0f808fd3ecf9d722aafeee46b57aad4d07f39c98be6f6148be979ed470cf0a99

Submit
Reports

Overview

overview

Static

static

17139a10fd...61.exe

windows7-x64

17139a10fd...61.exe

windows10-2004-x64

1cc7c198a8...cb.exe

windows7-x64

1cc7c198a8...cb.exe

windows10-2004-x64

243dff06fc...60.exe

windows7-x64

243dff06fc...60.exe

windows10-2004-x64

27214dcb04...8f.exe

windows7-x64

27214dcb04...8f.exe

windows10-2004-x64

3dabd40d56...a6.exe

windows7-x64

3dabd40d56...a6.exe

windows10-2004-x64

43e61519be...aa.exe

windows7-x64

43e61519be...aa.exe

windows10-2004-x64

48a848bc9e...3a.exe

windows7-x64

48a848bc9e...3a.exe

windows10-2004-x64

508dd6f7ed...dd.exe

windows7-x64

508dd6f7ed...dd.exe

windows10-2004-x64

516664139b...4b.exe

windows7-x64

516664139b...4b.exe

windows10-2004-x64

533672da9d...8d.exe

windows7-x64

533672da9d...8d.exe

windows10-2004-x64

6228f75f52...ff.exe

windows7-x64

6228f75f52...ff.exe

windows10-2004-x64

6836ec8588...d8.exe

windows7-x64

6836ec8588...d8.exe

windows10-2004-x64

68872cc22f...e7.exe

windows7-x64

68872cc22f...e7.exe

windows10-2004-x64

691515a485...a5.exe

windows7-x64

691515a485...a5.exe

windows10-2004-x64

78782fd324...34.exe

windows7-x64

78782fd324...34.exe

windows10-2004-x64

8cfd289118...bc.exe

windows7-x64

8cfd289118...bc.exe

windows10-2004-x64

Resubmissions

27-01-2024 19:37

240127-yb5pksafd3 10

27-01-2024 19:36

240127-ybqwesafc2 10

12-05-2021 15:56

210512-db4t7vmwas 10

Analysis

max time kernel
147s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
27-01-2024 19:36

Sharing

Copy URL

Twitter E-mail

Static task

static1

upx

2 signatures

Behavioral task

behavioral1

Sample

17139a10fd226d01738fe9323918614aa913b2a50e1a516e95cced93fa151c61.exe

Resource

win7-20231215-en

darkside ransomware spyware stealer

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

17139a10fd226d01738fe9323918614aa913b2a50e1a516e95cced93fa151c61.exe

Resource

win10v2004-20231215-en

darkside ransomware spyware stealer

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral3

Sample

1cc7c198a8a2c935fd6f07970479e544f5b35a8eb3173de0305ebdf76a0988cb.exe

Resource

win7-20231215-en

darkside ransomware spyware stealer

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral4

Sample

1cc7c198a8a2c935fd6f07970479e544f5b35a8eb3173de0305ebdf76a0988cb.exe

Resource

win10v2004-20231215-en

darkside ransomware spyware stealer

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral5

Sample

243dff06fc80a049f4fb37292f8b8def0fce29768f345c88ee10699e22b0ae60.exe

Resource

win7-20231129-en

darkside ransomware spyware stealer

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral6

Sample

243dff06fc80a049f4fb37292f8b8def0fce29768f345c88ee10699e22b0ae60.exe

Resource

win10v2004-20231215-en

darkside ransomware spyware stealer

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral7

Sample

27214dcb04310040c38f8d6a65fe03c14b18d4171390da271855fdd02e06768f.exe

Resource

win7-20231215-en

darkside ransomware spyware stealer

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral8

Sample

27214dcb04310040c38f8d6a65fe03c14b18d4171390da271855fdd02e06768f.exe

Resource

win10v2004-20231215-en

darkside ransomware spyware stealer

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral9

Sample

3dabd40d564cf8a8163432abc38768b0a7d45f0fc1970d802dc33b9109feb6a6.exe

Resource

win7-20231215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

3dabd40d564cf8a8163432abc38768b0a7d45f0fc1970d802dc33b9109feb6a6.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

