301037e5a2b2da3f692ec0c269be54d88350740c42c4c059929457850f9edcc1 | Triage

Submit
Reports

Overview

overview

7

Static

static

7

Malwarebyt....1.rar

windows10-1703-x64

7

Malwarebyt....1.rar

windows10-2004-x64

3

Malwarebyt....1.rar

ubuntu-18.04-amd64

Malwarebyt...I2.dll

windows10-1703-x64

1

Malwarebyt...I2.dll

windows10-2004-x64

1

Malwarebyt...I2.dll

ubuntu-18.04-amd64

Malwarebyt...et.dll

windows10-1703-x64

1

Malwarebyt...et.dll

windows10-2004-x64

1

Malwarebyt...et.dll

ubuntu-18.04-amd64

Malwarebyt....1.exe

windows10-1703-x64

7

Malwarebyt....1.exe

windows10-2004-x64

7

Malwarebyt....1.exe

ubuntu-18.04-amd64

Malwarebyt...4].txt

windows10-1703-x64

1

Malwarebyt...4].txt

windows10-2004-x64

1

Malwarebyt...4].txt

ubuntu-18.04-amd64

Malwarebyt...d].png

windows10-1703-x64

3

Malwarebyt...d].png

windows10-2004-x64

3

Malwarebyt...d].png

ubuntu-18.04-amd64

Analysis

max time kernel
1551s
max time network
1588s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
09-05-2023 13:05

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Malwarebytes Checker By PJ v1.1.rar

Resource

win10-20230220-en

agilenet persistence

windows10-1703-x64

22 signatures

1800 seconds

Behavioral task

behavioral2

Sample

Malwarebytes Checker By PJ v1.1.rar

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

1800 seconds

Behavioral task

behavioral3

Sample

Malwarebytes Checker By PJ v1.1.rar

Resource

ubuntu1804-amd64-20221111-en

ubuntu-18.04-amd64

0 signatures

1800 seconds

Behavioral task

behavioral4

Sample

Malwarebytes Checker By PJ v1.1/Guna.UI2.dll

Resource

win10-20230220-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral5

Sample

Malwarebytes Checker By PJ v1.1/Guna.UI2.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral6

Sample

Malwarebytes Checker By PJ v1.1/Guna.UI2.dll

Resource

ubuntu1804-amd64-20221125-en

ubuntu-18.04-amd64

0 signatures

1800 seconds

Behavioral task

behavioral7

Sample

Malwarebytes Checker By PJ v1.1/Leaf.xNet.dll

Resource

win10-20230220-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral8

Sample

Malwarebytes Checker By PJ v1.1/Leaf.xNet.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral9

Sample

Malwarebytes Checker By PJ v1.1/Leaf.xNet.dll

Resource

ubuntu1804-amd64-20221111-en

ubuntu-18.04-amd64

0 signatures

1800 seconds

Behavioral task

behavioral10

Sample

Malwarebytes Checker By PJ v1.1/Malwarebytes Checker By PJ v1.1.exe

Resource

win10-20230220-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral11

Sample

Malwarebytes Checker By PJ v1.1/Malwarebytes Checker By PJ v1.1.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

1800 seconds

Behavioral task

behavioral12

Sample

Malwarebytes Checker By PJ v1.1/Malwarebytes Checker By PJ v1.1.exe

Resource

ubuntu1804-amd64-en-20211208

ubuntu-18.04-amd64

0 signatures

1800 seconds

Behavioral task

behavioral13

Sample

Malwarebytes Checker By PJ v1.1/Result/Free[11-24-11_54].txt

Resource

win10-20230220-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral14

Sample

Malwarebytes Checker By PJ v1.1/Result/Free[11-24-11_54].txt

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral15

Sample

Malwarebytes Checker By PJ v1.1/Result/Free[11-24-11_54].txt

Resource

ubuntu1804-amd64-20221111-en

ubuntu-18.04-amd64

0 signatures

1800 seconds

Behavioral task

behavioral16

Sample

Malwarebytes Checker By PJ v1.1/Screenshots/screenshots[psgy0sbf.ppd].png

Resource

win10-20230220-en

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral17

Sample

Malwarebytes Checker By PJ v1.1/Screenshots/screenshots[psgy0sbf.ppd].png

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

1800 seconds

Behavioral task

behavioral18

Sample

Malwarebytes Checker By PJ v1.1/Screenshots/screenshots[psgy0sbf.ppd].png

Resource

ubuntu1804-amd64-20221111-en

ubuntu-18.04-amd64

0 signatures

1800 seconds

Report Analysis Logs

General

Target

Malwarebytes Checker By PJ v1.1/Screenshots/screenshots[psgy0sbf.ppd].png
Size

33KB
MD5

b6de33ccb411b1a866b98116d4016373
SHA1

37d5cab172c09d1603ec56ce48c4c2a2bfbaaad0
SHA256

3e08447e857cbe82c861084aff327e016df5e13829afbde26b7a0a87a3612793
SHA512

f49d8e0f69d3870ff70778fcddb2dd56c66b279293223cdcc4ba1becbe8df5d33e146c0973646d157b30220fee70571484dae0f488a90583cb9c1640e7564571
SSDEEP

768:Y4g4YAFfbUeGchhSSSSSSSSSSSSSSSSSSSSSSSSVudKUKK6uFc38shVD3Zjm4UdF:Y4g4vFfhGshSSSSSSSSSSSSSSSSSSSSY

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Processes

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Malwarebytes Checker By PJ v1.1\Screenshots\screenshots[psgy0sbf.ppd].png"
1⤵
PID:5060

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy