Analysis
- max time kernel
190s - max time network
230s - platform
windows10-2004_x64 - resource
win10v2004-20230220-en - resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system - submitted
06/05/2023, 23:59
Behavioral task
behavioral1
Sample
20230419492af928bf7209037aab62c05b82a75aalinaaspxspycerberdarkcometderusbidridexinceptionjratlazagne.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
20230419492af928bf7209037aab62c05b82a75aalinaaspxspycerberdarkcometderusbidridexinceptionjratlazagne.exe
Resource
win10v2004-20230220-en
7 signatures
150 seconds
General
- Target 20230419492af928bf7209037aab62c05b82a75aalinaaspxspycerberdarkcometderusbidridexinceptionjratlazagne.exe
- Size 5.0MB
- Sample230506-31vm5aad49
- SHA256 91caa1fe289cdd8500399b3dcb07a5417223126a8cfd6833ece052acaaeb27f7
- MD5 492af928bf7209037aab62c05b82a75a
- SHA1 c24a6f7736e125620abed012b4545ddeeac0675e
- SHA512 0fbacf27a474203fe2c29e5c62b5c3d86803901a69e5ce538f9c2e09e42a0f7e4faff39eb0ae76a58a53412d49ae31ba86123fb28f28f1912ea54aa372cd48af
- SSDEEP 49152:3Gbf5gfKJu0zf4R+oUN+edPTPR5Y0Pf/deh/1XwshSLGI/trdxblHK:cFlRm01+j0BA
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Matiex Main payload 1 IoCs
resource yara_rule behavioral2/memory/1052-133-0x0000000000F50000-0x00000000014501E0-memory.dmp family_matiex - MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
- Snake Keylogger
Keylogger and Infostealer first seen in November 2020.
- Snake Keylogger payload 1 IoCs
resource yara_rule behavioral2/memory/1052-133-0x0000000000F50000-0x00000000014501E0-memory.dmp family_snakekeylogger - XMRig Miner payload 1 IoCs
resource yara_rule behavioral2/memory/1052-133-0x0000000000F50000-0x00000000014501E0-memory.dmp xmrig