43e61519be440115eeaa3738a0e4aa4bb3c8ac5f9bdfce1a896db17a374eb8aa.exe

Resource

win7-20231215-en

darkside ransomware spyware stealer

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral12

Sample

43e61519be440115eeaa3738a0e4aa4bb3c8ac5f9bdfce1a896db17a374eb8aa.exe

Resource

win10v2004-20231215-en

darkside ransomware spyware stealer

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral13

Sample

48a848bc9e0f126b41e5ca196707412c7c40087404c0c8ed70e5cee4a418203a.exe

Resource

win7-20231215-en

darkside ransomware spyware stealer

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral14

Sample

48a848bc9e0f126b41e5ca196707412c7c40087404c0c8ed70e5cee4a418203a.exe

Resource

win10v2004-20231215-en

darkside ransomware spyware stealer

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral15

Sample

508dd6f7ed6c143cf5e1ed6a4051dd8ee7b5bf4b7f55e0704d21ba785f2d5add.exe

Resource

win7-20231215-en

darkside ransomware spyware stealer

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral16

Sample

508dd6f7ed6c143cf5e1ed6a4051dd8ee7b5bf4b7f55e0704d21ba785f2d5add.exe

Resource

win10v2004-20231215-en

darkside ransomware spyware stealer

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral17

Sample

516664139b0ddd044397a56482d7308d87c213c320a3151ccb9738e8f932654b.exe

Resource

win7-20231215-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

516664139b0ddd044397a56482d7308d87c213c320a3151ccb9738e8f932654b.exe

Resource

win10v2004-20231222-en

darkside ransomware

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral19

Sample

533672da9d276012ebab3ce9f4cd09a7f537f65c6e4b63d43f0c1697e2f5e48d.exe

Resource

win7-20231129-en

darkside ransomware spyware stealer

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral20

Sample

533672da9d276012ebab3ce9f4cd09a7f537f65c6e4b63d43f0c1697e2f5e48d.exe

Resource

win10v2004-20231222-en

darkside ransomware spyware stealer

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral21

Sample

6228f75f52fd69488419c0e0eb3617b5b894a566a93e52b99a9addced7364cff.exe

Resource

win7-20231129-en

darkside ransomware spyware stealer

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral22

Sample

6228f75f52fd69488419c0e0eb3617b5b894a566a93e52b99a9addced7364cff.exe

Resource

win10v2004-20231215-en

darkside ransomware spyware stealer

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral23

Sample

6836ec8588b8049bcd57cd920b7a75f1e206e5e8bb316927784afadb634ea4d8.exe

Resource

win7-20231215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

6836ec8588b8049bcd57cd920b7a75f1e206e5e8bb316927784afadb634ea4d8.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

68872cc22fbdf0c2f69c32ac878ba9a7b7cf61fe5dd0e3da200131b8b23438e7.exe

Resource

win7-20231215-en

darkside ransomware spyware stealer

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral26

Sample

68872cc22fbdf0c2f69c32ac878ba9a7b7cf61fe5dd0e3da200131b8b23438e7.exe

Resource

win10v2004-20231215-en

darkside ransomware spyware stealer

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral27

Sample

691515a485b0b3989fb71c6807e640eeec1a0e30d90500db6414035d942f70a5.exe

Resource

win7-20231215-en

darkside ransomware spyware stealer

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral28

Sample

691515a485b0b3989fb71c6807e640eeec1a0e30d90500db6414035d942f70a5.exe

Resource

win10v2004-20231215-en

darkside ransomware spyware stealer

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral29

Sample

78782fd324bc98a57274bd3fff8f756217c011484ebf6b614060115a699ee134.exe

Resource

win7-20231215-en

darkside ransomware spyware stealer

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral30

Sample

78782fd324bc98a57274bd3fff8f756217c011484ebf6b614060115a699ee134.exe

Resource

win10v2004-20231215-en

darkside ransomware spyware stealer

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral31

Sample

8cfd28911878af048fb96b6cc0b9da770542576d5c2b20b193c3cfc4bde4d3bc.exe

Resource

win7-20231215-en

darkside ransomware spyware stealer

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral32

Sample

8cfd28911878af048fb96b6cc0b9da770542576d5c2b20b193c3cfc4bde4d3bc.exe

Resource

win10v2004-20231222-en

darkside ransomware spyware stealer

windows10-2004-x64

10 signatures

150 seconds

Report Analysis Logs

General

Target

6836ec8588b8049bcd57cd920b7a75f1e206e5e8bb316927784afadb634ea4d8.exe
Size

40KB
MD5

1c33dc87c6fdb80725d732a5323341f9
SHA1

0aea126a9d01fc5faf06314529b4ff06fdc6f8cd
SHA256

6836ec8588b8049bcd57cd920b7a75f1e206e5e8bb316927784afadb634ea4d8
SHA512

50f915e355e66c264d1eaad3bda01034c99ddc8fdc78b03c653ef0ccb4a250e3d892c3b6131fd153c5b73b0ab7c6649c8465ff8dc02f42efb050f8f76906197b
SSDEEP

384:coyzEpcGhIxJl9JEdauBNa/nu333s8JrxRMt0GNtslmlLpB1pyLloyGw6Bm7lpIN:co4EpThIpEdauX3hS/sj5kGudUj9Vg

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2956 3360 WerFault.exe 6836ec8588b8049bcd57cd920b7a75f1e206e5e8bb316927784afadb634ea4d8.exe

pid	pid_target	process	target process
2956	3360	WerFault.exe	6836ec8588b8049bcd57cd920b7a75f1e206e5e8bb316927784afadb634ea4d8.exe

Processes

C:\Users\Admin\AppData\Local\Temp\6836ec8588b8049bcd57cd920b7a75f1e206e5e8bb316927784afadb634ea4d8.exe
"C:\Users\Admin\AppData\Local\Temp\6836ec8588b8049bcd57cd920b7a75f1e206e5e8bb316927784afadb634ea4d8.exe"
1⤵
PID:3360

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3360 -s 220
2⤵
- Program crash
PID:2956

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3360 -ip 3360
1⤵
PID:1544

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads