95e217da4c184170c705e9ef317b5d8333713f4f91435d0964e0e2cea03100ab

Submit
Reports

Overview

overview

Static

static

01d63645f4...e3.exe

windows7-x64

01d63645f4...e3.exe

windows10-2004-x64

14bae02cc3...0e.exe

windows7-x64

14bae02cc3...0e.exe

windows10-2004-x64

TNT Origin...ce.exe

windows7-x64

TNT Origin...ce.exe

windows10-2004-x64

402ff605d7...97.exe

windows7-x64

402ff605d7...97.exe

windows10-2004-x64

4d0dfae91f...bf.exe

windows7-x64

4d0dfae91f...bf.exe

windows10-2004-x64

5401a3332d...8e.exe

windows7-x64

5401a3332d...8e.exe

windows10-2004-x64

Autoit3.exe

windows7-x64

Autoit3.exe

windows10-2004-x64

6cfe745f03...d2.exe

windows7-x64

6cfe745f03...d2.exe

windows10-2004-x64

90f19e1a78...ef.exe

windows7-x64

90f19e1a78...ef.exe

windows10-2004-x64

a3eeef65c4...4.xlsx

windows7-x64

a3eeef65c4...4.xlsx

windows10-2004-x64

a71829e150...e5.exe

windows7-x64

a71829e150...e5.exe

windows10-2004-x64

db58eb7713...c4.exe

windows7-x64

db58eb7713...c4.exe

windows10-2004-x64

Analysis

max time kernel
132s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
07-05-2024 14:00

Sharing

Copy URL

Twitter E-mail

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

01d63645f4c648e12fa693ecc9a926eda29ca031c5d067c687ee65cab67e74e3.exe

Resource

win7-20240221-en

collection discovery evasion persistence spyware stealer

windows7-x64

16 signatures

150 seconds

Behavioral task

behavioral2

Sample

01d63645f4c648e12fa693ecc9a926eda29ca031c5d067c687ee65cab67e74e3.exe

Resource

win10v2004-20240419-en

risepro evasion stealer

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral3

Sample

14bae02cc31e4fb13f02aa594d65a977f1fdec305089c415985e11903769ae0e.exe

Resource

win7-20240215-en

guloader downloader execution persistence

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral4

Sample

14bae02cc31e4fb13f02aa594d65a977f1fdec305089c415985e11903769ae0e.exe

Resource

win10v2004-20240419-en

execution

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral5

Sample

TNT Original Invoice.exe

Resource

win7-20231129-en

agenttesla execution keylogger spyware stealer trojan

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral6

Sample

TNT Original Invoice.exe

Resource

win10v2004-20240226-en

agenttesla execution keylogger spyware stealer trojan

windows10-2004-x64

14 signatures

150 seconds

Behavioral task

behavioral7

Sample

402ff605d7f23f20e253e13b8cb1eb7b5b763a00311deba3cf13c9646ae1f397.exe

Resource

win7-20240221-en

risepro evasion stealer themida trojan

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral8

Sample

402ff605d7f23f20e253e13b8cb1eb7b5b763a00311deba3cf13c9646ae1f397.exe

Resource

win10v2004-20240419-en

risepro evasion stealer themida trojan

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral9

Sample

4d0dfae91fed3f9273356eae54dae047b51e374034fd7e8c1e50066c24add6bf.exe

Resource

win7-20240221-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

4d0dfae91fed3f9273356eae54dae047b51e374034fd7e8c1e50066c24add6bf.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

5401a3332d6bf674b3a25eb23745edd09f943284aa4448f9eb6c53620027f28e.exe

Resource

win7-20240221-en

socks5systemz botnet discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral12

Sample

5401a3332d6bf674b3a25eb23745edd09f943284aa4448f9eb6c53620027f28e.exe

Resource

win10v2004-20240419-en

socks5systemz botnet discovery

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral13

Sample

Autoit3.exe

Resource

win7-20240419-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

Autoit3.exe

Resource

win10v2004-20240419-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

6cfe745f03252b83604bf8159f4100e402af25444247e697165c96e2e12f58d2.exe

Resource

win7-20240419-en

dcrat infostealer rat

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral16

Sample

6cfe745f03252b83604bf8159f4100e402af25444247e697165c96e2e12f58d2.exe

Resource

win10v2004-20240419-en

dcrat infostealer rat

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral17

Sample

90f19e1a7843dbee63856899da664d073c2b8fadd0cad368e623d5f7426ba5ef.exe

Resource

win7-20240220-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

90f19e1a7843dbee63856899da664d073c2b8fadd0cad368e623d5f7426ba5ef.exe

Resource

win10v2004-20240419-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

a3eeef65c42890fd372bc7c627b36d2b9d54a909b809663e0f0392fa34766794.xlsx

Resource

win7-20231129-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral20

Sample

a3eeef65c42890fd372bc7c627b36d2b9d54a909b809663e0f0392fa34766794.xlsx

Resource

win10v2004-20240426-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

a71829e150536a415790ed3f8897daab1da879adef2366f75ec939ec0e749de5.exe

Resource

win7-20240221-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

a71829e150536a415790ed3f8897daab1da879adef2366f75ec939ec0e749de5.exe

Resource

win10v2004-20240419-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

db58eb77136d0a35453f949a25df9a2e0d344b389a136f966a1ec2c3c09ef2c4.exe

Resource

win7-20240221-en

socks5systemz botnet discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral24

Sample

db58eb77136d0a35453f949a25df9a2e0d344b389a136f966a1ec2c3c09ef2c4.exe

Resource

win10v2004-20240226-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Report Analysis Logs

General

Target

90f19e1a7843dbee63856899da664d073c2b8fadd0cad368e623d5f7426ba5ef.exe
Size

9.0MB
MD5

ae5ffe6a64aef13c2712f073032b0806
SHA1

6285497d8786742cca307bcf6958ecb01f439f42
SHA256

90f19e1a7843dbee63856899da664d073c2b8fadd0cad368e623d5f7426ba5ef
SHA512

81573d0c93538750d89daef81de1370441c48927620e2569ff038917d968b5760e9db68733a4f82d679c7832781c75cace285d6047e5947a5120f9a87ec14590
SSDEEP

196608:gAeiSGnXc86iAD/0LUcEhNLbdubxaUTE8pUcXc1uVzb9:gn8nXc8WD/0LS6LVvzp

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\90f19e1a7843dbee63856899da664d073c2b8fadd0cad368e623d5f7426ba5ef.exe
"C:\Users\Admin\AppData\Local\Temp\90f19e1a7843dbee63856899da664d073c2b8fadd0cad368e623d5f7426ba5ef.exe"
1⤵
PID:3564

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3564-0-0x0000000003D80000-0x0000000003D90000-memory.dmp

Filesize
64KB

Download
memory/3564-1-0x0000000003D80000-0x0000000003D90000-memory.dmp

Filesize
64KB

Download