payload[.]bin[.]exe | Triage

Submit
Reports

Overview

overview

Static

static

1

payload.bin.exe

windows7-x64

payload.bin.exe

windows10-2004-x64

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

payload.bin.exe

Resource

win7-20230220-en

dharma persistence ransomware spyware stealer

windows7-x64

16 signatures

150 seconds

Behavioral task

behavioral2

Sample

payload.bin.exe

Resource

win10v2004-20230221-en

dharma persistence ransomware spyware stealer

windows10-2004-x64

13 signatures

150 seconds

General

Target

payload.bin.exe
Size

92KB
MD5

a0dd1dfbac4b2aaed94b2065a9c9f30c
SHA1

b797000407eb333dc80777dd088204179b62fb5c
SHA256

0cbb472b555d4cab454948ba900675db48b120afaedf246a14d87d970b233a43
SHA512

13949bcbd0a6d7efee4e466f9f8818bd4b0643f8bc1116cd302b9b72808dbe018e30aa36d1edd4474ebf590d5d29438247f391988b6b2b5a5188d79a47ae1229
SSDEEP

1536:mBwl+KXpsqN5vlwWYyhY9S4AQp27xRgjGri0wEeKirLWP6d7cH:Qw+asqN5aW/hL+pwl2RsivPd

Score

1^/10

Malware Config

Signatures

Files

payload.bin.exe
.exe windows x86

f86dec4a80961955a89e7ed62046cc0e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
WaitForSingleObject
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetLastError
EnterCriticalSection
ReleaseMutex
CloseHandle

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

© 2018-2024

Terms | Privacy