eadaf26df948f0fd541f297e2f0bad435aa4bee5c97e4324ad767dacca77e29d | Triage

Submit
Reports

Overview

overview

Static

static

7

trojan-lea...V).exe

windows7-x64

trojan-lea...V).exe

windows10-2004-x64

trojan-lea...23.exe

windows7-x64

1

trojan-lea...23.exe

windows10-2004-x64

1

trojan-lea...ue.exe

windows7-x64

1

trojan-lea...ue.exe

windows10-2004-x64

1

trojan-lea...v2.exe

windows7-x64

1

trojan-lea...v2.exe

windows10-2004-x64

1

trojan-lea...rg.exe

windows7-x64

1

trojan-lea...rg.exe

windows10-2004-x64

1

trojan-lea...rd.exe

windows7-x64

7

trojan-lea...rd.exe

windows10-2004-x64

7

trojan-lea...ck.exe

windows7-x64

1

trojan-lea...ck.exe

windows10-2004-x64

1

trojan-lea...as.exe

windows7-x64

6

trojan-lea...as.exe

windows10-2004-x64

6

trojan-lea...ic.exe

windows7-x64

6

trojan-lea...ic.exe

windows10-2004-x64

6

trojan-lea...um.exe

windows7-x64

1

trojan-lea...um.exe

windows10-2004-x64

1

trojan-lea...um.exe

windows7-x64

8

trojan-lea...um.exe

windows10-2004-x64

8

trojan-lea...28.bat

windows7-x64

8

trojan-lea...28.bat

windows10-2004-x64

8

trojan-lea...28.exe

windows7-x64

8

trojan-lea...28.exe

windows10-2004-x64

8

trojan-lea...na.exe

windows7-x64

5

trojan-lea...na.exe

windows10-2004-x64

5

trojan-lea...um.exe

windows7-x64

8

trojan-lea...um.exe

windows10-2004-x64

8

trojan-lea...ty.exe

windows7-x64

1

trojan-lea...ty.exe

windows10-2004-x64

1

Resubmissions

09-05-2023 19:22

230509-x3fn4adg58 10

09-05-2023 19:14

230509-xxsrgaff7x 10

09-05-2023 19:14

230509-xxr5yadg42 7

09-05-2023 19:14

230509-xxrt6sff7w 8

09-05-2023 19:14

230509-xxrjeaff7v 8

09-05-2023 19:14

230509-xxqxwadg39 7

09-05-2023 19:14

230509-xxql4sff7t 10

09-05-2023 19:14

230509-xxqbcadg38 7

09-05-2023 19:10

230509-xvl6xadf64 10

Analysis

max time kernel
150s
max time network
194s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
09-05-2023 19:10

Sharing

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

trojan-leaks-main/Halloware (BerkayV).exe

Resource

win7-20230220-en

discovery evasion exploit persistence trojan

windows7-x64

20 signatures

150 seconds

Behavioral task

behavioral2

Sample

trojan-leaks-main/Halloware (BerkayV).exe

Resource

win10v2004-20230220-en

discovery evasion exploit persistence trojan

windows10-2004-x64

20 signatures

150 seconds

Behavioral task

behavioral3

Sample

trojan-leaks-main/HorrorTrojan123.exe

Resource

win7-20230220-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

trojan-leaks-main/HorrorTrojan123.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

trojan-leaks-main/InfiniteBlue.exe

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

trojan-leaks-main/InfiniteBlue.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

trojan-leaks-main/Kirurg v2.exe

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

trojan-leaks-main/Kirurg v2.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

trojan-leaks-main/Kirurg.exe

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

trojan-leaks-main/Kirurg.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

trojan-leaks-main/Kirurg_remsaterd.exe

Resource

win7-20230220-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

trojan-leaks-main/Kirurg_remsaterd.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral13

Sample

trojan-leaks-main/LogonFuck.exe

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

trojan-leaks-main/LogonFuck.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

trojan-leaks-main/Mythlas.exe

Resource

win7-20230220-en

bootkit persistence

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

trojan-leaks-main/Mythlas.exe

Resource

win10v2004-20230220-en

bootkit persistence

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

trojan-leaks-main/Phsyletric.exe

Resource

win7-20230220-en

bootkit persistence

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

trojan-leaks-main/Phsyletric.exe

Resource

win10v2004-20230220-en

bootkit persistence

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

trojan-leaks-main/Potassium.exe

Resource

win7-20230220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

trojan-leaks-main/Potassium.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

trojan-leaks-main/Protactinium.exe

Resource

win7-20230220-en

bootkit evasion persistence

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral22

Sample

trojan-leaks-main/Protactinium.exe

Resource

win10v2004-20230220-en

bootkit evasion persistence

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral23

Sample

trojan-leaks-main/QSO J1228+3128.bat

Resource

win7-20230220-en

bootkit persistence

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral24

Sample

trojan-leaks-main/QSO J1228+3128.bat

Resource

win10v2004-20230221-en

bootkit persistence

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral25

Sample

trojan-leaks-main/QSO J1228+3128.exe

Resource

win7-20230220-en

bootkit persistence

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral26

Sample

trojan-leaks-main/QSO J1228+3128.exe

Resource

win10v2004-20230220-en

bootkit persistence

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral27

Sample

trojan-leaks-main/Rebcoana.exe

Resource

win7-20230220-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral28

Sample

trojan-leaks-main/Rebcoana.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

trojan-leaks-main/Ruthenium/Ruthenium.exe

Resource

win7-20230220-en

bootkit evasion persistence

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral30

Sample

trojan-leaks-main/Ruthenium/Ruthenium.exe

Resource

win10v2004-20230221-en

bootkit evasion persistence

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral31

Sample

trojan-leaks-main/Suffocate-safety.exe

Resource

win7-20230220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

trojan-leaks-main/Suffocate-safety.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

trojan-leaks-main/LogonFuck.exe
Size

9.4MB
MD5

90a964fb43881a2f0a5f0051ac74fc3a
SHA1

7343f1f31347f263c505af1cbff1dab6b60b08bb
SHA256

d50704ad9301dc6a077940bb5d76645850fa6689f45bfceb219e019c313b345e
SHA512

2f6c32f371fcde66359b6b75285d17d521b95570fab881beebd2709f50ac9ec77129041d020934a45848880d79fc3dac441a404afdea116d9ec1b65713320df1
SSDEEP

196608:igxp6Kt8RxG2lMKeCA0AtnpV90HwvV1llI+5Y4bXyUNbARdbvSyT4/Lb4N5O8YsW:0RxG2l2CArzLvV15YCCaARZvv4/LbYOP

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\trojan-leaks-main\LogonFuck.exe
"C:\Users\Admin\AppData\Local\Temp\trojan-leaks-main\LogonFuck.exe"
1⤵
PID:3624

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3624-133-0x0000022700730000-0x00000227010A6000-memory.dmp

Filesize
9.5MB

Download
memory/3624-134-0x0000022702DC0000-0x0000022702DD0000-memory.dmp

Filesize
64KB

Download
memory/3624-135-0x0000022702DC0000-0x0000022702DD0000-memory.dmp

Filesize
64KB

Download
memory/3624-136-0x0000022702DC0000-0x0000022702DD0000-memory.dmp

Filesize
64KB

Download
memory/3624-137-0x0000022702DC0000-0x0000022702DD0000-memory.dmp

Filesize
64KB

Download

© 2018-2024

Terms | Privacy