7a5d773aa6ef4cf71a18234e4037788e635a3f8aeefef0e9898d69453bc53025

Submit
Reports

Overview

overview

Static

static

2020-01-14...75.zip

windows7-x64

2020-01-14...75.zip

windows10-2004-x64

client/202...st.exe

windows7-x64

client/202...st.exe

windows10-2004-x64

client/202...-2.doc

windows7-x64

client/202...-2.doc

windows10-2004-x64

client/202...on.exe

windows7-x64

client/202...on.exe

windows10-2004-x64

client/202...ro.exe

windows7-x64

client/202...ro.exe

windows10-2004-x64

client/gpu...3C.exe

windows7-x64

client/gpu...3C.exe

windows10-2004-x64

client/gpu...tDll64

windows7-x64

client/gpu...tDll64

windows10-2004-x64

client/gpu...tDll64

windows7-x64

client/gpu...tDll64

windows10-2004-x64

client/gpu...s/dinj

windows7-x64

client/gpu...s/dinj

windows10-2004-x64

client/gpu.../dpost

windows7-x64

client/gpu.../dpost

windows10-2004-x64

client/gpu...s/sinj

windows7-x64

client/gpu...s/sinj

windows10-2004-x64

client/gpu...eDll64

windows7-x64

client/gpu...eDll64

windows10-2004-x64

client/gpu...mDll64

windows7-x64

client/gpu...mDll64

windows10-2004-x64

client/gpu...kDll64

windows7-x64

client/gpu...kDll64

windows10-2004-x64

client/gpu.../dpost

windows7-x64

client/gpu.../dpost

windows10-2004-x64

client/gpu...grab64

windows7-x64

client/gpu...grab64

windows10-2004-x64

Resubmissions

28-12-2022 03:05

221228-dk91fahc93 10

20-12-2022 19:37

221220-ycbswsea2x 10

Analysis

max time kernel
90s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
28-12-2022 03:05

Sharing

Copy URL

Twitter E-mail

Static task

static1

macro

1 signatures

Behavioral task

behavioral1

Sample

2020-01-14-malware-and-artifacts-from-Emotet-epoch-2-infection-with-Trickbot-gtag-mor75.zip

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

2020-01-14-malware-and-artifacts-from-Emotet-epoch-2-infection-with-Trickbot-gtag-mor75.zip

Resource

win10v2004-20221111-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

client/2020-01-14-Trickbot-gtag-mor75-retrieved-by-Emotet-infected-host.exe

Resource

win7-20221111-en

trickbot banker trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral4

Sample

client/2020-01-14-Trickbot-gtag-mor75-retrieved-by-Emotet-infected-host.exe

Resource

win10v2004-20221111-en

trickbot banker trojan

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral5

Sample

client/2020-01-14-Word-doc-with-macro-for-Emotet-epoch-2.doc

Resource

win7-20220812-en

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral6

Sample

client/2020-01-14-Word-doc-with-macro-for-Emotet-epoch-2.doc

Resource

win10v2004-20220901-en

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral7

Sample

client/2020-01-14-follow-up-Emotet-binary-after-initial-infection.exe

Resource

win7-20220812-en

emotet epoch2 banker trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral8

Sample

client/2020-01-14-follow-up-Emotet-binary-after-initial-infection.exe

Resource

win10v2004-20221111-en

emotet epoch2 banker trojan

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral9

Sample

client/2020-01-14-initial-Emotet-binary-retrieved-by-Word-macro.exe

Resource

win7-20220812-en

emotet epoch2 banker trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral10

Sample

client/2020-01-14-initial-Emotet-binary-retrieved-by-Word-macro.exe

Resource

win10v2004-20221111-en

emotet epoch2 banker trojan

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral11

Sample

client/gpuhealth/GƆCCKX ↀↂ;;;;;;;;;;;;;;;;;;;ж;;;;;;;;;;;яЫФЦйвЫФв003423C.exe

Resource

win7-20221111-en

trickbot banker trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral12

Sample

client/gpuhealth/GƆCCKX ↀↂ;;;;;;;;;;;;;;;;;;;ж;;;;;;;;;;;яЫФЦйвЫФв003423C.exe

Resource

win10v2004-20220812-en

trickbot banker trojan

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral13

Sample

client/gpuhealth/data/importDll64

Resource

win7-20220901-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

client/gpuhealth/data/importDll64

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

client/gpuhealth/data/injectDll64

Resource

win7-20221111-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

client/gpuhealth/data/injectDll64

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

client/gpuhealth/data/injectDll64_configs/dinj

Resource

win7-20221111-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

client/gpuhealth/data/injectDll64_configs/dinj

Resource

win10v2004-20221111-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

client/gpuhealth/data/injectDll64_configs/dpost

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

client/gpuhealth/data/injectDll64_configs/dpost

Resource

win10v2004-20220901-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

client/gpuhealth/data/injectDll64_configs/sinj

Resource

win7-20221111-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

client/gpuhealth/data/injectDll64_configs/sinj

Resource

win10v2004-20221111-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

client/gpuhealth/data/mshareDll64

Resource

win7-20221111-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

client/gpuhealth/data/mshareDll64

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

client/gpuhealth/data/mwormDll64

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

client/gpuhealth/data/mwormDll64

Resource

win10v2004-20220901-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

client/gpuhealth/data/networkDll64

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

client/gpuhealth/data/networkDll64

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

client/gpuhealth/data/networkDll64_configs/dpost

Resource

win7-20221111-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

client/gpuhealth/data/networkDll64_configs/dpost

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

client/gpuhealth/data/pwgrab64

Resource

win7-20221111-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

client/gpuhealth/data/pwgrab64

Resource

win10v2004-20220901-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

client/gpuhealth/data/mwormDll64
Size

26KB
MD5

4500d46f1b8e76002f09d8ffc1dea3e4
SHA1

59e505f7b341e3928e6c878b363d2d97e76c13cb
SHA256

04f67e3f4b92322b1d7f2d1f96e5d35741133a74fae905162195639e6e1a6eeb
SHA512

0f178966bf50cd20b2c9951aab2a67bc573ca1fc8e052994e8df5eb1f7b646703ca04799f35d577011ad42325b2b3e03f19ed60cd5128276e8b70829d9551b22
SSDEEP

384:bqpTttBn7p4ICg7/Krgg9amGj29k/LdN7SvpP+e52XYehKRcPJdUF2ofaB:mpTkNgGrVNKJAr50MRchq0ofw

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\client\gpuhealth\data\mwormDll64
1⤵
PID:3392

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads