64e87032c830ebab767e08f466665da630b1f2cb0c6b79be0bb0aa44b7bfd555 | Triage

Submit
Reports

Overview

overview

Static

static

3

docs.zip

windows7-x64

1

docs.zip

windows10-2004-x64

1

__MACOSX/d..._store

windows7-x64

3

__MACOSX/d..._store

windows10-2004-x64

3

__MACOSX/d..._store

windows7-x64

3

__MACOSX/d..._store

windows10-2004-x64

3

__MACOSX/d..._store

windows7-x64

3

__MACOSX/d..._store

windows10-2004-x64

3

__MACOSX/d..._store

windows7-x64

3

__MACOSX/d..._store

windows10-2004-x64

3

docs/$RECY...op.ini

windows7-x64

1

docs/$RECY...op.ini

windows10-2004-x64

1

docs/.ds_store

windows7-x64

3

docs/.ds_store

windows10-2004-x64

3

docs/Syste...gs.dat

windows7-x64

3

docs/Syste...gs.dat

windows10-2004-x64

3

docs/Untit...df.exe

windows7-x64

docs/Untit...df.exe

windows10-2004-x64

docs/[SYST...ttrDef

windows7-x64

1

docs/[SYST...ttrDef

windows10-2004-x64

1

docs/[SYSTEM]/$Bitmap

windows7-x64

1

docs/[SYSTEM]/$Bitmap

windows10-2004-x64

1

docs/[SYSTEM]/$Boot

windows7-x64

1

docs/[SYSTEM]/$Boot

windows10-2004-x64

1

docs/[SYST...Config

windows7-x64

1

docs/[SYST...Config

windows10-2004-x64

1

docs/[SYST.../$Tops

windows7-x64

1

docs/[SYST.../$Tops

windows10-2004-x64

1

docs/[SYST...ops:$T

windows7-x64

1

docs/[SYST...ops:$T

windows10-2004-x64

1

docs/[SYST...og.blf

windows7-x64

3

docs/[SYST...og.blf

windows10-2004-x64

3

Analysis

max time kernel
93s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
04-07-2024 11:52

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

docs.zip

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

docs.zip

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

__MACOSX/docs/._.ds_store

Resource

win7-20240508-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral4

Sample

__MACOSX/docs/._.ds_store

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

__MACOSX/docs/[SYSTEM]/$Extend/$RmMetadata/._.ds_store

Resource

win7-20240508-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral6

Sample

__MACOSX/docs/[SYSTEM]/$Extend/$RmMetadata/._.ds_store

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

__MACOSX/docs/[SYSTEM]/$Extend/._.ds_store

Resource

win7-20240508-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral8

Sample

__MACOSX/docs/[SYSTEM]/$Extend/._.ds_store

Resource

win10v2004-20240611-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

__MACOSX/docs/[SYSTEM]/._.ds_store

Resource

win7-20240221-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral10

Sample

__MACOSX/docs/[SYSTEM]/._.ds_store

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

docs/$RECYCLE.BIN/S-1-5-21-3906747542-1253890818-3570446626-1001/desktop.ini

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

docs/$RECYCLE.BIN/S-1-5-21-3906747542-1253890818-3570446626-1001/desktop.ini

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

docs/.ds_store

Resource

win7-20240508-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

docs/.ds_store

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

docs/System Volume Information/WPSettings.dat

Resource

win7-20240611-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral16

Sample

docs/System Volume Information/WPSettings.dat

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

docs/Untitled_June_06_25_2024_export.pdf.exe

Resource

win7-20240221-en

metastealer discovery execution spyware stealer

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral18

Sample

docs/Untitled_June_06_25_2024_export.pdf.exe

Resource

win10v2004-20240508-en

metastealer discovery execution spyware stealer

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral19

Sample

docs/[SYSTEM]/$AttrDef

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

docs/[SYSTEM]/$AttrDef

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

docs/[SYSTEM]/$Bitmap

Resource

win7-20240220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

docs/[SYSTEM]/$Bitmap

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

docs/[SYSTEM]/$Boot

Resource

win7-20240611-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

docs/[SYSTEM]/$Boot

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

docs/[SYSTEM]/$Extend/$RmMetadata/$Repair:$Config

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

docs/[SYSTEM]/$Extend/$RmMetadata/$Repair:$Config

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

docs/[SYSTEM]/$Extend/$RmMetadata/$TxfLog/$Tops

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

docs/[SYSTEM]/$Extend/$RmMetadata/$TxfLog/$Tops

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

docs/[SYSTEM]/$Extend/$RmMetadata/$TxfLog/$Tops:$T

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

docs/[SYSTEM]/$Extend/$RmMetadata/$TxfLog/$Tops:$T

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

docs/[SYSTEM]/$Extend/$RmMetadata/$TxfLog/$TxfLog.blf

Resource

win7-20240508-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral32

Sample

docs/[SYSTEM]/$Extend/$RmMetadata/$TxfLog/$TxfLog.blf

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

docs/$RECYCLE.BIN/S-1-5-21-3906747542-1253890818-3570446626-1001/desktop.ini
Size

129B
MD5

a526b9e7c716b3489d8cc062fbce4005
SHA1

2df502a944ff721241be20a9e449d2acd07e0312
SHA256

e1b9ce9b57957b1a0607a72a057d6b7a9b34ea60f3f8aa8f38a3af979bd23066
SHA512

d83d4c656c96c3d1809ad06ce78fa09a77781461c99109e4b81d1a186fc533a7e72d65a4cb7edf689eeccda8f687a13d3276f1111a1e72f7c3cd92a49bce0f88

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\docs\$RECYCLE.BIN\S-1-5-21-3906747542-1253890818-3570446626-1001\desktop.ini
1⤵
PID:2248

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy