2a45e44be359fba4c85591e7b13d1ec772ed181adc41254d8b00d31b2d15878e | Triage

Submit
Reports

Overview

overview

Static

static

3

000.exe

windows7-x64

000.exe

windows10-1703-x64

000.exe

windows10-2004-x64

1

000.exe

windows11-21h2-x64

Ana.exe

windows7-x64

8

Ana.exe

windows10-1703-x64

7

Ana.exe

windows10-2004-x64

Ana.exe

windows11-21h2-x64

Bad Rabit.exe

windows7-x64

Bad Rabit.exe

windows10-1703-x64

Bad Rabit.exe

windows10-2004-x64

Bad Rabit.exe

windows11-21h2-x64

Desktop Puzzle.exe

windows7-x64

1

Desktop Puzzle.exe

windows10-1703-x64

1

Desktop Puzzle.exe

windows10-2004-x64

1

Desktop Puzzle.exe

windows11-21h2-x64

1

Memz.exe

windows7-x64

6

Memz.exe

windows10-1703-x64

7

Memz.exe

windows10-2004-x64

Memz.exe

windows11-21h2-x64

6

NoEscape.exe

windows7-x64

1

NoEscape.exe

windows10-1703-x64

NoEscape.exe

windows10-2004-x64

NoEscape.exe

windows11-21h2-x64

WannaCrypt0r.exe

windows7-x64

WannaCrypt0r.exe

windows10-1703-x64

WannaCrypt0r.exe

windows10-2004-x64

WannaCrypt0r.exe

windows11-21h2-x64

Resubmissions

08-05-2024 16:15

240508-tqnx6ach3w 10

08-05-2024 16:07

240508-tkr3mafa54 10

01-05-2024 18:02

240501-wmf49acg3s 6

27-04-2024 08:46

240427-kpfeysff8s 10

25-04-2024 21:25

240425-z9y55afb7v 10

25-04-2024 21:16

240425-z4pphafa97 10

25-04-2024 18:27

240425-w3929sde33 10

25-04-2024 18:17

240425-ww4a5sdc8x 10

Analysis

max time kernel
164s
max time network
175s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
19-04-2024 10:18

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

000.exe

Resource

win7-20240221-en

evasion persistence ransomware

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

000.exe

Resource

win10-20240404-en

evasion persistence ransomware

windows10-1703-x64

10 signatures

150 seconds

Behavioral task

behavioral3

Sample

000.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

000.exe

Resource

win11-20240412-en

evasion persistence ransomware

windows11-21h2-x64

10 signatures

150 seconds

Behavioral task

behavioral5

Sample

Ana.exe

Resource

win7-20240221-en

bootkit discovery evasion persistence trojan upx

windows7-x64

17 signatures

150 seconds

Behavioral task

behavioral6

Sample

Ana.exe

Resource

win10-20240404-en

bootkit discovery evasion persistence trojan upx

windows10-1703-x64

12 signatures

150 seconds

Behavioral task

behavioral7

Sample

Ana.exe

Resource

win10v2004-20240412-en

bootkit discovery evasion persistence trojan upx

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral8

Sample

Ana.exe

Resource

win11-20240412-en

windows11-21h2-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

Bad Rabit.exe

Resource

win7-20240220-en

badrabbit mimikatz ransomware

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral10

Sample

Bad Rabit.exe

Resource

win10-20240404-en

badrabbit mimikatz ransomware

windows10-1703-x64

9 signatures

150 seconds

Behavioral task

behavioral11

Sample

Bad Rabit.exe

Resource

win10v2004-20240412-en

badrabbit mimikatz ransomware

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral12

Sample

Bad Rabit.exe

Resource

win11-20240412-en

badrabbit mimikatz ransomware

windows11-21h2-x64

10 signatures

150 seconds

Behavioral task

behavioral13

Sample

Desktop Puzzle.exe

Resource

win7-20231129-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

Desktop Puzzle.exe

Resource

win10-20240404-en

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

Desktop Puzzle.exe

Resource

win10v2004-20240412-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

Desktop Puzzle.exe

Resource

win11-20240412-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

Memz.exe

Resource

win7-20240220-en

bootkit persistence

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral18

Sample

Memz.exe

Resource

win10-20240404-en

bootkit persistence

windows10-1703-x64

14 signatures

150 seconds

Behavioral task

behavioral19

Sample

Memz.exe

Resource

win10v2004-20240412-en

bootkit persistence

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral20

Sample

Memz.exe

Resource

win11-20240412-en

bootkit persistence

windows11-21h2-x64

11 signatures

150 seconds

Behavioral task

behavioral21

Sample

NoEscape.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

NoEscape.exe

Resource

win10-20240319-en

evasion persistence ransomware trojan

windows10-1703-x64

12 signatures

150 seconds

Behavioral task

behavioral23

Sample

NoEscape.exe

Resource

win10v2004-20240412-en

evasion persistence ransomware trojan

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral24

Sample

NoEscape.exe

Resource

win11-20240412-en

evasion persistence ransomware trojan

windows11-21h2-x64

12 signatures

150 seconds

Behavioral task

behavioral25

Sample

WannaCrypt0r.exe

Resource

win7-20240221-en

wannacry discovery ransomware spyware stealer worm

windows7-x64

16 signatures

150 seconds

Behavioral task

behavioral26

Sample

WannaCrypt0r.exe

Resource

win10-20240404-en

wannacry discovery ransomware spyware stealer worm

windows10-1703-x64

16 signatures

150 seconds

Behavioral task

behavioral27

Sample

WannaCrypt0r.exe

Resource

win10v2004-20240226-en

wannacry discovery ransomware spyware stealer worm

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral28

Sample

WannaCrypt0r.exe

Resource

win11-20240412-en

wannacry discovery persistence ransomware spyware stealer worm

windows11-21h2-x64

18 signatures

150 seconds

Report Analysis Logs

General

Target

000.exe
Size

6.7MB
MD5

f2b7074e1543720a9a98fda660e02688
SHA1

1029492c1a12789d8af78d54adcb921e24b9e5ca
SHA256

4ea1f2ecf7eb12896f2cbf8683dae8546d2b8dc43cf7710d68ce99e127c0a966
SHA512

73f9548633bc38bab64b1dd5a01401ef7f5b139163bdf291cc475dbd2613510c4c5e4d7702ecdfa74b49f3c9eaed37ed23b9d8f0064c66123eb0769c8671c6ff
SSDEEP

3072:eaLA1++iCeFj0im6X/AXpT8vVMCcHVcdhghUuz1o9Y:fLJlC6j0CX4XmvWHVcd62uO9

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\000.exe
"C:\Users\Admin\AppData\Local\Temp\000.exe"
1⤵
PID:720

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3972 --field-trial-handle=2280,i,4114443225282860369,4764091921472631035,262144 --variations-seed-version /prefetch:8
1⤵
PID:3544

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/720-0-0x0000000074AB0000-0x0000000075260000-memory.dmp

Filesize
7.7MB

Download
memory/720-1-0x0000000074AB0000-0x0000000075260000-memory.dmp

Filesize
7.7MB

Download
memory/720-2-0x0000000000270000-0x000000000091E000-memory.dmp

Filesize
6.7MB

Download
memory/720-3-0x0000000005400000-0x0000000005410000-memory.dmp

Filesize
64KB

Download

© 2018-2024

Terms | Privacy