1423053f90855d33858db47f354055b660943104c1c18f848c9b7b415979dc5f

Submit
Reports

Overview

overview

Static

static

08751be484...2d.dll

windows7-x64

08751be484...2d.dll

windows10-2004-x64

0a9f79abd4...51.exe

windows7-x64

0a9f79abd4...51.exe

windows10-2004-x64

1.bin/1.exe

windows7-x64

1.bin/1.exe

windows10-2004-x64

2019-09-02...10.exe

windows7-x64

2019-09-02...10.exe

windows10-2004-x64

2b5e50bc30...ba.dll

windows7-x64

2b5e50bc30...ba.dll

windows10-2004-x64

2c01b00772...eb.exe

windows7-x64

2c01b00772...eb.exe

windows10-2004-x64

31.exe

windows7-x64

31.exe

windows10-2004-x64

3DMark 11 ...on.exe

windows7-x64

3DMark 11 ...on.exe

windows10-2004-x64

42f9729255...61.exe

windows7-x64

42f9729255...61.exe

windows10-2004-x64

42f9729255...1).exe

windows7-x64

42f9729255...1).exe

windows10-2004-x64

5da0116af4...18.exe

windows7-x64

5da0116af4...18.exe

windows10-2004-x64

69c56d12ed...6b.exe

windows7-x64

69c56d12ed...6b.exe

windows10-2004-x64

6a9e7107c9...91.exe

windows7-x64

6a9e7107c9...91.exe

windows10-2004-x64

905d572f23...50.exe

windows7-x64

905d572f23...50.exe

windows10-2004-x64

948340be97...54.exe

windows7-x64

948340be97...54.exe

windows10-2004-x64

95560f1a46...f9.dll

windows7-x64

95560f1a46...f9.dll

windows10-2004-x64

Resubmissions

03-07-2024 16:04

01-07-2024 18:12

01-07-2024 18:03

01-07-2024 18:03

01-07-2024 18:03

01-07-2024 18:03

01-07-2024 18:02

01-07-2024 18:02

22-11-2023 17:02

Analysis

max time kernel
119s
max time network
128s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
01-07-2024 18:12

Sharing

Copy URL

Twitter E-mail

Static task

static1

13 signatures

Behavioral task

behavioral1

Sample

08751be484e1572995ebb085df1c2c6372084d63a64dce7fab28130d79a6ea2d.dll

Resource

win7-20240611-en

zloader botnet persistence trojan

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

08751be484e1572995ebb085df1c2c6372084d63a64dce7fab28130d79a6ea2d.dll

Resource

win10v2004-20240508-en

zloader botnet persistence trojan

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral3

Sample

0a9f79abd48b95544d7e2b6658637d1eb23067a94e10bf06d05c9ecc73cf4b51.exe

Resource

win7-20240221-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

0a9f79abd48b95544d7e2b6658637d1eb23067a94e10bf06d05c9ecc73cf4b51.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

1.bin/1.exe

Resource

win7-20240611-en

agenttesla danabot dharma formbook gozi raccoon 86920224 i0qi w9z agilenet banker cryptone defense_evasion execution impact keylogger packer persistence ransomware rat rezer0 rm3 spyware stealer trojan

windows7-x64

33 signatures

150 seconds

Behavioral task

behavioral6

Sample

1.bin/1.exe

Resource

win10v2004-20240508-en

agenttesla danabot dharma formbook gozi qakbot raccoon 86920224 spx129 1590734339 app i0qi w9z agilenet banker cryptone defense_evasion discovery execution impact keylogger packer persistence ransomware rat rezer0 rm3 spyware stealer trojan

windows10-2004-x64

35 signatures

150 seconds

Behavioral task

behavioral7

Sample

2019-09-02_22-41-10.exe

Resource

win7-20240419-en

smokeloader backdoor trojan

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

2019-09-02_22-41-10.exe

Resource

win10v2004-20240611-en

smokeloader backdoor trojan

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral9

Sample

2b5e50bc3077610128051bc3e657c3f0e331fb8fed2559c6596911890ea866ba.dll

Resource

win7-20240508-en

zloader 07/04 botnet trojan

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

2b5e50bc3077610128051bc3e657c3f0e331fb8fed2559c6596911890ea866ba.dll

Resource

win10v2004-20240611-en

zloader 07/04 botnet trojan

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

2c01b007729230c415420ad641ad92eb.exe

Resource

win7-20240508-en

persistence

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral12

Sample

2c01b007729230c415420ad641ad92eb.exe

Resource

win10v2004-20240611-en

hawkeye collection keylogger persistence spyware stealer trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral13

Sample

31.exe

Resource

win7-20240611-en

agenttesla formbook gozi raccoon 86920224 w9z agilenet banker cryptone defense_evasion execution impact keylogger packer ransomware rat rezer0 rm3 spyware stealer trojan

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral14

Sample

31.exe

Resource

win10v2004-20240508-en

agenttesla danabot formbook gozi raccoon 86920224 app i0qi w9z agilenet banker botnet cryptone defense_evasion discovery execution impact keylogger packer ransomware rat rezer0 rm3 spyware stealer trojan

windows10-2004-x64

21 signatures

150 seconds

Behavioral task

behavioral15

Sample

3DMark 11 Advanced Edition.exe

Resource

win7-20240419-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

3DMark 11 Advanced Edition.exe

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

42f972925508a82236e8533567487761.exe

Resource

win7-20240508-en

asyncrat darkcomet njrat warzonerat evasion infostealer persistence privilege_escalation rat trojan

windows7-x64

22 signatures

150 seconds

Behavioral task

behavioral18

Sample

42f972925508a82236e8533567487761.exe

Resource

win10v2004-20240508-en

asyncrat babylonrat darkcomet njrat warzonerat 2020nov1 evasion infostealer persistence privilege_escalation rat trojan

windows10-2004-x64

29 signatures

150 seconds

Behavioral task

behavioral19

Sample

42f972925508a82236e8533567487761(1).exe

Resource

win7-20240220-en

asyncrat darkcomet njrat warzonerat evasion infostealer persistence privilege_escalation rat trojan

windows7-x64

26 signatures

150 seconds

Behavioral task

behavioral20

Sample

42f972925508a82236e8533567487761(1).exe

Resource

win10v2004-20240508-en

asyncrat babylonrat darkcomet njrat warzonerat 2020nov1 evasion infostealer persistence privilege_escalation rat trojan

windows10-2004-x64

29 signatures

150 seconds

Behavioral task

behavioral21

Sample

5da0116af495e6d8af7241da9b8281d918b9ff9a98a3deab4cca1aec1e456c18.exe

Resource

win7-20240221-en

discovery persistence upx

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral22

Sample

5da0116af495e6d8af7241da9b8281d918b9ff9a98a3deab4cca1aec1e456c18.exe

Resource

win10v2004-20240611-en

discovery persistence ransomware upx

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral23

Sample

69c56d12ed7024696936fb69b4c6bee58174a275cb53fa966646a0b092d9626b.exe

Resource

win7-20240508-en

hakbit evasion execution ransomware spyware stealer

windows7-x64

16 signatures

150 seconds

Behavioral task

behavioral24

Sample

69c56d12ed7024696936fb69b4c6bee58174a275cb53fa966646a0b092d9626b.exe

Resource

win10v2004-20240611-en

hakbit evasion execution ransomware spyware stealer

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral25

Sample

6a9e7107c97762eb1196a64baeadb291.exe

Resource

win7-20231129-en

zloader canadaloads nerino botnet trojan

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

6a9e7107c97762eb1196a64baeadb291.exe

Resource

win10v2004-20240508-en

zloader canadaloads nerino botnet trojan

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

905d572f23883f5f161f920e53473989cf7dffc16643aa759f77842e54add550.exe

Resource

win7-20240220-en

revengerat execution stealer trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral28

Sample

905d572f23883f5f161f920e53473989cf7dffc16643aa759f77842e54add550.exe

Resource

win10v2004-20240508-en

revengerat execution stealer trojan

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral29

Sample

948340be97cc69c2cf8e5c8327ee52a89eeb50095f978696c710ad773a46b654.exe

Resource

win7-20240221-en

revengerat victime persistence stealer trojan

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral30

Sample

948340be97cc69c2cf8e5c8327ee52a89eeb50095f978696c710ad773a46b654.exe

Resource

win10v2004-20240508-en

revengerat victime persistence stealer trojan

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral31

Sample

95560f1a465e8ba87a73f8e60a6657545073d55c3b5cfc2ffdaf3d69d46afcf9.dll

Resource

win7-20231129-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

95560f1a465e8ba87a73f8e60a6657545073d55c3b5cfc2ffdaf3d69d46afcf9.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

3DMark 11 Advanced Edition.exe
Size

11.6MB
MD5

236d7524027dbce337c671906c9fe10b
SHA1

7d345aa201b50273176ae0ec7324739d882da32e
SHA256

400b64f8c61623ead9f579b99735b1b0d9febe7c829e8bdafc9b3a3269bbe21c
SHA512

e5c2f87923b3331719261101b2f606298fb66442e56a49708199d8472c1ac4a72130612d3a9c344310f36fcb3cf39e4637f7dd8fb3841c61b01b95bb3794610a
SSDEEP

196608:8YG+5pO1Ppb1rAMQQkIscfAb3mO5iW8uO2Kq1TIxz2HU6QPXJ0M2m9b/hE4:8/Bv1zsG2fm2bTcWBIXJHVrW4

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

3DMark 11 Advanced Edition.exe

pid process

1636 3DMark 11 Advanced Edition.exe

pid	process
1636	3DMark 11 Advanced Edition.exe

Processes

C:\Users\Admin\AppData\Local\Temp\3DMark 11 Advanced Edition.exe
"C:\Users\Admin\AppData\Local\Temp\3DMark 11 Advanced Edition.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1636

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads