5023ffe58f1945012086d05f637983928e3e7c16eb5487196096d43b39d151ef

Submit
Reports

Overview

overview

Static

static

samples5.zip

windows7-x64

samples5.zip

windows10-2004-x64

104b5623d8...d3.exe

windows7-x64

104b5623d8...d3.exe

windows10-2004-x64

160010289c...02.exe

windows7-x64

160010289c...02.exe

windows10-2004-x64

1a757d4aa5...6f.exe

windows7-x64

1a757d4aa5...6f.exe

windows10-2004-x64

21ff399e57...56.dll

windows7-x64

21ff399e57...56.dll

windows10-2004-x64

3c311150e2...bf.exe

windows7-x64

3c311150e2...bf.exe

windows10-2004-x64

3efe068c64...0f.exe

windows7-x64

3efe068c64...0f.exe

windows10-2004-x64

403be0442e...17.exe

windows7-x64

403be0442e...17.exe

windows10-2004-x64

49c96478e9...66.exe

windows7-x64

49c96478e9...66.exe

windows10-2004-x64

5154914351...a7.exe

windows7-x64

5154914351...a7.exe

windows10-2004-x64

616ea8ac34...858437

windows7-x64

616ea8ac34...858437

windows10-2004-x64

6a637e90e0...bc.exe

windows7-x64

6a637e90e0...bc.exe

windows10-2004-x64

759c06eedc...4c.dll

windows7-x64

759c06eedc...4c.dll

windows10-2004-x64

85cad059cc...20.exe

windows7-x64

85cad059cc...20.exe

windows10-2004-x64

8ca6b7929e...3c.exe

windows7-x64

8ca6b7929e...3c.exe

windows10-2004-x64

90ef3f841b...77.exe

windows7-x64

90ef3f841b...77.exe

windows10-2004-x64

Analysis

max time kernel
143s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
01-01-2024 15:27

Sharing

Copy URL

Twitter E-mail

Static task

static1

ransomware

1 signatures

Behavioral task

behavioral1

Sample

samples5.zip

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

samples5.zip

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

104b5623d8edd7e56d7e824d900ef57cc085ad7b2935c794af58de87d4f8c2d3.exe

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

104b5623d8edd7e56d7e824d900ef57cc085ad7b2935c794af58de87d4f8c2d3.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

160010289cc38de42f7b75fa817a6ef7931bfd8aa1370fb09559b2e035e05702.exe

Resource

win7-20231129-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

160010289cc38de42f7b75fa817a6ef7931bfd8aa1370fb09559b2e035e05702.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

1a757d4aa506d48a09ed5cf0c8f21b6d65a55f5e8aa736873a9e523c4278156f.exe

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

1a757d4aa506d48a09ed5cf0c8f21b6d65a55f5e8aa736873a9e523c4278156f.exe

Resource

win10v2004-20231222-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

21ff399e57cc306a1ae1daab6009ea40c8aa96c39296d0f8781626de6bd19256.dll

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

21ff399e57cc306a1ae1daab6009ea40c8aa96c39296d0f8781626de6bd19256.dll

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

3c311150e20d76edd9274cec783068667637b6b5f3b6e1a5031a8605b895fabf.exe

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

3c311150e20d76edd9274cec783068667637b6b5f3b6e1a5031a8605b895fabf.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

3efe068c644c96fff2a25a7351da85bad86949878df3c7cad76d83ad2f2c340f.exe

Resource

win7-20231215-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

3efe068c644c96fff2a25a7351da85bad86949878df3c7cad76d83ad2f2c340f.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

403be0442e847aee7ca7553e19672112450f2e034180a1f57eb8a6d7d39b8d17.exe

Resource

win7-20231215-en

ransomware spyware stealer

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral16

Sample

403be0442e847aee7ca7553e19672112450f2e034180a1f57eb8a6d7d39b8d17.exe

Resource

win10v2004-20231215-en

ransomware spyware stealer

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

49c96478e9d2b16219a7c86f031c5d8b241ae43550ce2fc2bea1d98fa90aa766.exe

Resource

win7-20231215-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

49c96478e9d2b16219a7c86f031c5d8b241ae43550ce2fc2bea1d98fa90aa766.exe

Resource

win10v2004-20231215-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

5154914351d1abdc308c8a76474a19560a4624194feb98118d0710efb6804aa7.exe

Resource

win7-20231215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

5154914351d1abdc308c8a76474a19560a4624194feb98118d0710efb6804aa7.exe

Resource

win10v2004-20231222-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

616ea8ac34ae403d7094d53c0db11a24348f6e48eff80e254a93a1593f858437

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

616ea8ac34ae403d7094d53c0db11a24348f6e48eff80e254a93a1593f858437

Resource

win10v2004-20231222-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

6a637e90e0673ee6090cc4fb47d82ab87ae7d26ffcff7a7dcafd4da167aea8bc.exe

Resource

win7-20231215-en

ransomware spyware stealer

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral24

Sample

6a637e90e0673ee6090cc4fb47d82ab87ae7d26ffcff7a7dcafd4da167aea8bc.exe

Resource

win10v2004-20231215-en

ransomware spyware stealer

windows10-2004-x64

14 signatures

150 seconds

Behavioral task

behavioral25

Sample

759c06eedcadd60ebd2aa3790eefa40d505044080cea4e1477d845611f322b4c.dll

Resource

win7-20231129-en

magniber ransomware

windows7-x64

19 signatures

150 seconds

Behavioral task

behavioral26

Sample

759c06eedcadd60ebd2aa3790eefa40d505044080cea4e1477d845611f322b4c.dll

Resource

win10v2004-20231215-en

magniber ransomware

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral27

Sample

85cad059cca352e70188c1744521100651a787ebabdaa8261badb0f3b6bb5020.exe

Resource

win7-20231129-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

85cad059cca352e70188c1744521100651a787ebabdaa8261badb0f3b6bb5020.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral29

Sample

8ca6b7929ece89d8d9050ae9f1e6c1b3dfa87217272e114e464160dce036463c.exe

Resource

win7-20231215-en

ransomware spyware stealer

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral30

Sample

8ca6b7929ece89d8d9050ae9f1e6c1b3dfa87217272e114e464160dce036463c.exe

Resource

win10v2004-20231215-en

ransomware spyware stealer

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral31

Sample

90ef3f841bef457a352a092f2367a0de89d812318df6b2293876d5746281c777.exe

Resource

win7-20231215-en

ransomware spyware stealer

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

90ef3f841bef457a352a092f2367a0de89d812318df6b2293876d5746281c777.exe

Resource

win10v2004-20231215-en

ransomware spyware stealer

windows10-2004-x64

4 signatures

150 seconds

Report Analysis Logs

General

Target

3c311150e20d76edd9274cec783068667637b6b5f3b6e1a5031a8605b895fabf.exe
Size

13KB
MD5

9b6667a85111d6b38571dbd70dd402bb
SHA1

d8a0058efc95fde81798e7c9228ca629ba2bdea6
SHA256

3c311150e20d76edd9274cec783068667637b6b5f3b6e1a5031a8605b895fabf
SHA512

f4be04961cb88e973af95e20148c0490b71010827994bc7266e84e93490142d2f8034ea59b13e4eed9c8acbf6bdbdbf0cf28cffc8f1492a68fe4bf02cb4f31ef
SSDEEP

192:PC6XV89qHBGSVeZc3dqR8kl3v/bKyVET/qYCu/IT/qkQtRle:PCJsHBGSVeZ6dqR8W/HEjujWjl

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\3c311150e20d76edd9274cec783068667637b6b5f3b6e1a5031a8605b895fabf.exe
"C:\Users\Admin\AppData\Local\Temp\3c311150e20d76edd9274cec783068667637b6b5f3b6e1a5031a8605b895fabf.exe"
1⤵
PID:1752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1752-0-0x0000000075020000-0x00000000757D0000-memory.dmp

Filesize
7.7MB

Download
memory/1752-1-0x0000000000300000-0x000000000030A000-memory.dmp

Filesize
40KB

Download
memory/1752-2-0x0000000075020000-0x00000000757D0000-memory.dmp

Filesize
7.7MB

Download