eadaf26df948f0fd541f297e2f0bad435aa4bee5c97e4324ad767dacca77e29d | Triage

Submit
Reports

Overview

overview

Static

static

7

trojan-lea...35.exe

windows7-x64

8

trojan-lea...35.exe

windows10-2004-x64

8

trojan-lea...07.exe

windows7-x64

8

trojan-lea...07.exe

windows10-2004-x64

8

trojan-lea...NT.rar

windows7-x64

3

trojan-lea...NT.rar

windows10-2004-x64

3

trojan-lea...1).zip

windows7-x64

1

trojan-lea...1).zip

windows10-2004-x64

1

trojan-lea...ys.exe

windows7-x64

7

trojan-lea...ys.exe

windows10-2004-x64

7

trojan-lea...0S.z01

windows7-x64

3

trojan-lea...0S.z01

windows10-2004-x64

3

trojan-lea...0S.z02

windows7-x64

3

trojan-lea...0S.z02

windows10-2004-x64

3

trojan-lea...0S.z03

windows7-x64

3

trojan-lea...0S.z03

windows10-2004-x64

3

trojan-lea...0S.zip

windows7-x64

1

trojan-lea...0S.zip

windows10-2004-x64

1

trojan-lea...er.exe

windows7-x64

3

trojan-lea...er.exe

windows10-2004-x64

8

trojan-lea...re.zip

windows7-x64

1

trojan-lea...re.zip

windows10-2004-x64

1

trojan-lea...32.exe

windows7-x64

trojan-lea...32.exe

windows10-2004-x64

trojan-lea...32.exe

windows7-x64

trojan-lea...32.exe

windows10-2004-x64

trojan-lea...64.exe

windows7-x64

trojan-lea...64.exe

windows10-2004-x64

trojan-lea...ne.exe

windows7-x64

1

trojan-lea...ne.exe

windows10-2004-x64

1

trojan-lea...64.exe

windows7-x64

1

trojan-lea...64.exe

windows10-2004-x64

1

Resubmissions

09-05-2023 19:22

230509-x3fn4adg58 10

09-05-2023 19:14

230509-xxsrgaff7x 10

09-05-2023 19:14

230509-xxr5yadg42 7

09-05-2023 19:14

230509-xxrt6sff7w 8

09-05-2023 19:14

230509-xxrjeaff7v 8

09-05-2023 19:14

230509-xxqxwadg39 7

09-05-2023 19:14

230509-xxql4sff7t 10

09-05-2023 19:14

230509-xxqbcadg38 7

09-05-2023 19:10

230509-xvl6xadf64 10

Analysis

max time kernel
134s
max time network
167s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
09-05-2023 19:22

Sharing

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

trojan-leaks-main/0.950095298700035.exe

Resource

win7-20230220-en

bootkit evasion persistence

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

trojan-leaks-main/0.950095298700035.exe

Resource

win10v2004-20230220-en

bootkit evasion persistence

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral3

Sample

trojan-leaks-main/0x07.exe

Resource

win7-20230220-en

bootkit discovery exploit persistence

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral4

Sample

trojan-leaks-main/0x07.exe

Resource

win10v2004-20230220-en

bootkit discovery exploit persistence

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral5

Sample

trojan-leaks-main/AIDS_NT.rar

Resource

win7-20230220-en

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral6

Sample

trojan-leaks-main/AIDS_NT.rar

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

trojan-leaks-main/Abantes (1).zip

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

trojan-leaks-main/Abantes (1).zip

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

trojan-leaks-main/AjarSys.exe

Resource

win7-20230220-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral10

Sample

trojan-leaks-main/AjarSys.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral11

Sample

trojan-leaks-main/AnCo250S.z01

Resource

win7-20230220-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

trojan-leaks-main/AnCo250S.z01

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

trojan-leaks-main/AnCo250S.z02

Resource

win7-20230220-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

trojan-leaks-main/AnCo250S.z02

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

trojan-leaks-main/AnCo250S.z03

Resource

win7-20230220-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

trojan-leaks-main/AnCo250S.z03

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

trojan-leaks-main/AnCo250S.zip

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

trojan-leaks-main/AnCo250S.zip

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

trojan-leaks-main/Antivirus_Installer.exe

Resource

win7-20230220-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral20

Sample

trojan-leaks-main/Antivirus_Installer.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral21

Sample

trojan-leaks-main/Aramaware.zip

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

trojan-leaks-main/Aramaware.zip

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

trojan-leaks-main/BUG32.exe

Resource

win7-20230220-en

evasion persistence spyware stealer trojan

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral24

Sample

trojan-leaks-main/BUG32.exe

Resource

win10v2004-20230220-en

evasion persistence ransomware spyware stealer trojan

windows10-2004-x64

18 signatures

150 seconds

Behavioral task

behavioral25

Sample

trojan-leaks-main/BaldiTrojan-x32.exe

Resource

win7-20230220-en

evasion persistence ransomware trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral26

Sample

trojan-leaks-main/BaldiTrojan-x32.exe

Resource

win10v2004-20230220-en

evasion persistence ransomware trojan

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral27

Sample

trojan-leaks-main/BaldiTrojan-x64.exe

Resource

win7-20230220-en

evasion persistence ransomware trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral28

Sample

trojan-leaks-main/BaldiTrojan-x64.exe

Resource

win10v2004-20230220-en

evasion persistence ransomware trojan

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral29

Sample

trojan-leaks-main/Benzene.exe

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

trojan-leaks-main/Benzene.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

trojan-leaks-main/Benzene_x64.exe

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

trojan-leaks-main/Benzene_x64.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

trojan-leaks-main/Aramaware.zip
Size

179KB
MD5

d46345e6a112048ce7fb0cc1be021119
SHA1

86744fb58f947c499650abd9867956ac77dcb333
SHA256

fe4252a3a0c952a7bbce8bd9f20e13fbfae6e694989b117947dacc609505a0b6
SHA512

249c8ab3adc3cecfcd4d569868e13904a014fb035ba8c24785d17769639a2b938ec8d271373f8c9718f1427def37d0615eb4313aed35127c4abad66fea132203
SSDEEP

3072:GLbMP2OQnsmgzcoQicb0US51S5JZLS8GXHpgYyRX8AGTi0kndHJiz0d:GLUJcgz/cb4wvOaYOsAycHd

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\trojan-leaks-main\Aramaware.zip
1⤵
PID:3556

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy