ee48174864ae0ef8c1e2da6b91b17c2f1df32195f69173adcc3013bf97c76ad5

Submit
Reports

Overview

overview

Static

static

0383282038...bd.exe

windows7-x64

082060e332...76.exe

windows7-x64

1035f1b289...b8.exe

windows7-x64

24592b8814...b9.exe

windows7-x64

31459fd8f4...d2.exe

windows7-x64

3216f3b1bf...ae.exe

windows7-x64

43026556ea...97.exe

windows7-x64

4499426b05...8b.exe

windows7-x64

79271d57c5...61.exe

windows7-x64

843cd39e4f...29.exe

windows7-x64

847001fe67...7e.exe

windows7-x64

902f0cb92e...ad.exe

windows7-x64

994d023640...94.dll

windows7-x64

a006d20ea6...6b.exe

windows7-x64

aaf476e091...d5.exe

windows7-x64

abb979296b...f1.dll

windows7-x64

b630f84b45...86.exe

windows7-x64

bd37f1c8f1...8e.exe

windows7-x64

c086172b03...77.exe

windows7-x64

c2a620243b...bb.exe

windows7-x64

c3705bab83...3b.exe

windows7-x64

c97d9bbc80...15.exe

windows7-x64

cad20feffc...5d.exe

windows7-x64

d01b92a1d7...c4.dll

windows7-x64

d2a120aa4a...78.exe

windows7-x64

d9f7e34bf8...f1.exe

windows7-x64

da45ff208b...95.exe

windows7-x64

dd0d00fec6...c8.exe

windows7-x64

e8ae1656c2...dc.exe

windows7-x64

ed09a02045...0d.exe

windows7-x64

f0c2927859...a6.exe

windows7-x64

f3771ca98b...50.exe

windows7-x64

Analysis

max time kernel
248s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
26-03-2024 16:54

Sharing

Copy URL

Twitter E-mail

Static task

static1

8 signatures

Behavioral task

behavioral1

Sample

0383282038e4b6b1daa69a9b71bfff42b8091a4004bbe780c98239ada99f77bd.exe

Resource

win7-20231129-en

persistence

windows7-x64

5 signatures

1800 seconds

Behavioral task

behavioral2

Sample

082060e3320870d1d576083e0ee65c06a1104913ae866137f8ca45891c059a76.exe

Resource

win7-20240221-en

ransomware

windows7-x64

1 signatures

1800 seconds

Behavioral task

behavioral3

Sample

1035f1b289e6d88148431da56ed5fb3c3d251b51f38bfd498690537e57a3c8b8.exe

Resource

win7-20240215-en

persistence

windows7-x64

12 signatures

1800 seconds

Behavioral task

behavioral4

Sample

24592b881440b004bfcc51692deef734babdfc0cd5719826bd05ae678584bfb9.exe

Resource

win7-20240221-en

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral5

Sample

31459fd8f4ca241e9f2eedcaddf848d8be9eaa76f05102b30872eedbe6c250d2.exe

Resource

win7-20231129-en

discovery persistence

windows7-x64

13 signatures

1800 seconds

Behavioral task

behavioral6

Sample

3216f3b1bf985c045c18f16e00abcec112149ce8ecad190c620500f5cefb59ae.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral7

Sample

43026556eaa76df4544dd37cc1f708eb3df18b7e33969042b343c2b8be4ff697.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral8

Sample

4499426b05f7f17b48d3aa805681c53aed09b5b48e25c9070c08dbfae464698b.exe

Resource

win7-20240319-en

upx

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral9

Sample

79271d57c531c79536bc0be0d71e3a372bed9c10689257a7727475ab41e3e161.exe

Resource

win7-20240319-en

bootkit persistence

windows7-x64

13 signatures

1800 seconds

Behavioral task

behavioral10

Sample

843cd39e4f5024ef36fdc142bf2eb9d9dcc05f0b8f7f812d49ddac8a2bf83f29.exe

Resource

win7-20240221-en

discovery evasion persistence trojan

windows7-x64

14 signatures

1800 seconds

Behavioral task

behavioral11

Sample

847001fe67b260c91fdc360297f6758598c41eb78fc4aae6adc4a4e2dd813b7e.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral12

Sample

902f0cb92e46d9d3028a9e5b52975f66142648ac90007032aafa9b1e2b5263ad.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral13

Sample

994d02364001319f2a3fd9318a2f760c79d7dcfddb177940e22cb60765992094.dll

Resource

win7-20240221-en

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral14

Sample

a006d20ea64758a5219d6a8833a593d99b47c2301e17be2e07593c1565de086b.exe

Resource

win7-20240221-en

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral15

Sample

aaf476e09142ae0b67a0696e3c5d202cda7081c9365f352cfb82068a80e265d5.exe

Resource

win7-20240221-en

evasion

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral16

Sample

abb979296b15798893029044f06c97a2e98f4ec044c0c34ac27a0dd6bb0b0ff1.dll

Resource

win7-20240221-en

upx

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral17

Sample

b630f84b4573831a769170ce7efe73a107b7cd457f499d29fbb622db5c717086.exe

Resource

win7-20240215-en

windows7-x64

1 signatures

1800 seconds

Behavioral task

behavioral18

Sample

bd37f1c8f1a0b1333df616db123305e9c138eb3331c1fd66907d4e9df93a4a8e.exe

Resource

win7-20240221-en

windows7-x64

1 signatures

1800 seconds

Behavioral task

behavioral19

Sample

c086172b03dbcdc6a782dfbbbf1b6b7f71551bc0d10e1044fcd3c7e880e83a77.exe

Resource

win7-20240221-en

discovery evasion persistence trojan

windows7-x64

14 signatures

1800 seconds

Behavioral task

behavioral20

Sample

c2a620243b8c161336d68aaccbb7972f083b3e8e30e0fcfaaf9413e46bcbf1bb.exe

Resource

win7-20240319-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral21

Sample

c3705bab837f5e68ab54a026bf6d23b454f9e6273c919f4d9c43db7c9c37a43b.exe

Resource

win7-20240319-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral22

Sample

c97d9bbc80b573bdeeda3812f4d00e5183493dd0d5805e2508728f65977dda15.exe

Resource

win7-20240319-en

lockergoga banker ransomware spyware stealer trojan

windows7-x64

10 signatures

1800 seconds

Behavioral task

behavioral23

Sample

cad20feffc7b67e394cb667c56211449ccc9c474583e4feacb5c2461dd002c5d.exe

Resource

win7-20240319-en

windows7-x64

3 signatures

1800 seconds

Behavioral task

behavioral24

Sample

d01b92a1d7e00f34549ee537989890699c7ac34c929ea381a4289e49e2d0e4c4.dll

Resource

win7-20240221-en

windows7-x64

3 signatures

1800 seconds

Behavioral task

behavioral25

Sample

d2a120aa4a8aeb87408828d4e7e0da615cb83e32ca5fccc79eee70bca3ea4d78.exe

Resource

win7-20240220-en

dharma persistence ransomware spyware stealer

windows7-x64

17 signatures

1800 seconds

Behavioral task

behavioral26

Sample

d9f7e34bf8a82e137d47849c6397b51a5c127af99c4a843f8f8223687a05daf1.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral27

Sample

da45ff208be5e193a3da424f6025a3b257dff0c67fab84bd6a9028862fd5cb95.exe

Resource

win7-20240221-en

persistence upx

windows7-x64

5 signatures

1800 seconds

Behavioral task

behavioral28

Sample

dd0d00fec6564d52ad291e8f8a99e981a31ba5fbb623076e8e2864f4591e9bc8.exe

Resource

win7-20240221-en

discovery persistence

windows7-x64

12 signatures

1800 seconds

Behavioral task

behavioral29

Sample

e8ae1656c225e8de8e57983db87738630d70036aae6cf1c2b486084edb4aa4dc.exe

Resource

win7-20240221-en

windows7-x64

5 signatures

1800 seconds

Behavioral task

behavioral30

Sample

ed09a020459f1b059bba72c76cd00520c119903b0f8b9fe316a83ced5d66ad0d.exe

Resource

win7-20240221-en

adware stealer

windows7-x64

5 signatures

1800 seconds

Behavioral task

behavioral31

Sample

f0c292785905838d08b27bb99ab260b43fd8de580de80017fdaaab3c3d53d8a6.exe

Resource

win7-20240221-en

ransomware spyware stealer upx

windows7-x64

7 signatures

1800 seconds

Behavioral task

behavioral32

Sample

f3771ca98b3a07606cda74128da5d4292572919418f3045196ea245ef63e9150.exe

Resource

win7-20240319-en

upx

windows7-x64

11 signatures

1800 seconds

Report Analysis Logs

General

Target

a006d20ea64758a5219d6a8833a593d99b47c2301e17be2e07593c1565de086b.exe
Size

604KB
MD5

f593184675ecb76af217a216138609e2
SHA1

999c45d495231ae4fb4b9768028759273e0e28b5
SHA256

a006d20ea64758a5219d6a8833a593d99b47c2301e17be2e07593c1565de086b
SHA512

3f4ea7ad5379f46a1517db38673159c02614ecff990c424f7e39156b908da3cd291a29971990349025416f6266792fb217376be37a90bdd79a78caf7a5249cfe
SSDEEP

12288:m8n+q7BpMZ5ztVYnLZj2Cr8Yo+JLya0fcn+Xh3pRz3aMNtziG9wX:JjiQLgCrXo+JL6C+RZVt5M

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

NTFS ADS 1 IoCs

Processes:

a006d20ea64758a5219d6a8833a593d99b47c2301e17be2e07593c1565de086b.exe

description	ioc	process
File created	C:\Users\Admin\AppData\Local\Temp\ ·=HVŒL¿þ2·û]•Mý°](¾‡!:Ÿ‚]T~tBp¯.ï”cµyí$w_ENá¾e	a006d20ea64758a5219d6a8833a593d99b47c2301e17be2e07593c1565de086b.exe

Processes

C:\Users\Admin\AppData\Local\Temp\a006d20ea64758a5219d6a8833a593d99b47c2301e17be2e07593c1565de086b.exe
"C:\Users\Admin\AppData\Local\Temp\a006d20ea64758a5219d6a8833a593d99b47c2301e17be2e07593c1565de086b.exe"
1⤵
- NTFS ADS
PID:2296

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads