98e895f711226a32bfab152e224279d859799243845c46e550c2d32153c619fc | Triage

Submit
Reports

Overview

overview

Static

static

3

New Text Document.exe

windows10-1703-x64

New Text Document.exe

windows7-x64

1

New Text Document.exe

windows10-2004-x64

New Text Document.exe

windows11-21h2-x64

New Text Document.exe

android-10-x64

New Text Document.exe

android-11-x64

New Text Document.exe

android-13-x64

New Text Document.exe

android-9-x86

New Text Document.exe

macos-10.15-amd64

1

New Text Document.exe

debian-12-armhf

New Text Document.exe

debian-12-mipsel

New Text Document.exe

debian-9-armhf

New Text Document.exe

debian-9-mips

New Text Document.exe

debian-9-mipsel

New Text Document.exe

ubuntu-18.04-amd64

New Text Document.exe

ubuntu-20.04-amd64

New Text Document.exe

ubuntu-22.04-amd64

New Text Document.exe

ubuntu-24.04-amd64

Resubmissions

28-05-2024 08:39

240528-kklq6scg8y 10

26-05-2024 17:22

240526-vxlxtaef89 10

Analysis

max time kernel
378s
max time network
1582s
platform
macos-10.15_amd64
resource
macos-20240410-en
resource tags

arch:amd64arch:i386image:macos-20240410-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
26-05-2024 17:22

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

New Text Document.exe

Resource

win10-20240404-en

agenttesla asyncrat metasploit phorphiex privateloader redline remcos risepro xworm @oleh_psp exodus_market lnkk load_man remote backdoor bootkit google discovery evasion execution exploit infostealer keylogger loader persistence phishing ransomware rat spyware stealer themida trojan upx vmprotect worm

windows10-1703-x64

96 signatures

1800 seconds

Behavioral task

behavioral2

Sample

New Text Document.exe

Resource

win7-20240508-en

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral3

Sample

New Text Document.exe

Resource

win10v2004-20240508-en

agenttesla asyncrat metasploit phorphiex privateloader redline risepro xmrig xworm @oleh_psp exodus_market lnkk load_man backdoor bootkit discovery evasion execution exploit infostealer keylogger loader miner persistence rat spyware stealer themida trojan upx vmprotect worm

windows10-2004-x64

80 signatures

1800 seconds

Behavioral task

behavioral4

Sample

New Text Document.exe

Resource

win11-20240426-en

agenttesla asyncrat metasploit phorphiex privateloader redline risepro xmrig xworm @oleh_psp exodus_market lnkk load_man backdoor bootkit discovery evasion execution exploit infostealer keylogger loader miner persistence ransomware rat spyware stealer themida trojan upx vmprotect worm

windows11-21h2-x64

99 signatures

1800 seconds

Behavioral task

behavioral5

Sample

New Text Document.exe

Resource

android-x64-20240514-en

android-10-x64

0 signatures

1800 seconds

Behavioral task

behavioral6

Sample

New Text Document.exe

Resource

android-x64-arm64-20240514-en

android-11-x64

0 signatures

1800 seconds

Behavioral task

behavioral7

Sample

New Text Document.exe

Resource

android-33-x64-arm64-20240514-en

android-13-x64

0 signatures

1800 seconds

Behavioral task

behavioral8

Sample

New Text Document.exe

Resource

android-x86-arm-20240514-en

android-9-x86

0 signatures

1800 seconds

Behavioral task

behavioral9

Sample

New Text Document.exe

Resource

macos-20240410-en

macos-10.15-amd64

0 signatures

1800 seconds

Behavioral task

behavioral10

Sample

New Text Document.exe

Resource

debian12-armhf-20240221-en

debian-12-armhf

0 signatures

1800 seconds

Behavioral task

behavioral11

Sample

New Text Document.exe

Resource

debian12-mipsel-20240418-en

debian-12-mipsel

0 signatures

1800 seconds

Behavioral task

behavioral12

Sample

New Text Document.exe

Resource

debian9-armhf-20240226-en

debian-9-armhf

0 signatures

1800 seconds

Behavioral task

behavioral13

Sample

New Text Document.exe

Resource

debian9-mipsbe-20240418-en

debian-9-mips

0 signatures

1800 seconds

Behavioral task

behavioral14

Sample

New Text Document.exe

Resource

debian9-mipsel-20240418-en

debian-9-mipsel

0 signatures

1800 seconds

Behavioral task

behavioral15

Sample

New Text Document.exe

Resource

ubuntu1804-amd64-20240508-en

ubuntu-18.04-amd64

0 signatures

1800 seconds

Behavioral task

behavioral16

Sample

New Text Document.exe

Resource

ubuntu2004-amd64-20240508-en

ubuntu-20.04-amd64

0 signatures

1800 seconds

Behavioral task

behavioral17

Sample

New Text Document.exe

Resource

ubuntu2204-amd64-20240522.1-en

ubuntu-22.04-amd64

0 signatures

1800 seconds

Behavioral task

behavioral18

Sample

New Text Document.exe

Resource

ubuntu2404-amd64-20240523-en

ubuntu-24.04-amd64

0 signatures

1800 seconds

Report Analysis Logs

General

Target

New Text Document.exe
Size

4KB
MD5

a239a27c2169af388d4f5be6b52f272c
SHA1

0feb9a0cd8c25f01d071e9b2cfc2ae7bd430318c
SHA256

98e895f711226a32bfab152e224279d859799243845c46e550c2d32153c619fc
SHA512

f30e1ff506cc4d729f7e24aa46e832938a5e21497f1f82f1b300d47f45dae7f1caef032237ef1f5ae9001195c43c0103e3ab787f9196c8397846c1dea8f351da
SSDEEP

48:6r1huik0xzYGJZZJOQOulbfSqXSfbNtm:IIxcLpf6zNt

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/New Text Document.exe\""
1⤵
PID:485

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/New Text Document.exe\""
1⤵
PID:485

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/New Text Document.exe"
1⤵
PID:485

/bin/zsh
/bin/zsh -c "/Users/run/New Text Document.exe"
2⤵
PID:486

/Users/run/New
/Users/run/New Text Document.exe
2⤵
PID:486

/usr/libexec/xpcproxy
xpcproxy com.apple.newsyslog
1⤵
PID:535

/usr/sbin/newsyslog
/usr/sbin/newsyslog
1⤵
PID:535

/usr/libexec/xpcproxy
xpcproxy com.apple.spindump
1⤵
PID:537

/usr/sbin/spindump
/usr/sbin/spindump
1⤵
PID:537

/usr/libexec/xpcproxy
xpcproxy com.apple.diagnosticd
1⤵
PID:538

/usr/libexec/diagnosticd
/usr/libexec/diagnosticd
1⤵
PID:538

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy