Static task
static1
Behavioral task
behavioral1
Sample
69dcae9687cd4d5f511a73ff7e46784f9d3007d741095753c84ad44a0ed159e4
Resource
win11-20240419-en
General
-
Target
69dcae9687cd4d5f511a73ff7e46784f9d3007d741095753c84ad44a0ed159e4
-
Size
3.5MB
-
MD5
2916378c4b117a4ce82c854f5a7f4a18
-
SHA1
ff5e717e153bad4b36b0daea1de562ca94c81a3a
-
SHA256
69dcae9687cd4d5f511a73ff7e46784f9d3007d741095753c84ad44a0ed159e4
-
SHA512
b44cbf711b0ea6b4e6f428eba3033339cf357ab9ce13508004e7f672071e2dac2d31ced07b2591628fbf136701fdaaf3e14af87aaa060813d6aaca9b1acb7f51
-
SSDEEP
12288:if7cVSgE29xxspm0n1vuz3K9pvZJT3CqQrhryfQNRPaCieMjdvCJv1Vi0ZHtPMOS:ifgdh1Xu
Malware Config
Signatures
-
AgentTesla payload 1 IoCs
Processes:
resource yara_rule sample family_agenttesla -
Agenttesla family
-
DarkTrack payload 1 IoCs
Processes:
resource yara_rule sample family_darktrack -
Darkcomet family
-
Darktrack family
-
Detect LockFile payload 1 IoCs
Processes:
resource yara_rule sample family_lockfile -
Detected Mount Locker ransomware 1 IoCs
Processes:
resource yara_rule sample RANSOM_mountlocker -
Detects Surtr Payload 1 IoCs
Processes:
resource yara_rule sample family_surtr -
Detects Zeppelin payload 1 IoCs
Processes:
resource yara_rule sample family_zeppelin -
Lockfile family
-
Processes:
resource yara_rule sample m00nd3v_logger -
M00nd3v_logger family
-
MassLogger log file 1 IoCs
Detects a log file produced by MassLogger.
Processes:
resource yara_rule sample masslogger_log_file -
Masslogger family
-
Matiex Main payload 1 IoCs
Processes:
resource yara_rule sample family_matiex -
Matiex family
-
Mountlocker family
-
Shurk Stealer payload 1 IoCs
Processes:
resource yara_rule sample shurk_stealer -
Shurk family
-
StormKitty payload 1 IoCs
Processes:
resource yara_rule sample family_stormkitty -
Stormkitty family
-
Surtr family
-
Vulturi family
-
Vulturi payload 1 IoCs
Processes:
resource yara_rule sample family_vulturi -
XMRig Miner payload 1 IoCs
Processes:
resource yara_rule sample family_xmrig -
Xmrig family
-
Zeppelin family
Files
-
69dcae9687cd4d5f511a73ff7e46784f9d3007d741095753c84ad44a0ed159e4