Overview
overview
10Static
static
32272954a2c...5a.exe
windows7-x64
1072716d15ea...21.exe
windows7-x64
7Bit Paymer.exe
windows7-x64
10KeepCalm.exe
windows7-x64
1LockedIn.exe
windows7-x64
9NotPetya.dll
windows7-x64
10Purge.exe
windows7-x64
1Scarab.exe
windows7-x64
10a631ad1b1a...4b.exe
windows7-x64
6a9053a3a52...bc.exe
windows7-x64
7b764629e1f...1c.exe
windows7-x64
10cf89f70633...5c.exe
windows7-x64
1e951e82867...50.exe
windows7-x64
1fa0c321e1a...d2.exe
windows7-x64
9fc184274ad...27.exe
windows7-x64
10Resubmissions
18-07-2024 07:25
240718-h84wjs1hpb 1018-07-2024 07:19
240718-h51pqa1gng 1017-07-2024 20:55
240717-zqkhmaydmq 1017-07-2024 19:21
240717-x2pwdaycjb 10Analysis
-
max time kernel
1792s -
max time network
1560s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
17-07-2024 19:21
Static task
static1
Behavioral task
behavioral1
Sample
2272954a2c9f631b4f9c5f6d230287b0989ab3b512bb5f4a282214eadf42085a.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
72716d15ea7d118b8c99dbcb15114188abe468718c876ac52b0779161ef7e821.exe
Resource
win7-20240705-en
Behavioral task
behavioral3
Sample
Bit Paymer.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
KeepCalm.exe
Resource
win7-20240708-en
Behavioral task
behavioral5
Sample
LockedIn.exe
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
NotPetya.dll
Resource
win7-20240705-en
Behavioral task
behavioral7
Sample
Purge.exe
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
Scarab.exe
Resource
win7-20240705-en
Behavioral task
behavioral9
Sample
a631ad1b1a59001a5f594880c6ae3337bda98f8ce3bb46cd7a9de0b35cd2bc4b.exe
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
a9053a3a52113698143a2b9801509c68d0d8b4b8208da453f0974547df0931bc.exe
Resource
win7-20240704-en
Behavioral task
behavioral11
Sample
b764629e1f43851daf984c9372422b65ddceae28f83d6211873f4c8f8672c41c.exe
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
cf89f70633865aa06123062a7dc51f8158905afb4b00f6f3597de3edfba97c5c.exe
Resource
win7-20240705-en
Behavioral task
behavioral13
Sample
e951e82867a4f3af5a34b714571e9acf99cca794c4ed1895c9025a642d5d4350.exe
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
fa0c321e1aad571daaa3bf642ced8ab10931a05957ce9f17da49317816ca50c7_WthaiV9ed2.exe
Resource
win7-20240708-en
Behavioral task
behavioral15
Sample
fc184274ad3908021e4c8ef28f35dc77447ed6457375d2a4e7b411955e042527.exe
Resource
win7-20240708-en
General
-
Target
2272954a2c9f631b4f9c5f6d230287b0989ab3b512bb5f4a282214eadf42085a.exe
-
Size
299KB
-
MD5
2ad96b646ad5f323f0bef0bfb6b23ebb
-
SHA1
a8ac661b22bd557fe3dbff8f706cb5741d43ac67
-
SHA256
2272954a2c9f631b4f9c5f6d230287b0989ab3b512bb5f4a282214eadf42085a
-
SHA512
8959aebd064c488e7247604b7b30e8487ecc498695206173d1251eff565bd5bb3e8ee90ac22bb1250f78412bcabe9a57d930972d6d4fdd886eef0901d89b38a9
-
SSDEEP
6144:0gggrNE0oCD4IKXgWi2AL/Pe5f6LiJbfPcEfm0fg:G6DhfTR8C2JbMEfm0fg
Malware Config
Extracted
gozi
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1972-1-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-0-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-4-0x0000000000270000-0x0000000000271000-memory.dmpFilesize
4KB
-
memory/1972-3-0x0000000000260000-0x0000000000261000-memory.dmpFilesize
4KB
-
memory/1972-2-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-5-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-6-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-7-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-8-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-9-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-10-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-11-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-12-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-14-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-16-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-17-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-18-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-19-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-21-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-22-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-23-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-24-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-25-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-26-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-27-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-28-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-29-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-30-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-31-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-32-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-34-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-35-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-37-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-38-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-39-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-40-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-41-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-46-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-47-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-48-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-50-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-53-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-57-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-61-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB
-
memory/1972-64-0x0000000000400000-0x000000000044D000-memory.dmpFilesize
308KB