f1bbcc5c678d174d858ae089f4494e3ea8bcfc418098d61804a15e437f08aff7

Submit
Reports

Overview

overview

Static

static

08751be484...2d.dll

windows7-x64

08751be484...2d.dll

windows10-2004-x64

0a9f79abd4...51.exe

windows7-x64

0a9f79abd4...51.exe

windows10-2004-x64

0di3x.exe

windows7-x64

0di3x.exe

windows10-2004-x64

2019-09-02...10.exe

windows7-x64

2019-09-02...10.exe

windows10-2004-x64

2c01b00772...eb.exe

windows7-x64

2c01b00772...eb.exe

windows10-2004-x64

31.exe

windows7-x64

31.exe

windows10-2004-x64

3DMark 11 ...on.exe

windows7-x64

3DMark 11 ...on.exe

windows10-2004-x64

42f9729255...61.exe

windows7-x64

42f9729255...61.exe

windows10-2004-x64

5da0116af4...18.exe

windows7-x64

5da0116af4...18.exe

windows10-2004-x64

69c56d12ed...6b.exe

windows7-x64

69c56d12ed...6b.exe

windows10-2004-x64

905d572f23...50.exe

windows7-x64

905d572f23...50.exe

windows10-2004-x64

948340be97...54.exe

windows7-x64

948340be97...54.exe

windows10-2004-x64

95560f1a46...f9.dll

windows7-x64

95560f1a46...f9.dll

windows10-2004-x64

Archive.zi...3e.exe

windows7-x64

Archive.zi...3e.exe

windows10-2004-x64

Chris@Spark.exe

windows7-x64

Chris@Spark.exe

windows10-2004-x64

Cuberates@TaskILL.exe

windows7-x64

Cuberates@TaskILL.exe

windows10-2004-x64

Resubmissions

03/07/2024, 22:59 UTC

240703-2yn7wszhlp 10

03/07/2024, 16:13 UTC

240703-tn93lsyglf 10

03/07/2024, 16:11 UTC

240703-tm84xsyfma 10

10/05/2024, 16:25 UTC

240510-tw1h5shh47 10

24/08/2023, 11:16 UTC

230824-nda8msdf8z 10

Analysis

max time kernel
1560s
max time network
1566s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
03/07/2024, 16:13 UTC

Sharing

Copy URL

Twitter E-mail

Static task

static1

14 signatures

Behavioral task

behavioral1

Sample

08751be484e1572995ebb085df1c2c6372084d63a64dce7fab28130d79a6ea2d.dll

Resource

win7-20240611-en

zloader botnet persistence trojan

windows7-x64

6 signatures

1800 seconds

Behavioral task

behavioral2

Sample

08751be484e1572995ebb085df1c2c6372084d63a64dce7fab28130d79a6ea2d.dll

Resource

win10v2004-20240508-en

zloader botnet persistence trojan

windows10-2004-x64

6 signatures

1800 seconds

Behavioral task

behavioral3

Sample

0a9f79abd48b95544d7e2b6658637d1eb23067a94e10bf06d05c9ecc73cf4b51.exe

Resource

win7-20240508-en

windows7-x64

3 signatures

1800 seconds

Behavioral task

behavioral4

Sample

0a9f79abd48b95544d7e2b6658637d1eb23067a94e10bf06d05c9ecc73cf4b51.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

1800 seconds

Behavioral task

behavioral5

Sample

0di3x.exe

Resource

win7-20240508-en

smokeloader backdoor trojan

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral6

Sample

0di3x.exe

Resource

win10v2004-20240611-en

smokeloader backdoor trojan

windows10-2004-x64

4 signatures

1800 seconds

Behavioral task

behavioral7

Sample

2019-09-02_22-41-10.exe

Resource

win7-20240508-en

smokeloader backdoor trojan

windows7-x64

4 signatures

1800 seconds

Behavioral task

behavioral8

Sample

2019-09-02_22-41-10.exe

Resource

win10v2004-20240508-en

smokeloader backdoor trojan

windows10-2004-x64

5 signatures

1800 seconds

Behavioral task

behavioral9

Sample

2c01b007729230c415420ad641ad92eb.exe

Resource

win7-20240508-en

hawkeye collection keylogger persistence spyware stealer trojan

windows7-x64

15 signatures

1800 seconds

Behavioral task

behavioral10

Sample

2c01b007729230c415420ad641ad92eb.exe

Resource

win10v2004-20240611-en

hawkeye collection keylogger persistence spyware stealer trojan

windows10-2004-x64

15 signatures

1800 seconds

Behavioral task

behavioral11

Sample

31.exe

Resource

win7-20240508-en

agenttesla danabot dharma formbook gozi qakbot raccoon 86920224 spx129 1590734339 i0qi w9z agilenet banker cryptone defense_evasion execution impact keylogger packer persistence ransomware rat rezer0 rm3 spyware stealer trojan

windows7-x64

32 signatures

1800 seconds

Behavioral task

behavioral12

Sample

31.exe

Resource

win10v2004-20240508-en

agenttesla danabot dharma formbook gozi qakbot 86920224 app i0qi w9z agilenet banker botnet collection cryptone defense_evasion discovery evasion execution impact keylogger packer persistence privilege_escalation ransomware rat rezer0 rm3 spyware stealer trojan

windows10-2004-x64

65 signatures

1800 seconds

Behavioral task

behavioral13

Sample

3DMark 11 Advanced Edition.exe

Resource

win7-20240220-en

windows7-x64

1 signatures

1800 seconds

Behavioral task

behavioral14

Sample

3DMark 11 Advanced Edition.exe

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral15

Sample

42f972925508a82236e8533567487761.exe

Resource

win7-20240611-en

asyncrat babylonrat darkcomet njrat warzonerat evasion infostealer persistence privilege_escalation rat trojan

windows7-x64

27 signatures

1800 seconds

Behavioral task

behavioral16

Sample

42f972925508a82236e8533567487761.exe

Resource

win10v2004-20240611-en

asyncrat babylonrat darkcomet njrat warzonerat 2020nov1 evasion infostealer persistence privilege_escalation rat trojan

windows10-2004-x64

29 signatures

1800 seconds

Behavioral task

behavioral17

Sample

5da0116af495e6d8af7241da9b8281d918b9ff9a98a3deab4cca1aec1e456c18.exe

Resource

win7-20240508-en

discovery persistence ransomware upx

windows7-x64

8 signatures

1800 seconds

Behavioral task

behavioral18

Sample

5da0116af495e6d8af7241da9b8281d918b9ff9a98a3deab4cca1aec1e456c18.exe

Resource

win10v2004-20240611-en

discovery persistence ransomware upx

windows10-2004-x64

17 signatures

1800 seconds

Behavioral task

behavioral19

Sample

69c56d12ed7024696936fb69b4c6bee58174a275cb53fa966646a0b092d9626b.exe

Resource

win7-20240419-en

hakbit evasion execution ransomware spyware stealer

windows7-x64

15 signatures

1800 seconds

Behavioral task

behavioral20

Sample

69c56d12ed7024696936fb69b4c6bee58174a275cb53fa966646a0b092d9626b.exe

Resource

win10v2004-20240611-en

hakbit evasion execution ransomware spyware stealer

windows10-2004-x64

15 signatures

1800 seconds

Behavioral task

behavioral21

Sample

905d572f23883f5f161f920e53473989cf7dffc16643aa759f77842e54add550.exe

Resource

win7-20240221-en

revengerat xdsddd execution stealer trojan

windows7-x64

11 signatures

1800 seconds

Behavioral task

behavioral22

Sample

905d572f23883f5f161f920e53473989cf7dffc16643aa759f77842e54add550.exe

Resource

win10v2004-20240508-en

revengerat xdsddd execution stealer trojan

windows10-2004-x64

12 signatures

1800 seconds

Behavioral task

behavioral23

Sample

948340be97cc69c2cf8e5c8327ee52a89eeb50095f978696c710ad773a46b654.exe

Resource

win7-20240611-en

revengerat persistence stealer trojan

windows7-x64

7 signatures

1800 seconds

Behavioral task

behavioral24

Sample

948340be97cc69c2cf8e5c8327ee52a89eeb50095f978696c710ad773a46b654.exe

Resource

win10v2004-20240611-en

revengerat persistence stealer trojan

windows10-2004-x64

8 signatures

1800 seconds

Behavioral task

behavioral25

Sample

95560f1a465e8ba87a73f8e60a6657545073d55c3b5cfc2ffdaf3d69d46afcf9.dll

Resource

win7-20240508-en

windows7-x64

1 signatures

1800 seconds

Behavioral task

behavioral26

Sample

95560f1a465e8ba87a73f8e60a6657545073d55c3b5cfc2ffdaf3d69d46afcf9.dll

Resource

win10v2004-20240611-en

windows10-2004-x64

1 signatures

1800 seconds

Behavioral task

behavioral27

Sample

Archive.zip__ccacaxs2tbz2t6ob3e.exe

Resource

win7-20240221-en

discovery execution persistence privilege_escalation spyware stealer

windows7-x64

26 signatures

1800 seconds

Behavioral task

behavioral28

Sample

Archive.zip__ccacaxs2tbz2t6ob3e.exe

Resource

win10v2004-20240611-en

discovery execution persistence privilege_escalation spyware stealer

windows10-2004-x64

29 signatures

1800 seconds

Behavioral task

behavioral29

Sample

Chris@Spark.exe

Resource

win7-20240221-en

windows7-x64

5 signatures

1800 seconds

Behavioral task

behavioral30

Sample

Chris@Spark.exe

Resource

win10v2004-20240611-en

windows10-2004-x64

4 signatures

1800 seconds

Behavioral task

behavioral31

Sample

Cuberates@TaskILL.exe

Resource

win7-20240508-en

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral32

Sample

Cuberates@TaskILL.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

1800 seconds

Report Analysis Logs

General

Target

3DMark 11 Advanced Edition.exe
Size

11.6MB
MD5

236d7524027dbce337c671906c9fe10b
SHA1

7d345aa201b50273176ae0ec7324739d882da32e
SHA256

400b64f8c61623ead9f579b99735b1b0d9febe7c829e8bdafc9b3a3269bbe21c
SHA512

e5c2f87923b3331719261101b2f606298fb66442e56a49708199d8472c1ac4a72130612d3a9c344310f36fcb3cf39e4637f7dd8fb3841c61b01b95bb3794610a
SSDEEP

196608:8YG+5pO1Ppb1rAMQQkIscfAb3mO5iW8uO2Kq1TIxz2HU6QPXJ0M2m9b/hE4:8/Bv1zsG2fm2bTcWBIXJHVrW4

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3068	3DMark 11 Advanced Edition.exe

Processes

C:\Users\Admin\AppData\Local\Temp\3DMark 11 Advanced Edition.exe
"C:\Users\Admin\AppData\Local\Temp\3DMark 11 Advanced Edition.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:3068

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.