165fb59360683122125271d668cfb28c3ad9502d559e491856005178fb22a254

Submit
Reports

Overview

overview

Static

static

The-MALWAR...ot.exe

windows10-1703-x64

The-MALWAR...ll.exe

windows10-1703-x64

The-MALWAR...BS.exe

windows10-1703-x64

The-MALWAR...in.exe

windows10-1703-x64

The-MALWAR....A.exe

windows10-1703-x64

The-MALWAR....A.exe

windows10-1703-x64

The-MALWAR....A.dll

windows10-1703-x64

The-MALWAR...r.xlsm

windows10-1703-x64

The-MALWAR...36c859

windows10-1703-x64

The-MALWAR...caa742

windows10-1703-x64

The-MALWAR...c1a732

windows10-1703-x64

The-MALWAR...57c046

windows10-1703-x64

The-MALWAR...4cde86

windows10-1703-x64

The-MALWAR...460a01

windows10-1703-x64

The-MALWAR...ece0c5

windows10-1703-x64

The-MALWAR...257619

windows10-1703-x64

The-MALWAR...fbcc59

windows10-1703-x64

The-MALWAR...54f69c

windows10-1703-x64

The-MALWAR...d539a6

windows10-1703-x64

The-MALWAR...4996dd

windows10-1703-x64

The-MALWAR...8232d5

windows10-1703-x64

The-MALWAR...66b948

windows10-1703-x64

The-MALWAR...f9db86

windows10-1703-x64

The-MALWAR...ea2485

windows10-1703-x64

The-MALWAR...us.exe

windows10-1703-x64

The-MALWAR....a.exe

windows10-1703-x64

The-MALWAR....a.exe

windows10-1703-x64

The-MALWAR...ok.exe

windows10-1703-x64

The-MALWAR...y.html

windows10-1703-x64

The-MALWAR...ft.exe

windows10-1703-x64

The-MALWAR...en.exe

windows10-1703-x64

The-MALWAR...min.js

windows10-1703-x64

Resubmissions

29-04-2024 17:56

240429-wjgllsgg29 10

17-04-2024 14:59

240417-sc15wsef8y 10

16-04-2024 14:20

240416-rnxq6sdg3t 10

Analysis

max time kernel
389s
max time network
1824s
platform
windows10-1703_x64
resource
win10-20240404-de
resource tags

arch:x64arch:x86image:win10-20240404-delocale:de-deos:windows10-1703-x64systemwindows
submitted
16-04-2024 14:20

Sharing

Copy URL

Twitter E-mail

Static task

static1

19 signatures

Behavioral task

behavioral1

Sample

The-MALWARE-Repo-master/Banking-Malware/DanaBot.exe

Resource

win10-20240404-de

danabot banker botnet trojan

windows10-1703-x64

9 signatures

1800 seconds

Behavioral task

behavioral2

Sample

The-MALWARE-Repo-master/Banking-Malware/Dridex/Dridex.JhiSharp.dll.exe

Resource

win10-20240404-de

dridex botnet

windows10-1703-x64

6 signatures

1800 seconds

Behavioral task

behavioral3

Sample

The-MALWARE-Repo-master/Banking-Malware/Dridex/DridexDroppedVBS.exe

Resource

win10-20240404-de

dridex botnet

windows10-1703-x64

6 signatures

1800 seconds

Behavioral task

behavioral4

Sample

The-MALWARE-Repo-master/Banking-Malware/Dridex/DridexLoader.bin.exe

Resource

win10-20240404-de

windows10-1703-x64

5 signatures

1800 seconds

Behavioral task

behavioral5

Sample

The-MALWARE-Repo-master/Banking-Malware/Dridex/Trojan.Dridex.A.exe

Resource

win10-20240404-de

windows10-1703-x64

5 signatures

1800 seconds

Behavioral task

behavioral6

Sample

The-MALWARE-Repo-master/Banking-Malware/Dridex/Trojan.Dridex.A.exe

Resource

win10-20240404-de

dridex botnet

windows10-1703-x64

6 signatures

1800 seconds

Behavioral task

behavioral7

Sample

The-MALWARE-Repo-master/Banking-Malware/Dridex/Trojan.Dridex.A.dll

Resource

win10-20240404-de

persistence

windows10-1703-x64

10 signatures

1800 seconds

Behavioral task

behavioral8

Sample

The-MALWARE-Repo-master/Banking-Malware/Zloader.xlsm

Resource

win10-20240404-de

windows10-1703-x64

8 signatures

1800 seconds

Behavioral task

behavioral9

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/001eb377f0452060012124cb214f658754c7488ccb82e23ec56b2f45a636c859

Resource

win10-20240404-de

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral10

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/041bc20ca8ac3161098cbc976e67e3c0f1b672ad36ecbe22fd21cbd53bcaa742

Resource

win10-20240404-de

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral11

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/0ab8836efcaa62c7daac314e0b7ab1679319b2901578fd9e95ec3476b4c1a732

Resource

win10-20240404-de

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral12

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/103b8404dc64c9a44511675981a09fd01395ee837452d114f1350c295357c046

Resource

win10-20240404-de

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral13

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/2378e76aba1ad6e0c937fb39989217bf0de616fdad4726c0f4233bf5414cde86

Resource

win10-20240404-de

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral14

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/30c150419000d27dafcd5d00702411b2b23b0f5d7e4d0cc729a7d63b2e460a01

Resource

win10-20240404-de

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral15

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/3205603282a636979a55aa1e1be518cd3adcbbe491745d996ceb4b5a4dece0c5

Resource

win10-20240404-de

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral16

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/453468b86856665f2cc0e0e71668c0b6aac8b14326c623995ba5963f22257619

Resource

win10-20240319-de

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral17

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/5fb29fb0136978b9ccf60750af09cec74a257a0ca9c47159ca74dbba21fbcc59

Resource

win10-20240404-de

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral18

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/6fe6808b9cfe654f526108ec61cb5211bb6601d28e192cadf06102073b54f69c

Resource

win10-20240404-de

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral19

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/7745b070943e910e8807e3521ac7b7a01401d131bf6c18a63433f8177ed539a6

Resource

win10-20240404-de

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral20

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/7f18e5b5b7645a80a0d44adf3fecdafcbf937bfe30a4cfb965a1421e034996dd

Resource

win10-20240404-de

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral21

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/90b61cc77bb2d726219fd00ae2d0ecdf6f0fe7078529e87b7ec8e603008232d5

Resource

win10-20240404-de

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral22

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/9384b9e39334479194aacb53cb25ace289b6afe2e41bdc8619b2d2cae966b948

Resource

win10-20240404-de

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral23

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/985ffee662969825146d1b465d068ea4f5f01990d13827511415fd497cf9db86

Resource

win10-20240404-de

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral24

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/d1e82d4a37959a9e6b661e31b8c8c6d2813c93ac92508a2771b2491b04ea2485

Resource

win10-20240404-de

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral25

Sample

The-MALWARE-Repo-master/Email-Worm/Amus.exe

Resource

win10-20240404-de

persistence

windows10-1703-x64

4 signatures

1800 seconds

Behavioral task

behavioral26

Sample

The-MALWARE-Repo-master/Email-Worm/Anap.a.exe

Resource

win10-20240404-de

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral27

Sample

The-MALWARE-Repo-master/Email-Worm/Axam.a.exe

Resource

win10-20240404-de

persistence

windows10-1703-x64

6 signatures

1800 seconds

Behavioral task

behavioral28

Sample

The-MALWARE-Repo-master/Email-Worm/Brontok.exe

Resource

win10-20240404-de

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral29

Sample

The-MALWARE-Repo-master/Email-Worm/BubbleBoy.html

Resource

win10-20240404-de

windows10-1703-x64

7 signatures

1800 seconds

Behavioral task

behavioral30

Sample

The-MALWARE-Repo-master/Email-Worm/Bugsoft.exe

Resource

win10-20240404-de

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral31

Sample

The-MALWARE-Repo-master/Email-Worm/Duksten.exe

Resource

win10-20240404-de

persistence

windows10-1703-x64

4 signatures

1800 seconds

Behavioral task

behavioral32

Sample

The-MALWARE-Repo-master/Email-Worm/Emin.js

Resource

win10-20240404-de

windows10-1703-x64

0 signatures

1800 seconds

Report Analysis Logs

General

Target

The-MALWARE-Repo-master/Email-Worm/Brontok.exe
Size

106KB
MD5

d7506150617460e34645025f1ca2c74b
SHA1

5e7d5daf73a72473795d591f831e8a2054947668
SHA256

941ebf1dc12321bbe430994a55f6e22a1b83cea2fa7d281484ea2dab06353112
SHA512

69e0bd07a8bdbfe066593cdd81acd530b3d12b21e637c1af511b8fee447831b8d822065c5a74a477fe6590962ceff8d64d83ae9c41efd930636921d4d6567f6f
SSDEEP

768:i9R/zAKUQfZw7j4KBHZD8f5R3ETmv48Xxh04UwQaMzl6G1gNov35BMC:0AcwPf5D8rUTmnX9maQ6SgM5

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\The-MALWARE-Repo-master\Email-Worm\Brontok.exe
"C:\Users\Admin\AppData\Local\Temp\The-MALWARE-Repo-master\Email-Worm\Brontok.exe"
1⤵
PID:3728

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3728-0-0x0000000000400000-0x000000000043C000-memory.dmp

Filesize
240KB

Download
memory/3728-1-0x0000000000400000-0x000000000043C000-memory.dmp

Filesize
240KB

Download