion infostealer persistence spyware stealer suricata trojan

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral25

Sample

api.exe

Resource

win10-en-20211014

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral26

Sample

default.exe

Resource

win10-en-20211104

buran persistence ransomware

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral27

Sample

efd97b1038e063779fb32a3ab35adc481679a5c6c8e3f4f69c44987ff08b6ea4.js

Resource

win10-en-20211014

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral28

Sample

good.exe

Resource

win10-en-20211104

phorphiex evasion loader persistence suricata trojan upx worm

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral29

Sample

infected dot net installer.exe

Resource

win10-en-20211014

persistence

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral30

Sample

oof.exe

Resource

win10-en-20211104

betabot backdoor botnet evasion persistence trojan

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral31

Sample

ou55sg33s_1.exe

Resource

win10-en-20211014

betabot backdoor botnet evasion persistence suricata trojan

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral32

Sample

update.exe

Resource

win10-en-20211104

rms xmrig aspackv2 discovery evasion miner persistence rat trojan upx

windows10_x64

0 signatures

0 seconds

Report Analysis Logs

General

Target

CVE-2018-15982_PoC.swf
Size

12KB
MD5

82fe94beb621a4368e76aa4a51998c00
SHA1

b7c79b8f05c3d998e21d01b07b9ba157160581a9
SHA256

c61dd1b37cbf2d72e3670e3c8dff28959683e6d85b8507cda25efe1dffc04bdb
SHA512

055677c2194ff132dc3c50ef900a36a0e4b8e5b85d176047fdefdec049aff4d5e2db1ccffefaf65575b4ca41e81fd24beb3c7cfd2fce6275642638d0cf624d27

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

Processes

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\CVE-2018-15982_PoC.swf
1⤵
PID:4252

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix ATT&CK v6

Replay Monitor

Loading Replay Monitor...

Downloads