ee48174864ae0ef8c1e2da6b91b17c2f1df32195f69173adcc3013bf97c76ad5

Submit
Reports

Overview

overview

Static

static

0383282038...bd.exe

windows7-x64

082060e332...76.exe

windows7-x64

1035f1b289...b8.exe

windows7-x64

24592b8814...b9.exe

windows7-x64

31459fd8f4...d2.exe

windows7-x64

3216f3b1bf...ae.exe

windows7-x64

43026556ea...97.exe

windows7-x64

4499426b05...8b.exe

windows7-x64

79271d57c5...61.exe

windows7-x64

843cd39e4f...29.exe

windows7-x64

847001fe67...7e.exe

windows7-x64

902f0cb92e...ad.exe

windows7-x64

994d023640...94.dll

windows7-x64

a006d20ea6...6b.exe

windows7-x64

aaf476e091...d5.exe

windows7-x64

abb979296b...f1.dll

windows7-x64

b630f84b45...86.exe

windows7-x64

bd37f1c8f1...8e.exe

windows7-x64

c086172b03...77.exe

windows7-x64

c2a620243b...bb.exe

windows7-x64

c3705bab83...3b.exe

windows7-x64

c97d9bbc80...15.exe

windows7-x64

cad20feffc...5d.exe

windows7-x64

d01b92a1d7...c4.dll

windows7-x64

d2a120aa4a...78.exe

windows7-x64

d9f7e34bf8...f1.exe

windows7-x64

da45ff208b...95.exe

windows7-x64

dd0d00fec6...c8.exe

windows7-x64

e8ae1656c2...dc.exe

windows7-x64

ed09a02045...0d.exe

windows7-x64

f0c2927859...a6.exe

windows7-x64

f3771ca98b...50.exe

windows7-x64

Analysis

max time kernel
1563s
max time network
1565s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
26-03-2024 16:54

Sharing

Copy URL

Twitter E-mail

Static task

static1

8 signatures

Behavioral task

behavioral1

Sample

0383282038e4b6b1daa69a9b71bfff42b8091a4004bbe780c98239ada99f77bd.exe

Resource

win7-20231129-en

persistence

windows7-x64

5 signatures

1800 seconds

Behavioral task

behavioral2

Sample

082060e3320870d1d576083e0ee65c06a1104913ae866137f8ca45891c059a76.exe

Resource

win7-20240221-en

ransomware

windows7-x64

1 signatures

1800 seconds

Behavioral task

behavioral3

Sample

1035f1b289e6d88148431da56ed5fb3c3d251b51f38bfd498690537e57a3c8b8.exe

Resource

win7-20240215-en

persistence

windows7-x64

12 signatures

1800 seconds

Behavioral task

behavioral4

Sample

24592b881440b004bfcc51692deef734babdfc0cd5719826bd05ae678584bfb9.exe

Resource

win7-20240221-en

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral5

Sample

31459fd8f4ca241e9f2eedcaddf848d8be9eaa76f05102b30872eedbe6c250d2.exe

Resource

win7-20231129-en

discovery persistence

windows7-x64

13 signatures

1800 seconds

Behavioral task

behavioral6

Sample

3216f3b1bf985c045c18f16e00abcec112149ce8ecad190c620500f5cefb59ae.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral7

Sample

43026556eaa76df4544dd37cc1f708eb3df18b7e33969042b343c2b8be4ff697.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral8

Sample

4499426b05f7f17b48d3aa805681c53aed09b5b48e25c9070c08dbfae464698b.exe

Resource

win7-20240319-en

upx

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral9

Sample

79271d57c531c79536bc0be0d71e3a372bed9c10689257a7727475ab41e3e161.exe

Resource

win7-20240319-en

bootkit persistence

windows7-x64

13 signatures

1800 seconds

Behavioral task

behavioral10

Sample

843cd39e4f5024ef36fdc142bf2eb9d9dcc05f0b8f7f812d49ddac8a2bf83f29.exe

Resource

win7-20240221-en

discovery evasion persistence trojan

windows7-x64

14 signatures

1800 seconds

Behavioral task

behavioral11

Sample

847001fe67b260c91fdc360297f6758598c41eb78fc4aae6adc4a4e2dd813b7e.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral12

Sample

902f0cb92e46d9d3028a9e5b52975f66142648ac90007032aafa9b1e2b5263ad.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral13

