3b61757c276c9f823c8d49f5322338891335c6ea17649ba0b39e36237d5d399d

Submit
Reports

Overview

overview

Static

static

8200755cbe...33.exe

windows7-x64

8200755cbe...33.exe

windows10-2004-x64

29c7e87350...5b.exe

windows7-x64

29c7e87350...5b.exe

windows10-2004-x64

49cccd30a5...90.exe

windows7-x64

49cccd30a5...90.exe

windows10-2004-x64

b17911ddea...82.exe

windows7-x64

b17911ddea...82.exe

windows10-2004-x64

02ca4397da...51.exe

windows7-x64

02ca4397da...51.exe

windows10-2004-x64

022aeb126d...74.exe

windows7-x64

022aeb126d...74.exe

windows10-2004-x64

smb-7teux2sm.exe

windows7-x64

smb-7teux2sm.exe

windows10-2004-x64

smb-onil0o36.exe

windows7-x64

smb-onil0o36.exe

windows10-2004-x64

malware-sa...ab.exe

windows7-x64

malware-sa...ab.exe

windows10-2004-x64

malware-sa...1).exe

windows7-x64

malware-sa...1).exe

windows10-2004-x64

malware-sa...n.xlsx

windows7-x64

malware-sa...n.xlsx

windows10-2004-x64

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
03-03-2024 12:57

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

8200755cbedd6f15eecd8207eba534709a01957b172d7a051b9cc4769ddbf233.exe

Resource

win7-20240221-en

evasion

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

8200755cbedd6f15eecd8207eba534709a01957b172d7a051b9cc4769ddbf233.exe

Resource

win10v2004-20240226-en

evasion

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral3

Sample

29c7e87350cb03428fc108b03856095b.exe

Resource

win7-20240220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

29c7e87350cb03428fc108b03856095b.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

49cccd30a564410d1f9bbce89fa15890.exe

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

49cccd30a564410d1f9bbce89fa15890.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

b17911ddeab973db51362721c940d882.exe

Resource

win7-20240215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

b17911ddeab973db51362721c940d882.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

02ca4397da55b3175aaa1ad2c99981e792f66151.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

02ca4397da55b3175aaa1ad2c99981e792f66151.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

022aeb126d2d80e683f7f2a3ee920874.exe

Resource

win7-20240221-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

022aeb126d2d80e683f7f2a3ee920874.exe

Resource

win10v2004-20240226-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

smb-7teux2sm.exe

Resource

win7-20240220-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

smb-7teux2sm.exe

Resource

win10v2004-20240226-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

smb-onil0o36.exe

Resource

win7-20240221-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

smb-onil0o36.exe

Resource

win10v2004-20240226-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

malware-samples-master/Ransomware/Grandcrab/grandcab.exe

Resource

win7-20240220-en

gandcrab backdoor ransomware

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

malware-samples-master/Ransomware/Grandcrab/grandcab.exe

Resource

win10v2004-20240226-en

gandcrab backdoor ransomware

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral19

Sample

malware-samples-master/Ransomware/Petya/4c1dc737915d76b7ce579abddaba74ead6fdb5b519a1ea45308b8c49b950655c (1).exe

Resource

win7-20240215-en

bootkit persistence

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

malware-samples-master/Ransomware/Petya/4c1dc737915d76b7ce579abddaba74ead6fdb5b519a1ea45308b8c49b950655c (1).exe

Resource

win10v2004-20240226-en

bootkit persistence

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

malware-samples-master/mitre-attack/Emotet+Trickbot_comparison.xlsx

Resource

win7-20240221-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral22

Sample

malware-samples-master/mitre-attack/Emotet+Trickbot_comparison.xlsx

Resource

win10v2004-20240226-en

windows10-2004-x64

4 signatures

150 seconds

Report Analysis Logs

General

Target

b17911ddeab973db51362721c940d882.exe
Size

76KB
MD5

b17911ddeab973db51362721c940d882
SHA1

9cc11b7f5eaef6dcbb09bf8af99c24a8292f6a0c
SHA256

1515cf2bace264bdecb76a9ac6691084ca5cd77d4d6715b96dc140dddb5c4f8b
SHA512

bac484f81ef2edf8900e0ffaf1547cef174b1f471a0e4d2d946a6e5ec2cd207693e42104d55e3ffdda0ce3c03374a9ca04e323bccebc688ddad4074d429802a4
SSDEEP

1536:nlPR0uxKlV528faprA64cJdDf/BOHvH2vXKNf1BnJNP7dcF:BRMM8fupdr/ONf1NjdY

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\b17911ddeab973db51362721c940d882.exe
"C:\Users\Admin\AppData\Local\Temp\b17911ddeab973db51362721c940d882.exe"
1⤵
PID:3280

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3280-0-0x0000000000400000-0x0000000000425000-memory.dmp

Filesize
148KB

Download
memory/3280-1-0x0000000000400000-0x0000000000425000-memory.dmp

Filesize
148KB

Download