3ca0bf28baacf269c3f6a7215516ae6c2181487f006f192ecac3537595a792c2

Submit
Reports

Overview

overview

Static

static

075F9A8B9A...C5.exe

windows7-x64

075F9A8B9A...C5.exe

windows10-2004-x64

145F7ABE9A...EA.exe

windows7-x64

145F7ABE9A...EA.exe

windows10-2004-x64

1A99AC759F...31.exe

windows7-x64

1A99AC759F...31.exe

windows10-2004-x64

1BE33E4291...2D.exe

windows7-x64

1BE33E4291...2D.exe

windows10-2004-x64

2188BAE387...0C.dll

windows7-x64

2188BAE387...0C.dll

windows10-2004-x64

22F524ABC9...92.exe

windows7-x64

22F524ABC9...92.exe

windows10-2004-x64

33381793BD...5E.exe

windows7-x64

33381793BD...5E.exe

windows10-2004-x64

61C0810A23...A1.exe

windows7-x64

61C0810A23...A1.exe

windows10-2004-x64

676A2A0D88...CB.exe

windows7-x64

676A2A0D88...CB.exe

windows10-2004-x64

73D29DEAC4...09.exe

windows7-x64

73D29DEAC4...09.exe

windows10-2004-x64

81EFD50EB3...29.exe

windows7-x64

81EFD50EB3...29.exe

windows10-2004-x64

8E83C0F656...07.exe

windows7-x64

8E83C0F656...07.exe

windows10-2004-x64

99CA9F3245...E2.exe

windows7-x64

99CA9F3245...E2.exe

windows10-2004-x64

B1E12D0216...06.exe

windows7-x64

B1E12D0216...06.exe

windows10-2004-x64

C6185A23C5...C8.exe

windows7-x64

C6185A23C5...C8.exe

windows10-2004-x64

CDCFEDDB0A...3E.exe

windows7-x64

CDCFEDDB0A...3E.exe

windows10-2004-x64

Analysis

max time kernel
122s
max time network
131s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
12-01-2024 14:20

Sharing

Copy URL

Twitter E-mail

Static task

static1

9 signatures

Behavioral task

behavioral1

Sample

075F9A8B9A5A3F3C221CFA69BA8B3590CFB873946970B7F3DBD333A580D24AC5.exe

Resource

win7-20231215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

075F9A8B9A5A3F3C221CFA69BA8B3590CFB873946970B7F3DBD333A580D24AC5.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

145F7ABE9ABFFD0422F1C1F4CF429E89FD9D3BE93E6C3A0DD852DB708992C4EA.exe

Resource

win7-20231215-en

privateloader loader

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral4

Sample

145F7ABE9ABFFD0422F1C1F4CF429E89FD9D3BE93E6C3A0DD852DB708992C4EA.exe

Resource

win10v2004-20231215-en

privateloader risepro loader stealer

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral5

Sample

1A99AC759FCD881729B76C2904476B4201E794DF2D0547C954EA37BE7C153131.exe

Resource

win7-20231215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

1A99AC759FCD881729B76C2904476B4201E794DF2D0547C954EA37BE7C153131.exe

Resource

win10v2004-20231222-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

1BE33E42910515D58685E4CEE83C4C9B7DE4E6A155A6FD936922682A9922D42D.exe

Resource

win7-20231215-en

xmrig evasion miner persistence upx

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral8

Sample

1BE33E42910515D58685E4CEE83C4C9B7DE4E6A155A6FD936922682A9922D42D.exe

Resource

win10v2004-20231215-en

xmrig evasion miner persistence upx

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral9

Sample

2188BAE387FD2665D807D0B67B916973478CBE417D2042A146C8EADF77AF600C.dll

Resource

win7-20231129-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

2188BAE387FD2665D807D0B67B916973478CBE417D2042A146C8EADF77AF600C.dll

Resource

win10v2004-20231222-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

22F524ABC98F958705FEBD3761BEDC85EC1AE859316A653B67C0C01327533092.exe

Resource

win7-20231215-en

phorphiex evasion loader persistence trojan worm

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral12

Sample

22F524ABC98F958705FEBD3761BEDC85EC1AE859316A653B67C0C01327533092.exe

Resource

win10v2004-20231215-en

evasion persistence trojan

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral13

Sample

33381793BD156716647F2C2E14047AA5559E940FF584D3FF6110B96EB701115E.exe

Resource

win7-20231215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

33381793BD156716647F2C2E14047AA5559E940FF584D3FF6110B96EB701115E.exe

Resource

win10v2004-20231222-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

61C0810A23580CF492A6BA4F7654566108331E7A4134C968C2D6A05261B2D8A1.exe

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

61C0810A23580CF492A6BA4F7654566108331E7A4134C968C2D6A05261B2D8A1.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

676A2A0D88A79012300A63092DA090F5B0D0BDFC105541732254E0AE1FEB2FCB.exe

Resource

win7-20231215-en

upx

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral18

Sample

676A2A0D88A79012300A63092DA090F5B0D0BDFC105541732254E0AE1FEB2FCB.exe

Resource

win10v2004-20231215-en

upx

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral19

Sample

73D29DEAC41E022CE77730F74D5EFB0828F56D1F2BEB91FD24ABC867F851FE09.exe

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

73D29DEAC41E022CE77730F74D5EFB0828F56D1F2BEB91FD24ABC867F851FE09.exe

Resource

win10v2004-20231222-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

81EFD50EB374AD2176E2655AF10276079F733C0592E83E3A044253DCBE06F329.exe

Resource

win7-20231129-en

upx

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

81EFD50EB374AD2176E2655AF10276079F733C0592E83E3A044253DCBE06F329.exe

Resource

win10v2004-20231215-en

upx

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

8E83C0F6566169AF1CF6C28670DCEE6EDEB15D0913AA24AD3831C9F97EB42307.exe

Resource

win7-20231215-en

privateloader loader

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

8E83C0F6566169AF1CF6C28670DCEE6EDEB15D0913AA24AD3831C9F97EB42307.exe

Resource

win10v2004-20231222-en

privateloader loader

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

99CA9F3245265C2F9D395B4B3A8554056E481C6FEE98B839C9C5ADB5B79E0DE2.exe

Resource

win7-20231215-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral26

Sample

99CA9F3245265C2F9D395B4B3A8554056E481C6FEE98B839C9C5ADB5B79E0DE2.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral27

Sample

B1E12D0216A946329FE549E09BF481D7DF9E8E3BC3F99BC24D9940CBB8F76F06.exe

Resource

win7-20231215-en

lockbit ransomware spyware stealer

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral28

Sample

B1E12D0216A946329FE549E09BF481D7DF9E8E3BC3F99BC24D9940CBB8F76F06.exe

Resource

win10v2004-20231215-en

lockbit ransomware

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral29

Sample

C6185A23C51B8AC77E6C1BDF2CD4A8D39B02AF8B8027D4162CF9766D19CF87C8.exe

Resource

win7-20231215-en

privateloader loader vmprotect

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral30

Sample

C6185A23C51B8AC77E6C1BDF2CD4A8D39B02AF8B8027D4162CF9766D19CF87C8.exe

Resource

win10v2004-20231215-en

privateloader loader vmprotect

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

CDCFEDDB0ACA42E65E6A4822C1F23DF7C4AE92775EBCC0B45D4160B732B0983E.exe

Resource

win7-20231215-en

phorphiex evasion loader persistence trojan worm

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral32

Sample

CDCFEDDB0ACA42E65E6A4822C1F23DF7C4AE92775EBCC0B45D4160B732B0983E.exe

Resource

win10v2004-20231215-en

phorphiex evasion loader persistence trojan worm

windows10-2004-x64

8 signatures

150 seconds

Report Analysis Logs

General

Target

075F9A8B9A5A3F3C221CFA69BA8B3590CFB873946970B7F3DBD333A580D24AC5.exe
Size

190KB
MD5

a3a2816c2a4e8c7374c0d973a0fc4c8e
SHA1

ead016fe4e5d9bc24cc186e8fec28c9b07606966
SHA256

075f9a8b9a5a3f3c221cfa69ba8b3590cfb873946970b7f3dbd333a580d24ac5
SHA512

b9eb4bfbf8dd4320fffd98e92d46e55882544f4fda5cfd5586e48b4da4fd919bf575afa0443732c88be5aaed2fff756342d4c33b0bcceb4474bee69af0d9d3ab
SSDEEP

3072:aVOMzfEpDHKNBW6Q/THGVp3DqGxgkjCXLCz0fugKkqEjBD:a4M4FMgXCTTdL0fuLfe

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 5 IoCs

pid	Process
2220	075F9A8B9A5A3F3C221CFA69BA8B3590CFB873946970B7F3DBD333A580D24AC5.exe
2220	075F9A8B9A5A3F3C221CFA69BA8B3590CFB873946970B7F3DBD333A580D24AC5.exe
2220	075F9A8B9A5A3F3C221CFA69BA8B3590CFB873946970B7F3DBD333A580D24AC5.exe
2220	075F9A8B9A5A3F3C221CFA69BA8B3590CFB873946970B7F3DBD333A580D24AC5.exe
2220	075F9A8B9A5A3F3C221CFA69BA8B3590CFB873946970B7F3DBD333A580D24AC5.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2220	075F9A8B9A5A3F3C221CFA69BA8B3590CFB873946970B7F3DBD333A580D24AC5.exe

Processes

C:\Users\Admin\AppData\Local\Temp\075F9A8B9A5A3F3C221CFA69BA8B3590CFB873946970B7F3DBD333A580D24AC5.exe
"C:\Users\Admin\AppData\Local\Temp\075F9A8B9A5A3F3C221CFA69BA8B3590CFB873946970B7F3DBD333A580D24AC5.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2220

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads