56ac86f444037f33eb84d1c4bf10ed74bbbba3a73da2d64f4608b27efef60866

Login
Reports

Overview

overview

Static

static

5geplik.ru.exe

windows7-x64

5geplik.ru.exe

windows10-2004-x64

63geplik.ru.exe

windows7-x64

63geplik.ru.exe

windows10-2004-x64

64cb427208...2c.exe

windows7-x64

64cb427208...2c.exe

windows10-2004-x64

CheatEngine75.exe

windows7-x64

CheatEngine75.exe

windows10-2004-x64

Screenshot...AM.png

windows7-x64

Screenshot...AM.png

windows10-2004-x64

aware2.0.exe

windows7-x64

aware2.0.exe

windows10-2004-x64

mape2.pyc

windows7-x64

mape2.pyc

windows10-2004-x64

creal.exe

windows7-x64

creal.exe

windows10-2004-x64

creal.pyc

windows7-x64

creal.pyc

windows10-2004-x64

geplik (2).ru666.exe

windows7-x64

geplik (2).ru666.exe

windows10-2004-x64

geplik ru.js

windows7-x64

geplik ru.js

windows10-2004-x64

geplik.ru.exe

windows7-x64

geplik.ru.exe

windows10-2004-x64

geplik.ru2.exe

windows7-x64

geplik.ru2.exe

windows10-2004-x64

geplik.ru3.exe

windows7-x64

geplik.ru3.exe

windows10-2004-x64

geplik.ru4.exe

windows7-x64

geplik.ru4.exe

windows10-2004-x64

geplik.ru666.exe

windows7-x64

geplik.ru666.exe

windows10-2004-x64

Analysis

max time kernel
119s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08/03/2024, 22:26

Sharing

Copy URL Twitter E-mail

Static task

static1

9 signatures

Behavioral task

behavioral1

Sample

5geplik.ru.exe

Resource

win7-20240221-en

windows7-x64

5 signatures

150 seconds

xtremerat persistence rat spyware upx

Behavioral task

behavioral2

Sample

5geplik.ru.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

6 signatures

150 seconds

xtremerat persistence rat spyware upx

Behavioral task

behavioral3

Sample

63geplik.ru.exe

Resource

win7-20240221-en

windows7-x64

20 signatures

150 seconds

amadey smokeloader backdoor evasion persistence trojan upx

Behavioral task

behavioral4

Sample

63geplik.ru.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

32 signatures

150 seconds

amadey lumma redline smokeloader livetraffic backdoor evasion infostealer persistence spyware stealer trojan upx

Behavioral task

behavioral5

Sample

64cb42720817fd92283fc9dfac1e96dd1518d3ac0cd542701e14938f900b212c.exe

Resource

win7-20240221-en

windows7-x64

6 signatures

150 seconds

persistence spyware stealer

Behavioral task

behavioral6

Sample

64cb42720817fd92283fc9dfac1e96dd1518d3ac0cd542701e14938f900b212c.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

6 signatures

150 seconds

persistence spyware stealer

Behavioral task

behavioral7

Sample

CheatEngine75.exe

Resource

win7-20240220-en

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral8

Sample

CheatEngine75.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral9

Sample

Screenshot 2024-01-15 8.57.49 AM.png

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Screenshot 2024-01-15 8.57.49 AM.png

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

aware2.0.exe

Resource

win7-20240221-en

windows7-x64

7 signatures

150 seconds

pyinstaller themida

Behavioral task

behavioral12

Sample

aware2.0.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

16 signatures

150 seconds

gozi banker isfb pyinstaller spyware stealer themida trojan

Behavioral task

behavioral13

Sample

mape2.pyc

Resource

win7-20240221-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

mape2.pyc

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

creal.exe

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

creal.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

9 signatures

150 seconds

spyware stealer

Behavioral task

behavioral17

Sample

creal.pyc

Resource

win7-20240221-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral18

Sample

creal.pyc

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

geplik (2).ru666.exe

Resource

win7-20240220-en

windows7-x64

21 signatures

150 seconds

pony discovery evasion persistence rat spyware stealer upx

Behavioral task

behavioral20

Sample

geplik (2).ru666.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

23 signatures

150 seconds

pony discovery evasion persistence rat spyware stealer upx

Behavioral task

behavioral21

Sample

geplik ru.js

Resource

win7-20231129-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral22

Sample

geplik ru.js

Resource

win10v2004-20240226-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral23

Sample

geplik.ru.exe

Resource

win7-20240221-en

windows7-x64

17 signatures

150 seconds

djvu smokeloader pub1 backdoor discovery persistence ransomware trojan

Behavioral task

behavioral24

Sample

geplik.ru.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

20 signatures

150 seconds

djvu smokeloader pub1 backdoor discovery persistence ransomware trojan

Behavioral task

behavioral25

Sample

geplik.ru2.exe

Resource

win7-20240221-en

windows7-x64

9 signatures

150 seconds

amadey evasion trojan

Behavioral task

behavioral26

Sample

geplik.ru2.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

23 signatures

150 seconds

amadey lumma redline livetraffic discovery evasion infostealer spyware stealer trojan

Behavioral task

behavioral27

Sample

geplik.ru3.exe

Resource

win7-20240221-en

windows7-x64

13 signatures

150 seconds

zgrat rat upx

Behavioral task

behavioral28

Sample

geplik.ru3.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

21 signatures

150 seconds

zgrat rat spyware stealer upx

Behavioral task

behavioral29

Sample

geplik.ru4.exe

Resource

win7-20240221-en

windows7-x64

29 signatures

150 seconds

neshta xworm zgrat persistence rat spyware stealer trojan

Behavioral task

behavioral30

Sample

geplik.ru4.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

16 signatures

150 seconds

phorphiex evasion loader persistence trojan worm

Behavioral task

behavioral31

Sample

geplik.ru666.exe

Resource

win7-20240220-en

windows7-x64

14 signatures

150 seconds

redline sectoprat cheat discovery infostealer rat spyware stealer trojan

Behavioral task

behavioral32

Sample

geplik.ru666.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

9 signatures

150 seconds

redline sectoprat cheat discovery infostealer rat spyware stealer trojan

Report Analysis Logs

General

Target
Screenshot 2024-01-15 8.57.49 AM.png
Size 88KB
Sample240308-2cw1lsaa51
SHA256 7d8c6e8fda24e1a038f0741982d9e62fc53ba2502d8371f4ec38b74525a68684
MD5 9a7656a88a1945967f4df3cf49348bca
SHA1 a137dbab438ba26f66b0214f4ceeeb235ed554b8
SHA512 b08d45b2739a838bb904a87f5daf2b1ff835d29f964fafca5a0f5957f7f3224aa23993e5cafef07d96b7d15a269100edc92eb398aab78c038a374a54b4e2ff84
SSDEEP 1536:TY+l3aCrlVXnKXz/rIBi8FvI3vaPInmSNxgNlTlCNmlFfPmmfpGWLtWB:cgaUKj/EBDFv4aPdSOPCNYHbceMB
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe "C:\Program Files\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen "C:\Users\Admin\AppData\Local\Temp\Screenshot 2024-01-15 8.57.49 AM.png"
1⤵
PID:2320

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads