ffb44a5388958cda3be00af5170e3fa51c5bc59e7b6ea659836417a17594d18c | Triage

Submit
Reports

Overview

overview

Static

static

6523.exe

windows7-x64

6523.exe

windows10-2004-x64

Amdau.exe

windows7-x64

Amdau.exe

windows10-2004-x64

CLEP.exe

windows7-x64

CLEP.exe

windows10-2004-x64

DCKA.exe

windows7-x64

DCKA.exe

windows10-2004-x64

DEV.exe

windows7-x64

DEV.exe

windows10-2004-x64

DEVMin.exe

windows7-x64

DEVMin.exe

windows10-2004-x64

DevSt.exe

windows7-x64

1

DevSt.exe

windows10-2004-x64

1

Documents-...uz.exe

windows7-x64

7

Documents-...uz.exe

windows10-2004-x64

5

IqXYLXKzl6.exe

windows7-x64

IqXYLXKzl6.exe

windows10-2004-x64

1

LEMON.exe

windows7-x64

LEMON.exe

windows10-2004-x64

LIMMin.exe

windows7-x64

LIMMin.exe

windows10-2004-x64

LIMSt.exe

windows7-x64

1

LIMSt.exe

windows10-2004-x64

1

LK2.exe

windows7-x64

LK2.exe

windows10-2004-x64

NINJA.exe

windows7-x64

7

NINJA.exe

windows10-2004-x64

7

PolymodXT.exe

windows7-x64

PolymodXT.exe

windows10-2004-x64

UM.exe

windows7-x64

UM.exe

windows10-2004-x64

Analysis

max time kernel
202s
max time network
219s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
13-10-2023 02:17

Sharing

Static task

static1

rat laplas rhadamanthys aurora dcrat agenttesla

8 signatures

Behavioral task

behavioral1

Sample

6523.exe

Resource

win7-20230831-en

smokeloader backdoor trojan

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

6523.exe

Resource

win10v2004-20230915-en

smokeloader backdoor trojan

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral3

Sample

Amdau.exe

Resource

win7-20230831-en

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral4

Sample

Amdau.exe

Resource

win10v2004-20230915-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral5

Sample

CLEP.exe

Resource

win7-20230831-en

laplas clipper stealer

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral6

Sample

CLEP.exe

Resource

win10v2004-20230915-en

laplas clipper stealer

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral7

Sample

DCKA.exe

Resource

win7-20230831-en

rhadamanthys stealer

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

DCKA.exe

Resource

win10v2004-20230915-en

rhadamanthys stealer

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

DEV.exe

Resource

win7-20230831-en

rhadamanthys stealer

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

DEV.exe

Resource

win10v2004-20230915-en

rhadamanthys stealer

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

DEVMin.exe

Resource

win7-20230831-en

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral12

Sample

DEVMin.exe

Resource

win10v2004-20230915-en

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral13

Sample

DevSt.exe

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

DevSt.exe

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Documents-EnemyFrauz.exe

Resource

win7-20230831-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

Documents-EnemyFrauz.exe

Resource

win10v2004-20230915-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

IqXYLXKzl6.exe

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

IqXYLXKzl6.exe

Resource

win10v2004-20230915-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

LEMON.exe

Resource

win7-20230831-en

rhadamanthys stealer

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

LEMON.exe

Resource

win10v2004-20230915-en

rhadamanthys stealer

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

LIMMin.exe

Resource

win7-20230831-en

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral22

Sample

LIMMin.exe

Resource

win10v2004-20230915-en

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral23

Sample

LIMSt.exe

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

LIMSt.exe

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

LK2.exe

Resource

win7-20230831-en

rhadamanthys stealer

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral26

Sample

LK2.exe

Resource

win10v2004-20230915-en

rhadamanthys stealer

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral27

Sample

NINJA.exe

Resource

win7-20230831-en

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral28

Sample

NINJA.exe

Resource

win10v2004-20230915-en

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral29

Sample

PolymodXT.exe

Resource

win7-20230831-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

PolymodXT.exe

Resource

win10v2004-20230915-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

UM.exe

Resource

win7-20230831-en

lgoogloader downloader

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

UM.exe

Resource

win10v2004-20230915-en

lgoogloader downloader

windows10-2004-x64

4 signatures

150 seconds

Report Analysis Logs

General

Target

LIMSt.exe
Size

2.9MB
MD5

b26439eb7f5e2a7f1e2dabcfa8e3a7b1
SHA1

4c4ca12b90e83e563408557e028580dd43b56975
SHA256

47a40add511868171afab04d336c6120be951799b6230fdbd581e6469e1a088e
SHA512

4d6fedbafd7f6ca7b0a3b9bf0162cd1d607098e82e474cca971fd828f1d0d4c9a1a00811583abd11d93b76f39972abbe7e6fae6b633c0062befc3d93612b0a5f
SSDEEP

49152:EW32/5cuXfOG+CwXxDebqytiJCaLsL6M8Aoek1d:anXWRxDQqCLd8AK

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\LIMSt.exe
"C:\Users\Admin\AppData\Local\Temp\LIMSt.exe"
1⤵
PID:3872

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy