Overview

overview

10

Static

static

8

BuhtaClient.vbs

windows7-x64

1

BuhtaClient.vbs

windows10-2004-x64

1

BuhtaClient.exe

windows7-x64

10

BuhtaClient.exe

windows10-2004-x64

10

BuhtaDev.chm

windows7-x64

1

BuhtaDev.chm

windows10-2004-x64

1

BuhtaPivot.xls

windows7-x64

1

BuhtaPivot.xls

windows10-2004-x64

1

BuhtaServer.exe

windows7-x64

1

BuhtaServer.exe

windows10-2004-x64

1

PivotInstall.exe

windows7-x64

1

PivotInstall.exe

windows10-2004-x64

1

dsd.exe

windows7-x64

1

dsd.exe

windows10-2004-x64

1

eapi.dll

windows7-x64

3

eapi.dll

windows10-2004-x64

3

quricol32.dll

windows7-x64

1

quricol32.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    120s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04/01/2024, 00:15

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    BuhtaServer.exe

  • Size

    1.4MB

  • MD5

    de55c646c8e87db58b124f8d76eb6e6b

  • SHA1

    264365cce261e6fad450671c5ccb7955ebfc5ab4

  • SHA256

    6975ceb7195e32eac63305e885373aec1af90430a25ccd5db43156b732a297b7

  • SHA512

    a642df8144aa100dbef032ddf7a94f361a4875ad9a2223b993ad5c0b500cc72b3c7e20f1399bc751755e4f7191b5523c28da234a2ebe04f776fad72bbe45d7a1

  • SSDEEP

    24576:TYlSIAplA/e2enRok1ezqvSwm+KqZjX/sHtaaF5eWEDaS8N:TmSIuUMR2C1PsHtaakF8

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\BuhtaServer.exe
    "C:\Users\Admin\AppData\Local\Temp\BuhtaServer.exe"
    1⤵
      PID:2268

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2268-0-0x0000000000260000-0x0000000000261000-memory.dmp

      Filesize

      4KB

      Download

    • memory/2268-1-0x0000000000400000-0x0000000000569000-memory.dmp

      Filesize

      1.4MB

      Download