Sample

994d02364001319f2a3fd9318a2f760c79d7dcfddb177940e22cb60765992094.dll

Resource

win7-20240221-en

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral14

Sample

a006d20ea64758a5219d6a8833a593d99b47c2301e17be2e07593c1565de086b.exe

Resource

win7-20240221-en

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral15

Sample

aaf476e09142ae0b67a0696e3c5d202cda7081c9365f352cfb82068a80e265d5.exe

Resource

win7-20240221-en

evasion

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral16

Sample

abb979296b15798893029044f06c97a2e98f4ec044c0c34ac27a0dd6bb0b0ff1.dll

Resource

win7-20240221-en

upx

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral17

Sample

b630f84b4573831a769170ce7efe73a107b7cd457f499d29fbb622db5c717086.exe

Resource

win7-20240215-en

windows7-x64

1 signatures

1800 seconds

Behavioral task

behavioral18

Sample

bd37f1c8f1a0b1333df616db123305e9c138eb3331c1fd66907d4e9df93a4a8e.exe

Resource

win7-20240221-en

windows7-x64

1 signatures

1800 seconds

Behavioral task

behavioral19

Sample

c086172b03dbcdc6a782dfbbbf1b6b7f71551bc0d10e1044fcd3c7e880e83a77.exe

Resource

win7-20240221-en

discovery evasion persistence trojan

windows7-x64

14 signatures

1800 seconds

Behavioral task

behavioral20

Sample

c2a620243b8c161336d68aaccbb7972f083b3e8e30e0fcfaaf9413e46bcbf1bb.exe

Resource

win7-20240319-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral21

Sample

c3705bab837f5e68ab54a026bf6d23b454f9e6273c919f4d9c43db7c9c37a43b.exe

Resource

win7-20240319-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral22

Sample

c97d9bbc80b573bdeeda3812f4d00e5183493dd0d5805e2508728f65977dda15.exe

Resource

win7-20240319-en

lockergoga banker ransomware spyware stealer trojan

windows7-x64

10 signatures

1800 seconds

Behavioral task

behavioral23

Sample

cad20feffc7b67e394cb667c56211449ccc9c474583e4feacb5c2461dd002c5d.exe

Resource

win7-20240319-en

windows7-x64

3 signatures

1800 seconds

Behavioral task

behavioral24

Sample

d01b92a1d7e00f34549ee537989890699c7ac34c929ea381a4289e49e2d0e4c4.dll

Resource

win7-20240221-en

windows7-x64

3 signatures

1800 seconds

Behavioral task

behavioral25

Sample

d2a120aa4a8aeb87408828d4e7e0da615cb83e32ca5fccc79eee70bca3ea4d78.exe

Resource

win7-20240220-en

dharma persistence ransomware spyware stealer

windows7-x64

17 signatures

1800 seconds

Behavioral task

behavioral26

Sample

d9f7e34bf8a82e137d47849c6397b51a5c127af99c4a843f8f8223687a05daf1.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral27

Sample

da45ff208be5e193a3da424f6025a3b257dff0c67fab84bd6a9028862fd5cb95.exe

Resource

win7-20240221-en

persistence upx

windows7-x64

5 signatures

1800 seconds

Behavioral task

behavioral28

Sample

dd0d00fec6564d52ad291e8f8a99e981a31ba5fbb623076e8e2864f4591e9bc8.exe

Resource

win7-20240221-en

discovery persistence

windows7-x64

12 signatures

1800 seconds

Behavioral task

behavioral29

Sample

e8ae1656c225e8de8e57983db87738630d70036aae6cf1c2b486084edb4aa4dc.exe

Resource

win7-20240221-en

windows7-x64

5 signatures

1800 seconds

Behavioral task

behavioral30

Sample

ed09a020459f1b059bba72c76cd00520c119903b0f8b9fe316a83ced5d66ad0d.exe

Resource

win7-20240221-en

adware stealer

windows7-x64

5 signatures

1800 seconds

Behavioral task

behavioral31

Sample

f0c292785905838d08b27bb99ab260b43fd8de580de80017fdaaab3c3d53d8a6.exe

Resource

win7-20240221-en

ransomware spyware stealer upx

windows7-x64

7 signatures

1800 seconds

Behavioral task

behavioral32

Sample

f3771ca98b3a07606cda74128da5d4292572919418f3045196ea245ef63e9150.exe

Resource

win7-20240319-en

upx

windows7-x64

11 signatures

1800 seconds

Report Analysis Logs

General

Target

bd37f1c8f1a0b1333df616db123305e9c138eb3331c1fd66907d4e9df93a4a8e.exe
Size

356KB
MD5

4c6e0d9f6bf86311b01656b13b383e1c
SHA1

f69f1a80dbce8d1cfed654d22af8435240c23dd6
SHA256

bd37f1c8f1a0b1333df616db123305e9c138eb3331c1fd66907d4e9df93a4a8e
SHA512

7ccb67cd228fae172016c8e56a2f5193f7c4efbfe76b045dbafc3cc0fbc1892c2991c6f7acbe2201728b5a007058bfe32c5bb3761589fc5b96804e82bcb0e5ff
SSDEEP

6144:L1+5xWbgYAsrXqqULirNP1BX79FuOxij5GpuSkh9MmwNWfGy6AiDHN:L1/gYvprNPjLnxqs0twN7SEN

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

bd37f1c8f1a0b1333df616db123305e9c138eb3331c1fd66907d4e9df93a4a8e.exe

pid process

2600 bd37f1c8f1a0b1333df616db123305e9c138eb3331c1fd66907d4e9df93a4a8e.exe

pid	process
2600	bd37f1c8f1a0b1333df616db123305e9c138eb3331c1fd66907d4e9df93a4a8e.exe

Processes

C:\Users\Admin\AppData\Local\Temp\bd37f1c8f1a0b1333df616db123305e9c138eb3331c1fd66907d4e9df93a4a8e.exe
"C:\Users\Admin\AppData\Local\Temp\bd37f1c8f1a0b1333df616db123305e9c138eb3331c1fd66907d4e9df93a4a8e.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2600

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads