0f808fd3ecf9d722aafeee46b57aad4d07f39c98be6f6148be979ed470cf0a99

Submit
Reports

Overview

overview

Static

static

06cfe7f5d8...c8.exe

windows7-x64

06cfe7f5d8...c8.exe

windows10-2004-x64

0839aabe5f...0d.exe

windows7-x64

0839aabe5f...0d.exe

windows10-2004-x64

12ee27f56e...75.exe

windows7-x64

12ee27f56e...75.exe

windows10-2004-x64

151fbd6c29...d5.exe

windows7-x64

151fbd6c29...d5.exe

windows10-2004-x64

1667e16357...43.exe

windows7-x64

1667e16357...43.exe

windows10-2004-x64

17139a10fd...61.exe

windows7-x64

17139a10fd...61.exe

windows10-2004-x64

1cc7c198a8...cb.exe

windows7-x64

1cc7c198a8...cb.exe

windows10-2004-x64

243dff06fc...60.exe

windows7-x64

243dff06fc...60.exe

windows10-2004-x64

27214dcb04...8f.exe

windows7-x64

27214dcb04...8f.exe

windows10-2004-x64

3dabd40d56...a6.exe

windows7-x64

3dabd40d56...a6.exe

windows10-2004-x64

43e61519be...aa.exe

windows7-x64

43e61519be...aa.exe

windows10-2004-x64

48a848bc9e...3a.exe

windows7-x64

48a848bc9e...3a.exe

windows10-2004-x64

508dd6f7ed...dd.exe

windows7-x64

508dd6f7ed...dd.exe

windows10-2004-x64

516664139b...4b.exe

windows7-x64

516664139b...4b.exe

windows10-2004-x64

533672da9d...8d.exe

windows7-x64

533672da9d...8d.exe

windows10-2004-x64

6228f75f52...ff.exe

windows7-x64

6228f75f52...ff.exe

windows10-2004-x64

Resubmissions

27-01-2024 19:37

240127-yb5pksafd3 10

27-01-2024 19:36

240127-ybqwesafc2 10

12-05-2021 15:56

210512-db4t7vmwas 10

Analysis

max time kernel
196s
max time network
281s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
27-01-2024 19:37

Sharing

Copy URL

Twitter E-mail

Static task

static1

upx

2 signatures

Behavioral task

behavioral1

Sample

06cfe7f5d88e82f7adda6d8333ca8b302debb22904c68a942188be5730e9b3c8.exe

Resource

win7-20231215-en

darkside ransomware spyware stealer

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

06cfe7f5d88e82f7adda6d8333ca8b302debb22904c68a942188be5730e9b3c8.exe

Resource

win10v2004-20231222-en

darkside ransomware spyware stealer

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral3

Sample

0839aabe5fd63b16844a27b3c586c02a044d119010a1a40ee4035501c34eae0d.exe

Resource

win7-20231215-en

darkside ransomware spyware stealer

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral4

Sample

0839aabe5fd63b16844a27b3c586c02a044d119010a1a40ee4035501c34eae0d.exe

Resource

win10v2004-20231215-en

darkside ransomware spyware stealer

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral5

Sample

12ee27f56ec8a2a3eb2fe69179be3f7a7193ce2b92963ad33356ed299f7ed975.exe

Resource

win7-20231215-en

darkside ransomware spyware stealer

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral6

Sample

12ee27f56ec8a2a3eb2fe69179be3f7a7193ce2b92963ad33356ed299f7ed975.exe

Resource

win10v2004-20231222-en

darkside ransomware spyware stealer

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral7

Sample

151fbd6c299e734f7853497bd083abfa29f8c186a9db31dbe330ace2d35660d5.exe

Resource

win7-20231129-en

darkside ransomware spyware stealer

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral8

Sample

151fbd6c299e734f7853497bd083abfa29f8c186a9db31dbe330ace2d35660d5.exe

Resource

win10v2004-20231215-en

darkside ransomware spyware stealer

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral9

Sample

1667e1635736f2b2ba9727457f995a67201ddcd818496c9296713ffa18e17a43.exe

Resource

win7-20231129-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

1667e1635736f2b2ba9727457f995a67201ddcd818496c9296713ffa18e17a43.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

17139a10fd226d01738fe9323918614aa913b2a50e1a516e95cced93fa151c61.exe

Resource

win7-20231215-en

darkside ransomware spyware stealer

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral12

Sample

17139a10fd226d01738fe9323918614aa913b2a50e1a516e95cced93fa151c61.exe

Resource

win10v2004-20231215-en

darkside ransomware spyware stealer

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral13

Sample

1cc7c198a8a2c935fd6f07970479e544f5b35a8eb3173de0305ebdf76a0988cb.exe

Resource

win7-20231215-en

darkside ransomware spyware stealer

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral14

Sample

1cc7c198a8a2c935fd6f07970479e544f5b35a8eb3173de0305ebdf76a0988cb.exe

Resource

win10v2004-20231215-en

darkside ransomware spyware stealer

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral15

Sample

243dff06fc80a049f4fb37292f8b8def0fce29768f345c88ee10699e22b0ae60.exe

Resource

win7-20231215-en

darkside ransomware spyware stealer

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral16

Sample

243dff06fc80a049f4fb37292f8b8def0fce29768f345c88ee10699e22b0ae60.exe

Resource

win10v2004-20231222-en

darkside ransomware spyware stealer

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral17

Sample

27214dcb04310040c38f8d6a65fe03c14b18d4171390da271855fdd02e06768f.exe

Resource

win7-20231129-en

ransomware spyware stealer

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral18

Sample

27214dcb04310040c38f8d6a65fe03c14b18d4171390da271855fdd02e06768f.exe

Resource

win10v2004-20231215-en

darkside ransomware spyware stealer

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral19

Sample

3dabd40d564cf8a8163432abc38768b0a7d45f0fc1970d802dc33b9109feb6a6.exe

Resource

win7-20231215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

3dabd40d564cf8a8163432abc38768b0a7d45f0fc1970d802dc33b9109feb6a6.exe

Resource

win10v2004-20231222-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

43e61519be440115eeaa3738a0e4aa4bb3c8ac5f9bdfce1a896db17a374eb8aa.exe

Resource

win7-20231215-en

darkside ransomware spyware stealer

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral22

Sample

43e61519be440115eeaa3738a0e4aa4bb3c8ac5f9bdfce1a896db17a374eb8aa.exe

Resource

win10v2004-20231215-en

darkside ransomware spyware stealer

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral23

Sample

48a848bc9e0f126b41e5ca196707412c7c40087404c0c8ed70e5cee4a418203a.exe

Resource

win7-20231215-en

darkside ransomware spyware stealer

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral24

Sample

48a848bc9e0f126b41e5ca196707412c7c40087404c0c8ed70e5cee4a418203a.exe

Resource

win10v2004-20231215-en

darkside ransomware spyware stealer

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral25

Sample

508dd6f7ed6c143cf5e1ed6a4051dd8ee7b5bf4b7f55e0704d21ba785f2d5add.exe

Resource

win7-20231215-en

darkside ransomware spyware stealer

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral26

Sample

508dd6f7ed6c143cf5e1ed6a4051dd8ee7b5bf4b7f55e0704d21ba785f2d5add.exe

Resource

win10v2004-20231215-en

darkside ransomware spyware stealer

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral27

Sample

516664139b0ddd044397a56482d7308d87c213c320a3151ccb9738e8f932654b.exe

Resource

win7-20231215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

516664139b0ddd044397a56482d7308d87c213c320a3151ccb9738e8f932654b.exe

Resource

win10v2004-20231215-en

darkside ransomware

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral29

Sample

533672da9d276012ebab3ce9f4cd09a7f537f65c6e4b63d43f0c1697e2f5e48d.exe

Resource

win7-20231215-en

darkside ransomware spyware stealer

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral30

Sample

533672da9d276012ebab3ce9f4cd09a7f537f65c6e4b63d43f0c1697e2f5e48d.exe

Resource

win10v2004-20231222-en

darkside ransomware spyware stealer

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral31

Sample

6228f75f52fd69488419c0e0eb3617b5b894a566a93e52b99a9addced7364cff.exe

Resource

win7-20231129-en

darkside ransomware spyware stealer

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral32

Sample

6228f75f52fd69488419c0e0eb3617b5b894a566a93e52b99a9addced7364cff.exe

Resource

win10v2004-20231222-en

darkside ransomware spyware stealer

windows10-2004-x64

11 signatures

150 seconds

Report Analysis Logs

General

Target

1667e1635736f2b2ba9727457f995a67201ddcd818496c9296713ffa18e17a43.exe
Size

40KB
MD5

1a700f845849e573ab3148daef1a3b0b
SHA1

c91ff86a88038b00d9190ebb01e6f8c94b0c83e0
SHA256

1667e1635736f2b2ba9727457f995a67201ddcd818496c9296713ffa18e17a43
SHA512

d7fcf0ef26bbe1d6104c098711ccdfd33655e62045f6975dd3c48ab34888c83b771dfd07682004943bab86b2dbcb7905364becead09c37de3da0b28e8265dc81
SSDEEP

384:woyzEpcGhIxJl9JEdauBNa/nu333s8JrxRMt0GNtslmlLpB1pyLloyGw6Bm7lpIN:wo4EpThIpEdauX3hS/sj5kGudUj9Vg

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4932 5016 WerFault.exe 1667e1635736f2b2ba9727457f995a67201ddcd818496c9296713ffa18e17a43.exe

pid	pid_target	process	target process
4932	5016	WerFault.exe	1667e1635736f2b2ba9727457f995a67201ddcd818496c9296713ffa18e17a43.exe

Processes

C:\Users\Admin\AppData\Local\Temp\1667e1635736f2b2ba9727457f995a67201ddcd818496c9296713ffa18e17a43.exe
"C:\Users\Admin\AppData\Local\Temp\1667e1635736f2b2ba9727457f995a67201ddcd818496c9296713ffa18e17a43.exe"
1⤵
PID:5016

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5016 -s 224
2⤵
- Program crash
PID:4932

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5016 -ip 5016
1⤵
PID:4828

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads