Overview

overview

10

Static

static

10

appconsole.exe

windows7_x64

10

appconsole.exe

windows10-2004_x64

10

azorult.exe

windows7_x64

10

azorult.exe

windows10-2004_x64

10

clipper.exe

windows7_x64

1

clipper.exe

windows10-2004_x64

1

jester_stealer.exe

windows7_x64

10

jester_stealer.exe

windows10-2004_x64

10

lokibot.exe

windows7_x64

10

lokibot.exe

windows10-2004_x64

10

pony.exe

windows7_x64

10

pony.exe

windows10-2004_x64

10

raccoon.exe

windows7_x64

10

raccoon.exe

windows10-2004_x64

10

redline.exe

windows7_x64

10

redline.exe

windows10-2004_x64

10

tesla.exe

windows7_x64

10

tesla.exe

windows10-2004_x64

10

vidar.xll

windows7_x64

7

vidar.xll

windows10-2004_x64

10

Analysis

  • max time kernel
    596s
  • max time network
    599s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    28-04-2022 07:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    clipper.exe

  • Size

    91KB

  • MD5

    eec41c39511ee00773a1e8114ac34e70

  • SHA1

    eec241911205fd30ce5a06570d86d4713eccd98d

  • SHA256

    8549581cde22cf897f93d348b2135b46941f68819521d304374202c47d14073f

  • SHA512

    1d85e1d3e3b7cdbb62fce22ba16040e77e99a60df6fbb1dee412ff30a7c54bbee4f71704615c189bb1f64ca90203b5b7153be1187a8cc78716dae78227507897

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\clipper.exe
    "C:\Users\Admin\AppData\Local\Temp\clipper.exe"
    1⤵
      PID:1908
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k appmodel -p -s camsvc
      1⤵
        PID:1548

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1908-130-0x0000000000980000-0x0000000000990000-memory.dmp

        Filesize

        64KB

        Download

      • memory/1908-131-0x0000000005290000-0x00000000052F6000-memory.dmp

        Filesize

        408KB

        Download