c78468e0c0080700cb378ddb67268ebaa0d5a036f192a70e604a5076682474f9

Submit
Reports

Overview

overview

Static

static

f5068e95e1...T1.exe

windows10-2004_x64

f5068e95e1...dH.exe

windows10-2004_x64

f5068e95e1...ty.ps1

windows10-2004_x64

f5068e95e1...st.exe

windows10-2004_x64

f5068e95e1...cb.exe

windows10-2004_x64

f5068e95e1...ry.ps1

windows10-2004_x64

f5068e95e1...ue.ps1

windows10-2004_x64

f5068e95e1...me.ps1

windows10-2004_x64

f5068e95e1...ry.ps1

windows10-2004_x64

f5068e95e1...ue.ps1

windows10-2004_x64

f5068e95e1...ry.ps1

windows10-2004_x64

f5068e95e1...me.ps1

windows10-2004_x64

f5068e95e1...ue.ps1

windows10-2004_x64

f5068e95e1...UI.exe

windows10-2004_x64

f5068e95e1...nl.ps1

windows10-2004_x64

f5068e95e1...wp.exe

windows10-2004_x64

f5068e95e1...zg.exe

windows10-2004_x64

f5068e95e1...st.exe

windows10-2004_x64

f5068e95e1...tb.exe

windows10-2004_x64

f5068e95e1...ar.exe

windows10-2004_x64

Analysis

max time kernel
90s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
17-06-2022 21:38

Sharing

Copy URL

Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

f5068e95e11b906cf33949376159ed87e03eb29e774029e84b8151c76d69ccf4/Downloaded_files/A8O1E003-R4Q1-P8Q3-X4A6-Y2R2V7W0G8T1.exe

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

f5068e95e11b906cf33949376159ed87e03eb29e774029e84b8151c76d69ccf4/Downloaded_files/BIozhqydH.exe

Resource

win10v2004-20220414-en

xpertrat evasion persistence rat trojan

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral3

Sample

f5068e95e11b906cf33949376159ed87e03eb29e774029e84b8151c76d69ccf4/Downloaded_files/CL_Utility.ps1

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral4

Sample

f5068e95e11b906cf33949376159ed87e03eb29e774029e84b8151c76d69ccf4/Downloaded_files/DismHost.exe

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral5

Sample

f5068e95e11b906cf33949376159ed87e03eb29e774029e84b8151c76d69ccf4/Downloaded_files/IoJbxlqcb.exe

Resource

win10v2004-20220414-en

evasion trojan

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral6

Sample

f5068e95e11b906cf33949376159ed87e03eb29e774029e84b8151c76d69ccf4/Downloaded_files/RS_AdminDiagnosticHistory.ps1

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral7

Sample

f5068e95e11b906cf33949376159ed87e03eb29e774029e84b8151c76d69ccf4/Downloaded_files/RS_MachineWERQueue.ps1

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral8

Sample

f5068e95e11b906cf33949376159ed87e03eb29e774029e84b8151c76d69ccf4/Downloaded_files/RS_SyncSystemTime.ps1

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral9

Sample

f5068e95e11b906cf33949376159ed87e03eb29e774029e84b8151c76d69ccf4/Downloaded_files/RS_UserDiagnosticHistory.ps1

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral10

Sample

f5068e95e11b906cf33949376159ed87e03eb29e774029e84b8151c76d69ccf4/Downloaded_files/RS_UserWERQueue.ps1

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral11

Sample

f5068e95e11b906cf33949376159ed87e03eb29e774029e84b8151c76d69ccf4/Downloaded_files/TS_DiagnosticHistory.ps1

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral12

Sample

f5068e95e11b906cf33949376159ed87e03eb29e774029e84b8151c76d69ccf4/Downloaded_files/TS_InaccurateSystemTime.ps1

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral13

Sample

f5068e95e11b906cf33949376159ed87e03eb29e774029e84b8151c76d69ccf4/Downloaded_files/TS_WERQueue.ps1

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral14

Sample

f5068e95e11b906cf33949376159ed87e03eb29e774029e84b8151c76d69ccf4/Downloaded_files/Video.UI.exe

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral15

Sample

f5068e95e11b906cf33949376159ed87e03eb29e774029e84b8151c76d69ccf4/Downloaded_files/__PSScriptPolicyTest_eg4nc2yx.0nl.ps1

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral16

Sample

f5068e95e11b906cf33949376159ed87e03eb29e774029e84b8151c76d69ccf4/Downloaded_files/aspnet_wp.exe

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral17

Sample

f5068e95e11b906cf33949376159ed87e03eb29e774029e84b8151c76d69ccf4/Downloaded_files/esfctKdzg.exe

Resource

win10v2004-20220414-en

evasion trojan

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral18

Sample

f5068e95e11b906cf33949376159ed87e03eb29e774029e84b8151c76d69ccf4/Downloaded_files/smsvchost.exe

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral19

Sample

f5068e95e11b906cf33949376159ed87e03eb29e774029e84b8151c76d69ccf4/Downloaded_files/w..orIFtb.exe

Resource

win10v2004-20220414-en

xpertrat evasion persistence rat trojan

windows10-2004_x64

0 signatures

0 seconds

Behavioral task

behavioral20

Sample

f5068e95e11b906cf33949376159ed87e03eb29e774029e84b8151c76d69ccf4/xpertwar.exe

Resource

win10v2004-20220414-en

warzonerat infostealer rat

windows10-2004_x64

0 signatures

0 seconds

Report Analysis Logs

General

Target

f5068e95e11b906cf33949376159ed87e03eb29e774029e84b8151c76d69ccf4/Downloaded_files/Video.UI.exe
Size

24.9MB
MD5

6d09992fc7789db137d3650307d0adbc
SHA1

af1376c27f5e7b925418bbf75ba2c3079c943518
SHA256

f27ac9910b9a781b612029e64e8bf63a6dc8b4336ad66d6a7260bf058b493781
SHA512

73ee9508a350862c6ec79d672dca47b0353c50dd3d115eef451cc98377be1ce3cf1845e1999c8400c6674f59b10f7793a64429271590d8e4c7ea879a46fef3d2

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\f5068e95e11b906cf33949376159ed87e03eb29e774029e84b8151c76d69ccf4\Downloaded_files\Video.UI.exe
"C:\Users\Admin\AppData\Local\Temp\f5068e95e11b906cf33949376159ed87e03eb29e774029e84b8151c76d69ccf4\Downloaded_files\Video.UI.exe"
1⤵
PID:3048

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads