3123af93014a5a5c49aa6fd2118f6805041af178c222be27e30b2fd477085c19

Login
Reports

Overview

overview

Static

static

240802-n97...ed.zip

windows7-x64

240802-n97...ed.zip

windows10-2004-x64

bfc092b384...af.zip

windows7-x64

bfc092b384...af.zip

windows10-2004-x64

1/0178b79b...bd.exe

windows7-x64

1/0178b79b...bd.exe

windows10-2004-x64

1/0280cde4...60.exe

windows7-x64

1/0280cde4...60.exe

windows10-2004-x64

1/08b76206...65.exe

windows7-x64

1/08b76206...65.exe

windows10-2004-x64

1/0e4fc438...91.exe

windows7-x64

1/0e4fc438...91.exe

windows10-2004-x64

1/0fb86a8b...05.exe

windows7-x64

1/0fb86a8b...05.exe

windows10-2004-x64

1/25898c73...8f.exe

windows7-x64

1/25898c73...8f.exe

windows10-2004-x64

1/2c2e9491...3c.exe

windows7-x64

1/2c2e9491...3c.exe

windows10-2004-x64

1/2ef0f582...2e.exe

windows7-x64

1/2ef0f582...2e.exe

windows10-2004-x64

1/39884fc0...82.exe

windows7-x64

1/39884fc0...82.exe

windows10-2004-x64

1/3a72ecec...8a.exe

windows7-x64

1/3a72ecec...8a.exe

windows10-2004-x64

1/3bfcb4f7...71.exe

windows7-x64

1/3bfcb4f7...71.exe

windows10-2004-x64

1/4103411f...f5.exe

windows7-x64

1/4103411f...f5.exe

windows10-2004-x64

1/4e0fdb84...95.exe

windows7-x64

1/4e0fdb84...95.exe

windows10-2004-x64

1/5297372f...33.exe

windows7-x64

1/5297372f...33.exe

windows10-2004-x64

Analysis

max time kernel
150s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240730-en
resource tags

arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system
submitted
02/08/2024, 12:27

Sharing

Copy URL Twitter E-mail

Static task

static1

12 signatures

Behavioral task

behavioral1

Sample

240802-n97ays1dpa_pw_infected.zip

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

240802-n97ays1dpa_pw_infected.zip

Resource

win10v2004-20240730-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

bfc092b384976e97153bae0e29359461bfd65fce5ad8188d6460de57bc680eaf.zip

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

bfc092b384976e97153bae0e29359461bfd65fce5ad8188d6460de57bc680eaf.zip

Resource

win10v2004-20240730-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

1/0178b79bd084c2597b2de4e62e61a88bb8359e4fcac2fe672bb887e0e52e5dbd.exe

Resource

win7-20240704-en

windows7-x64

16 signatures

150 seconds

agenttesla credential_access discovery execution keylogger persistence spyware stealer trojan

Behavioral task

behavioral6

Sample

1/0178b79bd084c2597b2de4e62e61a88bb8359e4fcac2fe672bb887e0e52e5dbd.exe

Resource

win10v2004-20240730-en

windows10-2004-x64

17 signatures

150 seconds

agenttesla credential_access discovery execution keylogger persistence spyware stealer trojan

Behavioral task

behavioral7

Sample

1/0280cde4a65664a05361129dc1cfa10bc17b3fa9567103ce6eb9d07b06f8f160.exe

Resource

win7-20240708-en

windows7-x64

6 signatures

150 seconds

remcos remotehost discovery rat

Behavioral task

behavioral8

Sample

1/0280cde4a65664a05361129dc1cfa10bc17b3fa9567103ce6eb9d07b06f8f160.exe

Resource

win10v2004-20240730-en

windows10-2004-x64

6 signatures

150 seconds

remcos remotehost discovery rat

Behavioral task

behavioral9

Sample

1/08b7620610fc30c54e5cc095a54ae6d2949f68b0f224c285283e1612c254ef65.exe

Resource

win7-20240705-en

windows7-x64

2 signatures

150 seconds

stealc hello discovery stealer

Behavioral task

behavioral10

Sample

1/08b7620610fc30c54e5cc095a54ae6d2949f68b0f224c285283e1612c254ef65.exe

Resource

win10v2004-20240730-en

windows10-2004-x64

6 signatures

150 seconds

stealc hello discovery stealer

Behavioral task

behavioral11

Sample

1/0e4fc438decc9723b89bd0e71b9ee30c1a8390e697d790b2d5ce96e94accd791.exe

Resource

win7-20240704-en

windows7-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral12

Sample

1/0e4fc438decc9723b89bd0e71b9ee30c1a8390e697d790b2d5ce96e94accd791.exe

Resource

win10v2004-20240730-en

windows10-2004-x64

8 signatures

150 seconds

stealc default discovery stealer

Behavioral task

behavioral13

Sample

1/0fb86a8ba8fdf57990c283080a671c1320cbcdfd0e8b5f5a250d9c38a6fce305.exe

Resource

win7-20240708-en

windows7-x64

16 signatures

150 seconds

defense_evasion discovery ransomware spyware stealer

Behavioral task

behavioral14

Sample

1/0fb86a8ba8fdf57990c283080a671c1320cbcdfd0e8b5f5a250d9c38a6fce305.exe

Resource

win10v2004-20240730-en

windows10-2004-x64

21 signatures

150 seconds

defense_evasion discovery ransomware spyware stealer

Behavioral task

behavioral15

Sample

1/25898c73a877d87ba289bb4ab9585eb36eba9d27d47af678a86befdbf9aa938f.exe

Resource

win7-20240705-en

windows7-x64

9 signatures

150 seconds

agenttesla credential_access discovery keylogger spyware stealer trojan

Behavioral task

behavioral16

Sample

1/25898c73a877d87ba289bb4ab9585eb36eba9d27d47af678a86befdbf9aa938f.exe

Resource

win10v2004-20240730-en

windows10-2004-x64

9 signatures

150 seconds

agenttesla credential_access discovery keylogger spyware stealer trojan

Behavioral task

behavioral17

Sample

1/2c2e949171d86da9b5c58901de2e4a99c4fe86fe92c47556f53b833ce77c503c.exe

Resource

win7-20240704-en

windows7-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral18

Sample

1/2c2e949171d86da9b5c58901de2e4a99c4fe86fe92c47556f53b833ce77c503c.exe

Resource

win10v2004-20240730-en

windows10-2004-x64

8 signatures

150 seconds

redline 6951125327 discovery infostealer

Behavioral task

behavioral19

Sample

1/2ef0f582367a7674aef245acb06977bf646419f1f8d05c7fb07881a6102f982e.exe

Resource

win7-20240729-en

windows7-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral20

Sample

1/2ef0f582367a7674aef245acb06977bf646419f1f8d05c7fb07881a6102f982e.exe

Resource

win10v2004-20240730-en

windows10-2004-x64

8 signatures

150 seconds

redline 6951125327 discovery infostealer

Behavioral task

behavioral21

Sample

1/39884fc02ed9a51ffcc9b298916be79307f15f1518b6ae2021dd07af0aeecb82.exe

Resource

win7-20240705-en

windows7-x64

10 signatures

150 seconds

babylonrat discovery trojan upx

Behavioral task

behavioral22

Sample

1/39884fc02ed9a51ffcc9b298916be79307f15f1518b6ae2021dd07af0aeecb82.exe

Resource

win10v2004-20240730-en

windows10-2004-x64

10 signatures

150 seconds

babylonrat discovery trojan upx

Behavioral task

behavioral23

Sample

1/3a72ecec34a29f53a1d73677a0e6f4c2e19087a32f1808f8f4ff643f62128d8a.exe

Resource

win7-20240704-en

windows7-x64

14 signatures

150 seconds

xworm execution persistence rat trojan

Behavioral task

behavioral24

Sample

1/3a72ecec34a29f53a1d73677a0e6f4c2e19087a32f1808f8f4ff643f62128d8a.exe

Resource

win10v2004-20240730-en

windows10-2004-x64

15 signatures

150 seconds

xworm execution persistence rat trojan

Behavioral task

behavioral25

Sample

1/3bfcb4f798ba63a1d18887cb67c90e083d5561a58136a892bd9944528c707671.exe

Resource

win7-20240705-en

windows7-x64

12 signatures

150 seconds

agenttesla credential_access discovery execution keylogger spyware stealer trojan

Behavioral task

behavioral26

Sample

1/3bfcb4f798ba63a1d18887cb67c90e083d5561a58136a892bd9944528c707671.exe

Resource

win10v2004-20240730-en

windows10-2004-x64

13 signatures

150 seconds

agenttesla credential_access discovery execution keylogger spyware stealer trojan

Behavioral task

behavioral27

Sample

1/4103411f7bb66a033f9f5ce35839ba08b2a27d169e188a911185790f3b78bbf5.exe

Resource

win7-20240708-en

windows7-x64

5 signatures

150 seconds

redline 6951125327 discovery infostealer

Behavioral task

behavioral28

Sample

1/4103411f7bb66a033f9f5ce35839ba08b2a27d169e188a911185790f3b78bbf5.exe

Resource

win10v2004-20240730-en

windows10-2004-x64

5 signatures

150 seconds

redline 6951125327 discovery infostealer

Behavioral task

behavioral29

Sample

1/4e0fdb84649ad15a0722789512aaef15c7bfbc4cab82b2a7b0ea52ac9594bb95.exe

Resource

win7-20240704-en

windows7-x64

9 signatures

150 seconds

discovery

Behavioral task

behavioral30

Sample

1/4e0fdb84649ad15a0722789512aaef15c7bfbc4cab82b2a7b0ea52ac9594bb95.exe

Resource

win10v2004-20240730-en

windows10-2004-x64

11 signatures

150 seconds

discovery

Behavioral task

behavioral31

Sample

1/5297372fe85eea3ecc0d271b5567f2c7ee75bd3a04e745debddb04c9b05dae33.exe

Resource

win7-20240729-en

windows7-x64

5 signatures

150 seconds

discovery

Behavioral task

behavioral32

Sample

1/5297372fe85eea3ecc0d271b5567f2c7ee75bd3a04e745debddb04c9b05dae33.exe

Resource

win10v2004-20240730-en

windows10-2004-x64

6 signatures

150 seconds

discovery

Report Analysis Logs

General

Target
240802-n97ays1dpa_pw_infected.zip
Size 20.2MB
Sample240802-pmzs2a1ene
SHA256 3123af93014a5a5c49aa6fd2118f6805041af178c222be27e30b2fd477085c19
MD5 e6223205e5424612c074648b87487e31
SHA1 25d6ce1b0c91a5cdd1a5127537dce9c68c008a95
SHA512 9d6561386ff20c51eab8c3579a5fa64dba38914912ee41f4b00e0f322935c082f48320b6e1d5f96e1ab67c04c5736cda9ea1b874a9d5e34fa876b1b64dd2f3e6
SSDEEP 393216:OuLfnQ/LwLbzfsnoUH46mHGquJZgh98gTOm7RGP4x11QtD2s:nLfYLYHsnbl6vnObEI6s
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\240802-n97ays1dpa_pw_infected.zip
1⤵
PID:1396

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads