78a28b25b330513649439305a5d9293cb07fb796ad6521ef31f39a5453a549d8

Submit
Reports

Overview

overview

Static

static

gm.rar

windows7-x64

gm.rar

windows10-2004-x64

17ffd90d20...e1.dll

windows7-x64

17ffd90d20...e1.dll

windows10-2004-x64

1caf510598...e1.exe

windows7-x64

1caf510598...e1.exe

windows10-2004-x64

1d88c47417...67.exe

windows7-x64

1d88c47417...67.exe

windows10-2004-x64

1ecb597741...af.exe

windows7-x64

1ecb597741...af.exe

windows10-2004-x64

2a5fe7d49f...b5.exe

windows7-x64

2a5fe7d49f...b5.exe

windows10-2004-x64

2c1aa4fa14...dc.exe

windows7-x64

2c1aa4fa14...dc.exe

windows10-2004-x64

34d62f47e1...6e.exe

windows7-x64

34d62f47e1...6e.exe

windows10-2004-x64

38f1b8c868...05.exe

windows7-x64

38f1b8c868...05.exe

windows10-2004-x64

40d8e3dae5...04.exe

windows7-x64

40d8e3dae5...04.exe

windows10-2004-x64

410ee08c8a...59.exe

windows7-x64

410ee08c8a...59.exe

windows10-2004-x64

423b7b37b1...42.exe

windows7-x64

423b7b37b1...42.exe

windows10-2004-x64

4315b6e87c...0b.exe

windows7-x64

4315b6e87c...0b.exe

windows10-2004-x64

453c6fe9e1...91.exe

windows7-x64

453c6fe9e1...91.exe

windows10-2004-x64

4a841216cb...37.exe

windows7-x64

4a841216cb...37.exe

windows10-2004-x64

4e180437ef...a9.exe

windows7-x64

4e180437ef...a9.exe

windows10-2004-x64

Resubmissions

07-09-2023 14:45

230907-r45fysaf5s 10

07-09-2023 14:12

230907-rjbyxaad5s 10

Analysis

max time kernel
140s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20230831-en
resource tags

arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system
submitted
07-09-2023 14:45

Sharing

Copy URL

Twitter E-mail

Static task

static1

33 296 upx 19 35 15 1186 20 46 themida sodinokibi crimsonrat

8 signatures

Behavioral task

behavioral1

Sample

gm.rar

Resource

win7-20230831-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

gm.rar

Resource

win10v2004-20230831-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

17ffd90d20cbd49c4e0d65a484eeae65a107d5bad9582afc51c4ead8bbc147e1.dll

Resource

win7-20230831-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

17ffd90d20cbd49c4e0d65a484eeae65a107d5bad9582afc51c4ead8bbc147e1.dll

Resource

win10v2004-20230831-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

1caf5105988781e29d93e58abcbf3bf4c973eca1a207803629bd5cf901ef5be1.exe

Resource

win7-20230831-en

troldesh discovery persistence ransomware spyware stealer trojan upx

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral6

Sample

1caf5105988781e29d93e58abcbf3bf4c973eca1a207803629bd5cf901ef5be1.exe

Resource

win10v2004-20230831-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

1d88c47417c082378c735c9e8180ea63627d5efff35852f1bb06fe6705581267.exe

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

1d88c47417c082378c735c9e8180ea63627d5efff35852f1bb06fe6705581267.exe

Resource

win10v2004-20230831-en

microsoft phishing

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral9

Sample

1ecb59774182d0d0a04b418249428b621159838bd2bcdc1a3a7b871a65dd90af.exe

Resource

win7-20230831-en

persistence upx

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral10

Sample

1ecb59774182d0d0a04b418249428b621159838bd2bcdc1a3a7b871a65dd90af.exe

Resource

win10v2004-20230831-en

persistence upx

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral11

Sample

2a5fe7d49fcf65525cfbefaca92a12a0d2917d15f348a48fc7a4de7ae50776b5.exe

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

2a5fe7d49fcf65525cfbefaca92a12a0d2917d15f348a48fc7a4de7ae50776b5.exe

Resource

win10v2004-20230831-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

2c1aa4fa14d7055f2239dbb29ab15089cb2752e9f94ec7a360d275dd607314dc.exe

Resource

win7-20230831-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

2c1aa4fa14d7055f2239dbb29ab15089cb2752e9f94ec7a360d275dd607314dc.exe

Resource

win10v2004-20230831-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

34d62f47e1fe45dd6309326ef696012f2473b0157e1278eea3826a95829da36e.exe

Resource

win7-20230831-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

34d62f47e1fe45dd6309326ef696012f2473b0157e1278eea3826a95829da36e.exe

Resource

win10v2004-20230831-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

38f1b8c86870354a31878d55c6897d7eb9e83f9418aafbfe9f6ff897dd3c2f05.exe

Resource

win7-20230831-en

troldesh discovery persistence ransomware spyware stealer trojan upx

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral18

Sample

38f1b8c86870354a31878d55c6897d7eb9e83f9418aafbfe9f6ff897dd3c2f05.exe

Resource

win10v2004-20230831-en

troldesh discovery persistence ransomware spyware stealer trojan upx

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral19

Sample

40d8e3dae59e911ae1cd44a03eda87d36124450287fd4f81fc095a219d8a2e04.exe

Resource

win7-20230831-en

sodinokibi ransomware spyware stealer

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral20

Sample

40d8e3dae59e911ae1cd44a03eda87d36124450287fd4f81fc095a219d8a2e04.exe

Resource

win10v2004-20230831-en

sodinokibi ransomware spyware stealer

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral21

Sample

410ee08c8a84fbb947d5f4635c95c6c8d244a51855afd4f6aa0e82dba1c38a59.exe

Resource

win7-20230831-en

persistence

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

410ee08c8a84fbb947d5f4635c95c6c8d244a51855afd4f6aa0e82dba1c38a59.exe

Resource

win10v2004-20230831-en

persistence

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

423b7b37b1925762c4417d81bd0f434f9760c1ed844b4b47ee7f25c8d0740242.exe

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

423b7b37b1925762c4417d81bd0f434f9760c1ed844b4b47ee7f25c8d0740242.exe

Resource

win10v2004-20230831-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

4315b6e87c88972648fac6610116046b7af4aca6bd445839ecc8f21515591a0b.exe

Resource

win7-20230831-en

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral26

Sample

4315b6e87c88972648fac6610116046b7af4aca6bd445839ecc8f21515591a0b.exe

Resource

win10v2004-20230831-en

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral27

Sample

453c6fe9e176af08b176430630a4eec6f1de09f7f147248dc905dc9823af1b91.exe

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

453c6fe9e176af08b176430630a4eec6f1de09f7f147248dc905dc9823af1b91.exe

Resource

win10v2004-20230831-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

4a841216cbbd4a587cc579434a043c17f54e3eb0e7ff615b3985411587dfa837.exe

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

4a841216cbbd4a587cc579434a043c17f54e3eb0e7ff615b3985411587dfa837.exe

Resource

win10v2004-20230831-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

4e180437ef807b6ded234ad54f506d0cff518c980a055013871529b5905a46a9.exe

Resource

win7-20230831-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

4e180437ef807b6ded234ad54f506d0cff518c980a055013871529b5905a46a9.exe

Resource

win10v2004-20230831-en

windows10-2004-x64

4 signatures

150 seconds

Report Analysis Logs

General

Target

4a841216cbbd4a587cc579434a043c17f54e3eb0e7ff615b3985411587dfa837.exe
Size

14KB
MD5

898b24cd1105ff108bbe18d9b2b39b22
SHA1

2cc018123c389c5c8c741cb4ed4085674f417fc3
SHA256

4a841216cbbd4a587cc579434a043c17f54e3eb0e7ff615b3985411587dfa837
SHA512

ae2bc3e82bc4e36d4d756151d223b12a54f4097733b7cf4eabb9561bb3bf074ba40f40fcbc43aac4c6cb0267961ca4aa57ac3a6f8abba4bc0c0368b40f3d866c
SSDEEP

192:OJLd5quhzqEQVRMI+cM3xbeaV19ZKcxBRkWM2X48xQI+9y5n0kfz7:OJJ5quqTRNuXvgW48x09y50kf

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\4a841216cbbd4a587cc579434a043c17f54e3eb0e7ff615b3985411587dfa837.exe
"C:\Users\Admin\AppData\Local\Temp\4a841216cbbd4a587cc579434a043c17f54e3eb0e7ff615b3985411587dfa837.exe"
1⤵
PID:1204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1204-0-0x0000000077632000-0x0000000077633000-memory.dmp

Filesize
4KB

Download