7d69e0d82e74059115486fae5dd5ac6463c7fccd91dbbcaa9587117c7d201ddb

Login
Reports

Overview

overview

Static

static

068428a4ac...26.exe

windows11-21h2-x64

0c4791a6b4...ea.elf

windows11-21h2-x64

0d9bd2ae2e...ea.exe

windows11-21h2-x64

0fa00d4f4f...70.dll

windows11-21h2-x64

10de02fec8...d1.bat

windows11-21h2-x64

1157191701...32.exe

windows11-21h2-x64

16e81343ec...a5.exe

windows11-21h2-x64

17691f0962...b7.elf

windows11-21h2-x64

17c24104e8...12.exe

windows11-21h2-x64

1816cd993d...28.exe

windows11-21h2-x64

1b8cda768b...8a.elf

windows11-21h2-x64

1df6acbc11...b7.elf

windows11-21h2-x64

1e7706ed04...b0.elf

windows11-21h2-x64

1f580428fa...2c.elf

windows11-21h2-x64

257fc477b9...cc.elf

windows11-21h2-x64

262a10ee37...50.elf

windows11-21h2-x64

267909cf4a...e7.bat

windows11-21h2-x64

2796760675...13.elf

windows11-21h2-x64

27e181c699...8c.elf

windows11-21h2-x64

2b4b073178...74.elf

windows11-21h2-x64

2b5bf75c0a...35.exe

windows11-21h2-x64

2bac99f5be...ec.elf

windows11-21h2-x64

2cfeefaa13...50.elf

windows11-21h2-x64

2e48ee0fb3...66.exe

windows11-21h2-x64

2e4d872360...5b.exe

windows11-21h2-x64

31b6a60839...1b.exe

windows11-21h2-x64

320ccae2e9...0d.exe

windows11-21h2-x64

3476006a8f...16.apk

windows11-21h2-x64

3545082c16...2e.elf

windows11-21h2-x64

377c3c3679...05.elf

windows11-21h2-x64

3c40413f93...f5.exe

windows11-21h2-x64

cbe27936a3...8b.iso

windows11-21h2-x64

Resubmissions

22/04/2024, 22:02

240422-1xtwbagh6810

22/04/2024, 19:25

240422-x42b7afa6810

19/04/2024, 03:02

240419-djmthsfh8w10

Analysis

max time kernel
1477s
max time network
1502s
platform
windows11-21h2_x64
resource
win11-20240412-en
resource tags

arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system
submitted
22/04/2024, 19:25

Sharing

Copy URL Twitter E-mail

Static task

static1

37 signatures

Behavioral task

behavioral1

Sample

068428a4acb65807251b3b4c0aee2101519fdaebf6db5376863da5add3471f26.exe

Resource

win11-20240412-en

windows11-21h2-x64

5 signatures

1800 seconds

Behavioral task

behavioral2

Sample

0c4791a6b47491a0c43cea0ba54357e391a3c8b23aa28025489bbe43bb9ea6ea.elf

Resource

win11-20240412-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral3

Sample

0d9bd2ae2e4b023047b6c08684e9e5daae76e31cced4c3fdf4640136245f7eea.exe

Resource

win11-20240412-en

windows11-21h2-x64

5 signatures

1800 seconds

upx

Behavioral task

behavioral4

Sample

0fa00d4f4f8e8449883aef7f0459a0fb754d57d55af2b41f5e445f867000fa70.dll

Resource

win11-20240412-en

windows11-21h2-x64

2 signatures

1800 seconds

Behavioral task

behavioral5

Sample

10de02fec8ac3edbf1398e6dd43ddec95a89e0499e1e865a7d9e5289fb2b31d1.bat

Resource

win11-20240412-en

windows11-21h2-x64

4 signatures

1800 seconds

Behavioral task

behavioral6

Sample

11571917015adbf3b5196509e1082c8d415f011cce88bd8b16e9d9c5a39ac432.exe

Resource

win11-20240412-en

windows11-21h2-x64

8 signatures

1800 seconds

Behavioral task

behavioral7

Sample

16e81343ecea6082d76bf1ab26818c3bf56929c92468fae8837c6384b62d05a5.exe

Resource

win11-20240412-en

windows11-21h2-x64

12 signatures

1800 seconds

collection spyware stealer

Behavioral task

behavioral8

Sample

17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf

Resource

win11-20240412-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral9

Sample

17c24104e8e5350eeb7e2a162dec3f6a4d6c70f3f0849e6346fd383d998dcc12.exe

Resource

win11-20240412-en

windows11-21h2-x64

1 signatures

1800 seconds

Behavioral task

behavioral10

Sample

1816cd993ddda970b791b090e6ecb501ef923bdcc0cc5f4a99e18dcdb7093228.exe

Resource

win11-20240412-en

windows11-21h2-x64

11 signatures

1800 seconds

discovery

Behavioral task

behavioral11

Sample

1b8cda768ba75d723b2b0b34cf955f7ec9469b4e33c6fde6494eefd60a139d8a.elf

Resource

win11-20240412-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral12

Sample

1df6acbc1106e17265fde3ab54b2a83fa8f6f39656d7c55481b2dbd66f1114b7.elf

Resource

win11-20240412-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral13

Sample

1e7706ed0492572474cd866f13778cc66c42b614b3d0b1d9af35727c051a50b0.elf

Resource

win11-20240412-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral14

Sample

1f580428fa8afd15832fcd04f5d6832be9f7a7144ff17e19c89d2b07e7f51f2c.elf

Resource

win11-20240412-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral15

Sample

257fc477b9684863e0822cbad3606d76c039be8dd51cdc13b73e74e93d7b04cc.elf

Resource

win11-20240412-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral16

Sample

262a10ee377a4945ce30e115e2ab1bf9ff2fc0f35741bbb72e40f145de24bd50.elf

Resource

win11-20240412-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral17

Sample

267909cf4a62955a35b0fe013afbfd62d7ae1a1eef6d7a24d7ce50db52d48ce7.bat

Resource

win11-20240412-en

windows11-21h2-x64

4 signatures

1800 seconds

Behavioral task

behavioral18

Sample

2796760675e5efbef0319f0285c2e1d07c11b038311c02e16c2407ba57c38413.elf

Resource

win11-20240412-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral19

Sample

27e181c699f14c3e53cabc89941ac40917165cc4be34d2c7f9d6eca0e16b508c.elf

Resource

win11-20240412-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral20

Sample

2b4b073178b573aa181fdc6e8063c778c90f76235d640c186b99278186509e74.elf

Resource

win11-20240412-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral21

Sample

2b5bf75c0aede1169e7aa2b4c760b1852f34990d5b8ce27ca2fa21efa35e0635.exe

Resource

win11-20240412-en

windows11-21h2-x64

12 signatures

1800 seconds

collection spyware stealer

Behavioral task

behavioral22

Sample

2bac99f5be34b649749a4ce8ab7c8103f9dce863cbc490f273c27297b2c465ec.elf

Resource

win11-20240412-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral23

Sample

2cfeefaa133519defee56f4253c7c7f2396d784ed8e09d2212ab5bee6cf52b50.elf

Resource

win11-20240412-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral24

Sample

2e48ee0fb3ddd63efeecd900a9d2bde365e2fe1fcbb3c43c882362ae935c5066.exe

Resource

win11-20240412-en

windows11-21h2-x64

15 signatures

1800 seconds

asyncrat new_n4 rat spyware stealer

Behavioral task

behavioral25

Sample

2e4d8723602c5ffc6409dceb0cb4ced2e749e374a0fcd41fe92e0fd50f817c5b.exe

Resource

win11-20240412-en

windows11-21h2-x64

3 signatures

1800 seconds

blacknet trojan

Behavioral task

behavioral26

Sample

31b6a608393ad6cadd7eadf286795aef37260c9b99e837f1d7a1aa4e9a7f901b.exe

Resource

win11-20240412-en

windows11-21h2-x64

1 signatures

1800 seconds

Behavioral task

behavioral27

Sample

320ccae2e9ae546c56193c24cb12cc54f29a872c08856cc143294dd2cf8a170d.exe

Resource

win11-20240412-en

windows11-21h2-x64

8 signatures

1800 seconds

socks5systemz botnet discovery

Behavioral task

behavioral28

Sample

3476006a8f64bfe72a8b04477f6005293b5854cfbc58bee2ea28e59b58f0e316.apk

Resource

win11-20240412-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral29

Sample

3545082c16d0e05faad342c614b27793ab0ec940a174ab5162dce1787ea8472e.elf

Resource

win11-20240412-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral30

Sample

377c3c3679e44acbc13388ca7ec69f2346b321aa42110fc6ee44a44c54d67105.elf

Resource

win11-20240412-en

windows11-21h2-x64

3 signatures

1800 seconds

Behavioral task

behavioral31

Sample

3c40413f9340d25dc7f2c4358583706b1eb19962cb74669bf8276597e871faf5.exe

Resource

win11-20240412-en

windows11-21h2-x64

5 signatures

1800 seconds

vidar stealer

Behavioral task

behavioral32

Sample

cbe27936a3beb1902517906f7da1d6d3f6ef8d1a0eda5e033f4da436df7cd88b.iso

Resource

win11-20240412-en

windows11-21h2-x64

3 signatures

1800 seconds

Report Analysis Logs

General

Target
0fa00d4f4f8e8449883aef7f0459a0fb754d57d55af2b41f5e445f867000fa70.dll
Size 149KB
Sample240422-x42b7afa68
SHA256 0fa00d4f4f8e8449883aef7f0459a0fb754d57d55af2b41f5e445f867000fa70
MD5 d466c92a9ed1b0dd7a9789d24182b387
SHA1 619c3496cb1494bcabbae38bf78bceb501608a7a
SHA512 2fe67183a79118853f89b97bc0e43b74ce02692be8e5fa4e79e45fb09010d599b961191913c3836652536b2382321d8a5191921965aeea85616127ba2e6ac6bb
SSDEEP 3072:cs2t+jk/d1uce+aD7UKg6THMGANMemOI:E7ufgKg6TsvI
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
640	rundll32.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 640 wrote to memory of 4520	640	rundll32.exe	80
PID 640 wrote to memory of 4520	640	rundll32.exe	80

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0fa00d4f4f8e8449883aef7f0459a0fb754d57d55af2b41f5e445f867000fa70.dll,#1
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of WriteProcessMemory
PID:640
- C:\Windows\system32\rundll32.exe
  C:\Windows\system32\rundll32.exe
  2⤵
  PID:4520

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads