1423053f90855d33858db47f354055b660943104c1c18f848c9b7b415979dc5f

Submit
Reports

Overview

overview

Static

static

Downloads.rar

windows7-x64

Downloads.rar

windows10-2004-x64

08751be484...2d.dll

windows7-x64

08751be484...2d.dll

windows10-2004-x64

0a9f79abd4...51.exe

windows7-x64

0a9f79abd4...51.exe

windows10-2004-x64

1.bin/1.exe

windows7-x64

1.bin/1.exe

windows10-2004-x64

2019-09-02...10.exe

windows7-x64

2019-09-02...10.exe

windows10-2004-x64

2b5e50bc30...ba.dll

windows7-x64

2b5e50bc30...ba.dll

windows10-2004-x64

2c01b00772...eb.exe

windows7-x64

2c01b00772...eb.exe

windows10-2004-x64

31.exe

windows7-x64

31.exe

windows10-2004-x64

3DMark 11 ...on.exe

windows7-x64

3DMark 11 ...on.exe

windows10-2004-x64

42f9729255...61.exe

windows7-x64

42f9729255...61.exe

windows10-2004-x64

5da0116af4...18.exe

windows7-x64

5da0116af4...18.exe

windows10-2004-x64

69c56d12ed...6b.exe

windows7-x64

69c56d12ed...6b.exe

windows10-2004-x64

6a9e7107c9...91.exe

windows7-x64

6a9e7107c9...91.exe

windows10-2004-x64

905d572f23...50.exe

windows7-x64

905d572f23...50.exe

windows10-2004-x64

948340be97...54.exe

windows7-x64

948340be97...54.exe

windows10-2004-x64

95560f1a46...f9.dll

windows7-x64

95560f1a46...f9.dll

windows10-2004-x64

Resubmissions

03-07-2024 16:04

01-07-2024 18:12

01-07-2024 18:03

01-07-2024 18:03

01-07-2024 18:03

01-07-2024 18:03

01-07-2024 18:02

01-07-2024 18:02

22-11-2023 17:02

Analysis

max time kernel
120s
max time network
134s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
22-11-2023 17:02

Sharing

Copy URL

Twitter E-mail

Static task

static1

16 signatures

Behavioral task

behavioral1

Sample

Downloads.rar

Resource

win7-20231020-en

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

Downloads.rar

Resource

win10v2004-20231023-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

08751be484e1572995ebb085df1c2c6372084d63a64dce7fab28130d79a6ea2d.dll

Resource

win7-20231025-en

zloader botnet persistence trojan

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral4

Sample

08751be484e1572995ebb085df1c2c6372084d63a64dce7fab28130d79a6ea2d.dll

Resource

win10v2004-20231020-en

zloader main 26.02.2020 botnet persistence trojan

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral5

Sample

0a9f79abd48b95544d7e2b6658637d1eb23067a94e10bf06d05c9ecc73cf4b51.exe

Resource

win7-20231020-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

0a9f79abd48b95544d7e2b6658637d1eb23067a94e10bf06d05c9ecc73cf4b51.exe

Resource

win10v2004-20231023-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

1.bin/1.exe

Resource

win7-20231025-en

agenttesla danabot formbook gozi guloader qakbot raccoon 86920224 spx129 1590734339 i0qi w9z agilenet banker cryptone downloader keylogger packer ransomware rat rezer0 rm3 spyware stealer trojan

windows7-x64

21 signatures

150 seconds

Behavioral task

behavioral8

Sample

1.bin/1.exe

Resource

win10v2004-20231023-en

agenttesla formbook gozi 86920224 w9z agilenet banker cryptone discovery keylogger packer rat rezer0 rm3 spyware stealer trojan

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral9

Sample

2019-09-02_22-41-10.exe

Resource

win7-20231020-en

smokeloader backdoor trojan

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral10

Sample

2019-09-02_22-41-10.exe

Resource

win10v2004-20231020-en

smokeloader backdoor trojan

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral11

Sample

2b5e50bc3077610128051bc3e657c3f0e331fb8fed2559c6596911890ea866ba.dll

Resource

win7-20231020-en

zloader 07/04 botnet trojan

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

2b5e50bc3077610128051bc3e657c3f0e331fb8fed2559c6596911890ea866ba.dll

Resource

win10v2004-20231023-en

zloader 07/04 botnet trojan

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

2c01b007729230c415420ad641ad92eb.exe

Resource

win7-20231023-en

hawkeye collection keylogger persistence spyware stealer trojan

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral14

Sample

2c01b007729230c415420ad641ad92eb.exe

Resource

win10v2004-20231023-en

hawkeye collection keylogger persistence spyware stealer trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral15

Sample

31.exe

Resource

win7-20231020-en

agenttesla danabot dharma formbook gozi guloader qakbot raccoon 86920224 spx129 1590734339 i0qi w9z agilenet banker cryptone downloader guloader keylogger packer persistence ransomware rat rezer0 rm3 spyware stealer trojan

windows7-x64

43 signatures

150 seconds

Behavioral task

behavioral16

Sample

31.exe

Resource

win10v2004-20231020-en

agenttesla formbook gozi 86920224 w9z agilenet banker cryptone discovery keylogger packer rat rezer0 rm3 spyware stealer trojan

windows10-2004-x64

19 signatures

150 seconds

Behavioral task

behavioral17

Sample

3DMark 11 Advanced Edition.exe

Resource

win7-20231020-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

3DMark 11 Advanced Edition.exe

Resource

win10v2004-20231025-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

42f972925508a82236e8533567487761.exe

Resource

win7-20231023-en

asyncrat darkcomet njrat warzonerat 2020nov1 evasion infostealer persistence rat trojan

windows7-x64

25 signatures

150 seconds

Behavioral task

behavioral20

Sample

42f972925508a82236e8533567487761.exe

Resource

win10v2004-20231023-en

asyncrat babylonrat darkcomet njrat warzonerat 2020nov1 evasion infostealer persistence rat trojan

windows10-2004-x64

28 signatures

150 seconds

Behavioral task

behavioral21

Sample

5da0116af495e6d8af7241da9b8281d918b9ff9a98a3deab4cca1aec1e456c18.exe

Resource

win7-20231023-en

discovery persistence upx

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral22

Sample

5da0116af495e6d8af7241da9b8281d918b9ff9a98a3deab4cca1aec1e456c18.exe

Resource

win10v2004-20231023-en

discovery persistence upx

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral23

Sample

69c56d12ed7024696936fb69b4c6bee58174a275cb53fa966646a0b092d9626b.exe

Resource

win7-20231020-en

hakbit ransomware spyware stealer

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral24

Sample

69c56d12ed7024696936fb69b4c6bee58174a275cb53fa966646a0b092d9626b.exe

Resource

win10v2004-20231020-en

hakbit ransomware spyware stealer

windows10-2004-x64

14 signatures

150 seconds

Behavioral task

behavioral25

Sample

6a9e7107c97762eb1196a64baeadb291.exe

Resource

win7-20231020-en

zloader canadaloads nerino botnet trojan

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

6a9e7107c97762eb1196a64baeadb291.exe

Resource

win10v2004-20231023-en

zloader canadaloads nerino botnet trojan

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

905d572f23883f5f161f920e53473989cf7dffc16643aa759f77842e54add550.exe

Resource

win7-20231023-en

revengerat xdsddd stealer trojan

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral28

Sample

905d572f23883f5f161f920e53473989cf7dffc16643aa759f77842e54add550.exe

Resource

win10v2004-20231025-en

revengerat xdsddd stealer trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral29

Sample

948340be97cc69c2cf8e5c8327ee52a89eeb50095f978696c710ad773a46b654.exe

Resource

win7-20231023-en

revengerat victime persistence stealer trojan

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral30

Sample

948340be97cc69c2cf8e5c8327ee52a89eeb50095f978696c710ad773a46b654.exe

Resource

win10v2004-20231023-en

revengerat victime persistence stealer trojan

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral31

Sample

95560f1a465e8ba87a73f8e60a6657545073d55c3b5cfc2ffdaf3d69d46afcf9.dll

Resource

win7-20231023-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

95560f1a465e8ba87a73f8e60a6657545073d55c3b5cfc2ffdaf3d69d46afcf9.dll

Resource

win10v2004-20231020-en

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

3DMark 11 Advanced Edition.exe
Size

11.6MB
MD5

236d7524027dbce337c671906c9fe10b
SHA1

7d345aa201b50273176ae0ec7324739d882da32e
SHA256

400b64f8c61623ead9f579b99735b1b0d9febe7c829e8bdafc9b3a3269bbe21c
SHA512

e5c2f87923b3331719261101b2f606298fb66442e56a49708199d8472c1ac4a72130612d3a9c344310f36fcb3cf39e4637f7dd8fb3841c61b01b95bb3794610a
SSDEEP

196608:8YG+5pO1Ppb1rAMQQkIscfAb3mO5iW8uO2Kq1TIxz2HU6QPXJ0M2m9b/hE4:8/Bv1zsG2fm2bTcWBIXJHVrW4

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

3DMark 11 Advanced Edition.exe

pid process

1600 3DMark 11 Advanced Edition.exe

pid	process
1600	3DMark 11 Advanced Edition.exe

Processes

C:\Users\Admin\AppData\Local\Temp\3DMark 11 Advanced Edition.exe
"C:\Users\Admin\AppData\Local\Temp\3DMark 11 Advanced Edition.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1600

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads