3b61757c276c9f823c8d49f5322338891335c6ea17649ba0b39e36237d5d399d | Triage

Submit
Reports

Overview

overview

Static

static

3

malware-sa...er.zip

windows7-x64

1

malware-sa...er.zip

windows10-2004-x64

1

8200755cbe...33.exe

windows7-x64

8

8200755cbe...33.exe

windows10-2004-x64

8

29c7e87350...5b.exe

windows7-x64

1

29c7e87350...5b.exe

windows10-2004-x64

1

49cccd30a5...90.exe

windows7-x64

1

49cccd30a5...90.exe

windows10-2004-x64

9

b17911ddea...82.exe

windows7-x64

1

b17911ddea...82.exe

windows10-2004-x64

1

02ca4397da...51.exe

windows7-x64

1

02ca4397da...51.exe

windows10-2004-x64

1

022aeb126d...74.exe

windows7-x64

9

022aeb126d...74.exe

windows10-2004-x64

9

smb-7teux2sm.exe

windows7-x64

9

smb-7teux2sm.exe

windows10-2004-x64

9

smb-onil0o36.exe

windows7-x64

9

smb-onil0o36.exe

windows10-2004-x64

9

malware-sa...ab.exe

windows7-x64

malware-sa...ab.exe

windows10-2004-x64

malware-sa...1).exe

windows7-x64

6

malware-sa...1).exe

windows10-2004-x64

6

malware-sa...n.xlsx

windows7-x64

1

malware-sa...n.xlsx

windows10-2004-x64

1

Analysis

max time kernel
600s
max time network
600s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
08-03-2024 20:38

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

malware-samples-master.zip

Resource

win7-20240221-en

windows7-x64

0 signatures

600 seconds

Behavioral task

behavioral2

Sample

malware-samples-master.zip

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral3

Sample

8200755cbedd6f15eecd8207eba534709a01957b172d7a051b9cc4769ddbf233.exe

Resource

win7-20231129-en

windows7-x64

10 signatures

600 seconds

Behavioral task

behavioral4

Sample

8200755cbedd6f15eecd8207eba534709a01957b172d7a051b9cc4769ddbf233.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

10 signatures

600 seconds

Behavioral task

behavioral5

Sample

29c7e87350cb03428fc108b03856095b.exe

Resource

win7-20240220-en

windows7-x64

0 signatures

600 seconds

Behavioral task

behavioral6

Sample

29c7e87350cb03428fc108b03856095b.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral7

Sample

49cccd30a564410d1f9bbce89fa15890.exe

Resource

win7-20240220-en

windows7-x64

1 signatures

600 seconds

Behavioral task

behavioral8

Sample

49cccd30a564410d1f9bbce89fa15890.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral9

Sample

b17911ddeab973db51362721c940d882.exe

Resource

win7-20231129-en

windows7-x64

0 signatures

600 seconds

Behavioral task

behavioral10

Sample

b17911ddeab973db51362721c940d882.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral11

Sample

02ca4397da55b3175aaa1ad2c99981e792f66151.exe

Resource

win7-20240215-en

windows7-x64

0 signatures

600 seconds

Behavioral task

behavioral12

Sample

02ca4397da55b3175aaa1ad2c99981e792f66151.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral13

Sample

022aeb126d2d80e683f7f2a3ee920874.exe

Resource

win7-20240221-en

windows7-x64

2 signatures

600 seconds

Behavioral task

behavioral14

Sample

022aeb126d2d80e683f7f2a3ee920874.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral15

Sample

smb-7teux2sm.exe

Resource

win7-20240220-en

windows7-x64

2 signatures

600 seconds

Behavioral task

behavioral16

Sample

smb-7teux2sm.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

600 seconds

Behavioral task

behavioral17

Sample

smb-onil0o36.exe

Resource

win7-20240221-en

windows7-x64

2 signatures

600 seconds

Behavioral task

behavioral18

Sample

smb-onil0o36.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

600 seconds

Behavioral task

behavioral19

Sample

malware-samples-master/Ransomware/Grandcrab/grandcab.exe

Resource

win7-20240221-en

gandcrab backdoor ransomware

windows7-x64

4 signatures

600 seconds

Behavioral task

behavioral20

Sample

malware-samples-master/Ransomware/Grandcrab/grandcab.exe

Resource

win10v2004-20240226-en

gandcrab backdoor ransomware

windows10-2004-x64

6 signatures

600 seconds

Behavioral task

behavioral21

Sample

malware-samples-master/Ransomware/Petya/4c1dc737915d76b7ce579abddaba74ead6fdb5b519a1ea45308b8c49b950655c (1).exe

Resource

win7-20240221-en

bootkit persistence

windows7-x64

2 signatures

600 seconds

Behavioral task

behavioral22

Sample

malware-samples-master/Ransomware/Petya/4c1dc737915d76b7ce579abddaba74ead6fdb5b519a1ea45308b8c49b950655c (1).exe

Resource

win10v2004-20240226-en

bootkit persistence

windows10-2004-x64

2 signatures

600 seconds

Behavioral task

behavioral23

Sample

malware-samples-master/mitre-attack/Emotet+Trickbot_comparison.xlsx

Resource

win7-20240221-en

windows7-x64

5 signatures

600 seconds

Behavioral task

behavioral24

Sample

malware-samples-master/mitre-attack/Emotet+Trickbot_comparison.xlsx

Resource

win10v2004-20240226-en

windows10-2004-x64

4 signatures

600 seconds

Report Analysis Logs

General

Target

smb-7teux2sm.exe
Size

56KB
MD5

f024ff4176f0036f97ebc95decfd1d5e
SHA1

010c623120a373b1a8e6d9339540e0cfe745b574
SHA256

7b2f8c43b4c92fb2add9fce264e92668dac2530493c51c5d6b45dcb764e208ed
SHA512

d52ddb217f3a6bbaa7bde6c9a268720bf7d055796dafa7687a06533507727a05ec45a0dc08d8b3e3149ddc53bb4f6c1cffce2ce71f80d05b49177a390995fd50
SSDEEP

768:1W8+9FisiTNdzkHLCLTXnNuSGgJTPpfl6XWIWsyqA2g8/8WIjl2QDMrL4:1sisiT2LCLT3NuSvp5llTsyqDg8NIRd

Score

9^/10

discovery

Malware Config

Signatures

Contacts a large (44226) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046

Processes

C:\Users\Admin\AppData\Local\Temp\smb-7teux2sm.exe
"C:\Users\Admin\AppData\Local\Temp\smb-7teux2sm.exe"
1⤵
PID:2916

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy