44ee695b532eb984e46de29569ce35854b37d409efaabb6bcf9f5316e2b0546d

Submit
Reports

Overview

overview

Static

static

samples (2).zip

windows7-x64

samples (2).zip

windows10-2004-x64

04035f6fdd...f9.exe

windows7-x64

04035f6fdd...f9.exe

windows10-2004-x64

0ed3c87ce3...07.exe

windows7-x64

0ed3c87ce3...07.exe

windows10-2004-x64

1ce291b079...c9.exe

windows7-x64

1ce291b079...c9.exe

windows10-2004-x64

30e66f95b4...49.exe

windows7-x64

30e66f95b4...49.exe

windows10-2004-x64

335160bee7...cf.exe

windows7-x64

335160bee7...cf.exe

windows10-2004-x64

3d7dd597a4...67.exe

windows7-x64

3d7dd597a4...67.exe

windows10-2004-x64

42dcc46f9d...46.exe

windows7-x64

42dcc46f9d...46.exe

windows10-2004-x64

4fcaca23e9...f2.exe

windows7-x64

4fcaca23e9...f2.exe

windows10-2004-x64

5994300c1c...a7.exe

windows7-x64

5994300c1c...a7.exe

windows10-2004-x64

627a5569d4...e3.exe

windows7-x64

627a5569d4...e3.exe

windows10-2004-x64

kf12.pyc

windows7-x64

kf12.pyc

windows10-2004-x64

63fa775052...2f.exe

windows7-x64

63fa775052...2f.exe

windows10-2004-x64

645b8dfe73...79.exe

windows7-x64

645b8dfe73...79.exe

windows10-2004-x64

64862ec699...1b.exe

windows7-x64

64862ec699...1b.exe

windows10-2004-x64

741d75a02d...5e.exe

windows7-x64

741d75a02d...5e.exe

windows10-2004-x64

Resubmissions

18-04-2024 18:50

240418-xha8wabh29 10

01-01-2024 15:12

240101-slnwxsfeh4 10

Analysis

max time kernel
144s
max time network
114s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
01-01-2024 15:12

Sharing

Copy URL

Twitter E-mail

Static task

static1

7 signatures

Behavioral task

behavioral1

Sample

samples (2).zip

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

samples (2).zip

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

04035f6fdd921309391aef9c88e550d8b3d31c7a4ea80267cb436f491aedd1f9.exe

Resource

win7-20231129-en

persistence ransomware upx

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral4

Sample

04035f6fdd921309391aef9c88e550d8b3d31c7a4ea80267cb436f491aedd1f9.exe

Resource

win10v2004-20231215-en

persistence

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral5

Sample

0ed3c87ce3ae58f3dcbf46fa022acd3cbbe0b96af2e9f7a47eee0dd50af88507.exe

Resource

win7-20231215-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

0ed3c87ce3ae58f3dcbf46fa022acd3cbbe0b96af2e9f7a47eee0dd50af88507.exe

Resource

win10v2004-20231222-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

1ce291b079977e7a3f81c44b644fe1f63ae34a0a1a5c264e9f6085c184f7a1c9.exe

Resource

win7-20231129-en

vmprotect

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral8

Sample

1ce291b079977e7a3f81c44b644fe1f63ae34a0a1a5c264e9f6085c184f7a1c9.exe

Resource

win10v2004-20231222-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

30e66f95b46c8162c921648e31f8c4146ba3f0580f4e5aa3b4c4de18687f6a49.exe

Resource

win7-20231215-en

evasion

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

30e66f95b46c8162c921648e31f8c4146ba3f0580f4e5aa3b4c4de18687f6a49.exe

Resource

win10v2004-20231215-en

evasion

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

335160bee7e253c4ffa69e5164c4a36fe5fb4be2c246958dfcc509d8202db5cf.exe

Resource

win7-20231215-en

matrix discovery evasion persistence ransomware spyware stealer upx

windows7-x64

23 signatures

150 seconds

Behavioral task

behavioral12

Sample

335160bee7e253c4ffa69e5164c4a36fe5fb4be2c246958dfcc509d8202db5cf.exe

Resource

win10v2004-20231215-en

matrix discovery ransomware upx

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral13

Sample

3d7dd597a465d5275ef31d9e4f9dd80ed4de6139a1b3707cb3b0ffa068595567.exe

Resource

win7-20231215-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

3d7dd597a465d5275ef31d9e4f9dd80ed4de6139a1b3707cb3b0ffa068595567.exe

Resource

win10v2004-20231215-en

spyware stealer

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

42dcc46f9d6e6e8efe3f95bc09dbdfb6206a52a4347dbb652f315cec483a2046.exe

Resource

win7-20231215-en

evasion ransomware

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral16

Sample

42dcc46f9d6e6e8efe3f95bc09dbdfb6206a52a4347dbb652f315cec483a2046.exe

Resource

win10v2004-20231215-en

evasion

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral17

Sample

4fcaca23e9cfb7e5448f41bb520c9c35c68fd795ac6b3707d0c64cf92738acf2.exe

Resource

win7-20231215-en

dharma persistence ransomware spyware stealer vmprotect

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral18

Sample

4fcaca23e9cfb7e5448f41bb520c9c35c68fd795ac6b3707d0c64cf92738acf2.exe

Resource

win10v2004-20231215-en

dharma persistence ransomware vmprotect

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral19

Sample

5994300c1c7d099bec13d2a6aec942a6a866966e9545773d3fbe26cc5e308da7.exe

Resource

win7-20231215-en

ransomware

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral20

Sample

5994300c1c7d099bec13d2a6aec942a6a866966e9545773d3fbe26cc5e308da7.exe

Resource

win10v2004-20231215-en

evasion ransomware

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral21

Sample

627a5569d47d6c66be6888e4f68f0a50e491404a08da1a7d9242c2d29e3e8ee3.exe

Resource

win7-20231215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

627a5569d47d6c66be6888e4f68f0a50e491404a08da1a7d9242c2d29e3e8ee3.exe

Resource

win10v2004-20231215-en

evasion ransomware spyware stealer trojan

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral23

Sample

kf12.pyc

Resource

win7-20231129-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral24

Sample

kf12.pyc

Resource

win10v2004-20231222-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

63fa775052a5c7258d44a00d9f2b4a9263f96fb7c61778cbb1ba9102fed2082f.exe

Resource

win7-20231129-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

63fa775052a5c7258d44a00d9f2b4a9263f96fb7c61778cbb1ba9102fed2082f.exe

Resource

win10v2004-20231222-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

645b8dfe73255d9e5be6e778292f3dde84ff8c5918a044ae42bcace0fe9ca279.exe

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

645b8dfe73255d9e5be6e778292f3dde84ff8c5918a044ae42bcace0fe9ca279.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

64862ec69991a7d454c3ea3a0c3a8f1cc9c80192078740b9c753abbf1b7bef1b.exe

Resource

win7-20231129-en

evasion persistence ransomware

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral30

Sample

64862ec69991a7d454c3ea3a0c3a8f1cc9c80192078740b9c753abbf1b7bef1b.exe

Resource

win10v2004-20231215-en

evasion persistence ransomware spyware stealer

windows10-2004-x64

22 signatures

150 seconds

Behavioral task

behavioral31

Sample

741d75a02d0c4974968f0738a8b67104e1c24a58143b73b5ed1c25ac023b695e.exe

Resource

win7-20231215-en

xorist evasion persistence ransomware spyware stealer themida trojan

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral32

Sample

741d75a02d0c4974968f0738a8b67104e1c24a58143b73b5ed1c25ac023b695e.exe

Resource

win10v2004-20231215-en

xorist evasion persistence ransomware themida trojan

windows10-2004-x64

10 signatures

150 seconds

Report Analysis Logs

General

Target

645b8dfe73255d9e5be6e778292f3dde84ff8c5918a044ae42bcace0fe9ca279.exe
Size

2.4MB
MD5

38529ecca6f8857442331c40e1bd5f9d
SHA1

37fe11751277dd8cc889e0c05d7fde88b98aa67c
SHA256

645b8dfe73255d9e5be6e778292f3dde84ff8c5918a044ae42bcace0fe9ca279
SHA512

a837e6f5452c939f7a7dcf16613fab486bb584c20aeb3121748d1dae731c4161a19ea2f9863bf621dc8c61101860b3ebfb3c4a780c8f1c07bd1ad59c90540d4a
SSDEEP

49152:hxFNFf4ZjhxNdNGa5YLuOARYNdNXc0xI5mmswos1:hxF7Q3xDAa5qARYDS0xIg

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\645b8dfe73255d9e5be6e778292f3dde84ff8c5918a044ae42bcace0fe9ca279.exe
"C:\Users\Admin\AppData\Local\Temp\645b8dfe73255d9e5be6e778292f3dde84ff8c5918a044ae42bcace0fe9ca279.exe"
1⤵
PID:3156

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads