3ca0bf28baacf269c3f6a7215516ae6c2181487f006f192ecac3537595a792c2

Submit
Reports

Overview

overview

Static

static

075F9A8B9A...C5.exe

windows7-x64

075F9A8B9A...C5.exe

windows10-2004-x64

145F7ABE9A...EA.exe

windows7-x64

145F7ABE9A...EA.exe

windows10-2004-x64

1A99AC759F...31.exe

windows7-x64

1A99AC759F...31.exe

windows10-2004-x64

1BE33E4291...2D.exe

windows7-x64

1BE33E4291...2D.exe

windows10-2004-x64

2188BAE387...0C.dll

windows7-x64

2188BAE387...0C.dll

windows10-2004-x64

22F524ABC9...92.exe

windows7-x64

22F524ABC9...92.exe

windows10-2004-x64

33381793BD...5E.exe

windows7-x64

33381793BD...5E.exe

windows10-2004-x64

61C0810A23...A1.exe

windows7-x64

61C0810A23...A1.exe

windows10-2004-x64

676A2A0D88...CB.exe

windows7-x64

676A2A0D88...CB.exe

windows10-2004-x64

73D29DEAC4...09.exe

windows7-x64

73D29DEAC4...09.exe

windows10-2004-x64

81EFD50EB3...29.exe

windows7-x64

81EFD50EB3...29.exe

windows10-2004-x64

8E83C0F656...07.exe

windows7-x64

8E83C0F656...07.exe

windows10-2004-x64

99CA9F3245...E2.exe

windows7-x64

99CA9F3245...E2.exe

windows10-2004-x64

B1E12D0216...06.exe

windows7-x64

B1E12D0216...06.exe

windows10-2004-x64

C6185A23C5...C8.exe

windows7-x64

C6185A23C5...C8.exe

windows10-2004-x64

CDCFEDDB0A...3E.exe

windows7-x64

CDCFEDDB0A...3E.exe

windows10-2004-x64

Analysis

max time kernel
143s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
12-01-2024 14:20

Sharing

Copy URL

Twitter E-mail

Static task

static1

9 signatures

Behavioral task

behavioral1

Sample

075F9A8B9A5A3F3C221CFA69BA8B3590CFB873946970B7F3DBD333A580D24AC5.exe

Resource

win7-20231215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

075F9A8B9A5A3F3C221CFA69BA8B3590CFB873946970B7F3DBD333A580D24AC5.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

145F7ABE9ABFFD0422F1C1F4CF429E89FD9D3BE93E6C3A0DD852DB708992C4EA.exe

Resource

win7-20231215-en

privateloader loader

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral4

Sample

145F7ABE9ABFFD0422F1C1F4CF429E89FD9D3BE93E6C3A0DD852DB708992C4EA.exe

Resource

win10v2004-20231215-en

privateloader risepro loader stealer

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral5

Sample

1A99AC759FCD881729B76C2904476B4201E794DF2D0547C954EA37BE7C153131.exe

Resource

win7-20231215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

1A99AC759FCD881729B76C2904476B4201E794DF2D0547C954EA37BE7C153131.exe

Resource

win10v2004-20231222-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

1BE33E42910515D58685E4CEE83C4C9B7DE4E6A155A6FD936922682A9922D42D.exe

Resource

win7-20231215-en

xmrig evasion miner persistence upx

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral8

Sample

1BE33E42910515D58685E4CEE83C4C9B7DE4E6A155A6FD936922682A9922D42D.exe

Resource

win10v2004-20231215-en

xmrig evasion miner persistence upx

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral9

Sample

2188BAE387FD2665D807D0B67B916973478CBE417D2042A146C8EADF77AF600C.dll

Resource

win7-20231129-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

2188BAE387FD2665D807D0B67B916973478CBE417D2042A146C8EADF77AF600C.dll

Resource

win10v2004-20231222-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

22F524ABC98F958705FEBD3761BEDC85EC1AE859316A653B67C0C01327533092.exe

Resource

win7-20231215-en

phorphiex evasion loader persistence trojan worm

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral12

Sample

22F524ABC98F958705FEBD3761BEDC85EC1AE859316A653B67C0C01327533092.exe

Resource

win10v2004-20231215-en

evasion persistence trojan

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral13

Sample

33381793BD156716647F2C2E14047AA5559E940FF584D3FF6110B96EB701115E.exe

Resource

win7-20231215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

33381793BD156716647F2C2E14047AA5559E940FF584D3FF6110B96EB701115E.exe

Resource

win10v2004-20231222-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

61C0810A23580CF492A6BA4F7654566108331E7A4134C968C2D6A05261B2D8A1.exe

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

61C0810A23580CF492A6BA4F7654566108331E7A4134C968C2D6A05261B2D8A1.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

676A2A0D88A79012300A63092DA090F5B0D0BDFC105541732254E0AE1FEB2FCB.exe

Resource

win7-20231215-en

upx

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral18

Sample

676A2A0D88A79012300A63092DA090F5B0D0BDFC105541732254E0AE1FEB2FCB.exe

Resource

win10v2004-20231215-en

upx

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral19

Sample

73D29DEAC41E022CE77730F74D5EFB0828F56D1F2BEB91FD24ABC867F851FE09.exe

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

73D29DEAC41E022CE77730F74D5EFB0828F56D1F2BEB91FD24ABC867F851FE09.exe

Resource

win10v2004-20231222-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

81EFD50EB374AD2176E2655AF10276079F733C0592E83E3A044253DCBE06F329.exe

Resource

win7-20231129-en

upx

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

81EFD50EB374AD2176E2655AF10276079F733C0592E83E3A044253DCBE06F329.exe

Resource

win10v2004-20231215-en

upx

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

8E83C0F6566169AF1CF6C28670DCEE6EDEB15D0913AA24AD3831C9F97EB42307.exe

Resource

win7-20231215-en

privateloader loader

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

8E83C0F6566169AF1CF6C28670DCEE6EDEB15D0913AA24AD3831C9F97EB42307.exe

Resource

win10v2004-20231222-en

privateloader loader

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

99CA9F3245265C2F9D395B4B3A8554056E481C6FEE98B839C9C5ADB5B79E0DE2.exe

Resource

win7-20231215-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral26

Sample

99CA9F3245265C2F9D395B4B3A8554056E481C6FEE98B839C9C5ADB5B79E0DE2.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral27

Sample

B1E12D0216A946329FE549E09BF481D7DF9E8E3BC3F99BC24D9940CBB8F76F06.exe

Resource

win7-20231215-en

lockbit ransomware spyware stealer

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral28

Sample

B1E12D0216A946329FE549E09BF481D7DF9E8E3BC3F99BC24D9940CBB8F76F06.exe

Resource

win10v2004-20231215-en

lockbit ransomware

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral29

Sample

C6185A23C51B8AC77E6C1BDF2CD4A8D39B02AF8B8027D4162CF9766D19CF87C8.exe

Resource

win7-20231215-en

privateloader loader vmprotect

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral30

Sample

C6185A23C51B8AC77E6C1BDF2CD4A8D39B02AF8B8027D4162CF9766D19CF87C8.exe

Resource

win10v2004-20231215-en

privateloader loader vmprotect

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

CDCFEDDB0ACA42E65E6A4822C1F23DF7C4AE92775EBCC0B45D4160B732B0983E.exe

Resource

win7-20231215-en

phorphiex evasion loader persistence trojan worm

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral32

Sample

CDCFEDDB0ACA42E65E6A4822C1F23DF7C4AE92775EBCC0B45D4160B732B0983E.exe

Resource

win10v2004-20231215-en

phorphiex evasion loader persistence trojan worm

windows10-2004-x64

8 signatures

150 seconds

Report Analysis Logs

General

Target

1A99AC759FCD881729B76C2904476B4201E794DF2D0547C954EA37BE7C153131.exe
Size

3.0MB
MD5

f1c9c05e648e58b6bef8dada7654a88e
SHA1

51e14be2940ae38c6428bf33bb8a9a08ae36ec69
SHA256

1a99ac759fcd881729b76c2904476b4201e794df2d0547c954ea37be7c153131
SHA512

fb21745b64fa2168103a26e1c36f64147d4a7c0a0a9480cdda3d0a01406f2032e928451157f77f46840071fb30de51e0119dc434a2ac6ff39f99ed3a5af976ce
SSDEEP

49152:JVHFXSFEmqiDqCbS1gickV9/Txt17kLz5P3mucJZCliSAbFXHrZy0HCxgdjmyZ3H:JVHFXSCmqsSgfkV99jkLlP2bClDC9Fjd

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3600	4820	WerFault.exe	16

Processes

C:\Users\Admin\AppData\Local\Temp\1A99AC759FCD881729B76C2904476B4201E794DF2D0547C954EA37BE7C153131.exe
"C:\Users\Admin\AppData\Local\Temp\1A99AC759FCD881729B76C2904476B4201E794DF2D0547C954EA37BE7C153131.exe"
1⤵
PID:4820
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4820 -s 520
  2⤵
  - Program crash
  PID:3600

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4820 -ip 4820
1⤵
PID:1720

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads