8ed183df76d08024f15e051f4f5711535dde6372ff4beafecfff07f82e846800

Login
Reports

Overview

overview

Static

static

samples (2) (2).zip

windows7-x64

samples (2) (2).zip

windows10-2004-x64

083e147374...08.exe

windows7-x64

083e147374...08.exe

windows10-2004-x64

12437a49d2...3d.exe

windows7-x64

12437a49d2...3d.exe

windows10-2004-x64

1945c44901...7e.exe

windows7-x64

1945c44901...7e.exe

windows10-2004-x64

2040fa2a3c...d4.exe

windows7-x64

2040fa2a3c...d4.exe

windows10-2004-x64

2b5109e9a2...d9.exe

windows7-x64

2b5109e9a2...d9.exe

windows10-2004-x64

3538750cfe...5f.exe

windows7-x64

3538750cfe...5f.exe

windows10-2004-x64

5d96952d47...5f.exe

windows7-x64

5d96952d47...5f.exe

windows10-2004-x64

63fb410fc5...22.exe

windows7-x64

63fb410fc5...22.exe

windows10-2004-x64

67beeb7a19...08.exe

windows7-x64

67beeb7a19...08.exe

windows10-2004-x64

6e5678ebd4...71.exe

windows7-x64

6e5678ebd4...71.exe

windows10-2004-x64

71506a3322...fb.exe

windows7-x64

71506a3322...fb.exe

windows10-2004-x64

734b9974ec...6d.exe

windows7-x64

734b9974ec...6d.exe

windows10-2004-x64

81a27b3dcf...40.exe

windows7-x64

81a27b3dcf...40.exe

windows10-2004-x64

a1bd0fa8ad...46.exe

windows7-x64

a1bd0fa8ad...46.exe

windows10-2004-x64

a465bc0871...e3.exe

windows7-x64

a465bc0871...e3.exe

windows10-2004-x64

Analysis

max time kernel
144s
max time network
114s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
01/01/2024, 15:12

Sharing

Copy URL Twitter E-mail

Static task

static1

5 signatures

agilenet medusalocker

Behavioral task

behavioral1

Sample

samples (2) (2).zip

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

samples (2) (2).zip

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

083e147374de04930caa882acaeda6df4821b75f869edb7386281f684e573c08.exe

Resource

win7-20231215-en

windows7-x64

4 signatures

150 seconds

evasion

Behavioral task

behavioral4

Sample

083e147374de04930caa882acaeda6df4821b75f869edb7386281f684e573c08.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

5 signatures

150 seconds

evasion

Behavioral task

behavioral5

Sample

12437a49d298941af8d087a1ff478a68ab4c312654153e17d598ff1c87be6b3d.exe

Resource

win7-20231215-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral6

Sample

12437a49d298941af8d087a1ff478a68ab4c312654153e17d598ff1c87be6b3d.exe

Resource

win10v2004-20231222-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral7

Sample

1945c44901e7aa9dd5b6e7e6e07a777d57f7e76120a3ca5a46a0f983d30ce37e.exe

Resource

win7-20231129-en

windows7-x64

2 signatures

150 seconds

ransomware

Behavioral task

behavioral8

Sample

1945c44901e7aa9dd5b6e7e6e07a777d57f7e76120a3ca5a46a0f983d30ce37e.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

15 signatures

150 seconds

dharma persistence ransomware spyware stealer

Behavioral task

behavioral9

Sample

2040fa2a3c5b16d74442d41d224a6ab16e0290a30f0535b18cb50de6a59686d4.exe

Resource

win7-20231215-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

2040fa2a3c5b16d74442d41d224a6ab16e0290a30f0535b18cb50de6a59686d4.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

2b5109e9a249a795a412a3961aae3e5b576a233d9681f5ec0b4d88ce009b6ed9.exe

Resource

win7-20231215-en

windows7-x64

13 signatures

150 seconds

djvu discovery persistence ransomware

Behavioral task

behavioral12

Sample

2b5109e9a249a795a412a3961aae3e5b576a233d9681f5ec0b4d88ce009b6ed9.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

11 signatures

150 seconds

djvu discovery persistence ransomware

Behavioral task

behavioral13

Sample

3538750cfe06d8fe364bc4f396229bfd08c9856f17477b0f8444d35a7f89775f.exe

Resource

win7-20231215-en

windows7-x64

17 signatures

150 seconds

evasion ransomware

Behavioral task

behavioral14

Sample

3538750cfe06d8fe364bc4f396229bfd08c9856f17477b0f8444d35a7f89775f.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

17 signatures

150 seconds

evasion ransomware

Behavioral task

behavioral15

Sample

5d96952d473d386285f01726073d8f1ec46c983fe4c9d657babe9272330d655f.exe

Resource

win7-20231129-en

windows7-x64

6 signatures

150 seconds

djvu discovery ransomware

Behavioral task

behavioral16

Sample

5d96952d473d386285f01726073d8f1ec46c983fe4c9d657babe9272330d655f.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

11 signatures

150 seconds

djvu discovery persistence ransomware

Behavioral task

behavioral17

Sample

63fb410fc5267c61c5099927af714a8f5f4ba6dcdeeb1f297b022879767c7222.exe

Resource

win7-20231215-en

windows7-x64

3 signatures

150 seconds

persistence spyware stealer

Behavioral task

behavioral18

Sample

63fb410fc5267c61c5099927af714a8f5f4ba6dcdeeb1f297b022879767c7222.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

3 signatures

150 seconds

persistence spyware stealer

Behavioral task

behavioral19

Sample

67beeb7a196a91ffdb77af4e53143e75a157ea6cf3432a2e14e1c55d11ef2f08.exe

Resource

win7-20231215-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral20

Sample

67beeb7a196a91ffdb77af4e53143e75a157ea6cf3432a2e14e1c55d11ef2f08.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

6e5678ebd457353b7c095af806f92b5f54341bbfa2c8d3f5ab03b84483013271.exe

Resource

win7-20231129-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

6e5678ebd457353b7c095af806f92b5f54341bbfa2c8d3f5ab03b84483013271.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

71506a3322b0e0bc6fc2c1a1f0ac844a82a8c3fbbfeb4e6452013b4ade7610fb.exe

Resource

win7-20231215-en

windows7-x64

19 signatures

150 seconds

dharma zgrat persistence ransomware rat

Behavioral task

behavioral24

Sample

71506a3322b0e0bc6fc2c1a1f0ac844a82a8c3fbbfeb4e6452013b4ade7610fb.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

16 signatures

150 seconds

dharma zgrat persistence ransomware rat

Behavioral task

behavioral25

Sample

734b9974ec7f673460deb7ae17af4eed0ad6fae862f0765068430050fc44d66d.exe

Resource

win7-20231215-en

windows7-x64

13 signatures

150 seconds

djvu discovery persistence ransomware

Behavioral task

behavioral26

Sample

734b9974ec7f673460deb7ae17af4eed0ad6fae862f0765068430050fc44d66d.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

13 signatures

150 seconds

djvu discovery persistence ransomware

Behavioral task

behavioral27

Sample

81a27b3dcfbd52ceb68043465a9aaa3ff6a2e4d04e487197bb23db5c76eec740.exe

Resource

win7-20231129-en

windows7-x64

11 signatures

150 seconds

ransomware

Behavioral task

behavioral28

Sample

81a27b3dcfbd52ceb68043465a9aaa3ff6a2e4d04e487197bb23db5c76eec740.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

12 signatures

150 seconds

evasion ransomware

Behavioral task

behavioral29

Sample

a1bd0fa8ada1da0181b8d108ca72a41795b55060613e0182f2cbbc592f857f46.exe

Resource

win7-20231215-en

windows7-x64

13 signatures

150 seconds

djvu discovery persistence ransomware

Behavioral task

behavioral30

Sample

a1bd0fa8ada1da0181b8d108ca72a41795b55060613e0182f2cbbc592f857f46.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

11 signatures

150 seconds

djvu discovery persistence ransomware

Behavioral task

behavioral31

Sample

a465bc08714bc760130a3f150a704df2f08af083b2aaf0c931e714019f3769e3.exe

Resource

win7-20231129-en

windows7-x64

1 signatures

150 seconds

persistence

Behavioral task

behavioral32

Sample

a465bc08714bc760130a3f150a704df2f08af083b2aaf0c931e714019f3769e3.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

1 signatures

150 seconds

persistence

Report Analysis Logs

General

Target
2040fa2a3c5b16d74442d41d224a6ab16e0290a30f0535b18cb50de6a59686d4.exe
Size 400KB
Sample240101-sladjafeg6
SHA256 2040fa2a3c5b16d74442d41d224a6ab16e0290a30f0535b18cb50de6a59686d4
MD5 f9665d07df05a0a7c2c6f4019d1bba20
SHA1 778f8bb7ba91ddf0ac9b12052d046d7f975e671a
SHA512 cab4dae8b8534af781357df20e3f2d9522247d9b37c1afe72831b551cc218eb060fb1a7cceb158406d4d512879d06da5c9144a348a0bff077fe4f1ab20762cf8
SSDEEP 6144:GCpNiYHtZHYdNsToSRBoptYASydR1wWhz:THiYwvUxRBn4dHz
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2328	2040fa2a3c5b16d74442d41d224a6ab16e0290a30f0535b18cb50de6a59686d4.exe

Processes

C:\Users\Admin\AppData\Local\Temp\2040fa2a3c5b16d74442d41d224a6ab16e0290a30f0535b18cb50de6a59686d4.exe
"C:\Users\Admin\AppData\Local\Temp\2040fa2a3c5b16d74442d41d224a6ab16e0290a30f0535b18cb50de6a59686d4.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2328

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2328-2-0x00000000022C0000-0x00000000022C5000-memory.dmp

Download