f255227fd45316c4681085f39e6da2f509af851f8cc2d2a84ea99c06b935ffe6

Submit
Reports

Overview

overview

Static

static

bc41543926...18.zip

windows10-1703-x64

Documents/...er.exe

windows10-1703-x64

Documents/...ll.exe

windows10-1703-x64

Documents/...aw.exe

windows10-1703-x64

Documents/...ky.exe

windows10-1703-x64

Documents/...31.exe

windows10-1703-x64

Documents/...3 .exe

windows10-1703-x64

Documents/...d9.dll

windows10-1703-x64

Documents/...63b.gz

windows10-1703-x64

027cc450ef...ju.dll

windows10-1703-x64

Documents/...bin.gz

windows10-1703-x64

ee29b9c013...bc6.js

windows10-1703-x64

Documents/...097.gz

windows10-1703-x64

fe2e5d0543...L9.rtf

windows10-1703-x64

Documents/...uy.hta

windows10-1703-x64

Documents/...st.exe

windows10-1703-x64

Documents/...39.exe

windows10-1703-x64

Documents/...5c.exe

windows10-1703-x64

Documents/...00.exe

windows10-1703-x64

out.exe

windows10-1703-x64

Documents/...16.zip

windows10-1703-x64

Documents/...ZSFwgb

windows10-1703-x64

Documents/...96.exe

windows10-1703-x64

Documents/...ed.exe

windows10-1703-x64

Documents/...70.exe

windows10-1703-x64

Documents/...67.exe

windows10-1703-x64

Documents/...56.exe

windows10-1703-x64

Documents/...ab.exe

windows10-1703-x64

Documents/...3a.exe

windows10-1703-x64

Documents/...73.exe

windows10-1703-x64

Documents/...ry.zip

windows10-1703-x64

Documents/...aa.exe

windows10-1703-x64

Resubmissions

22-08-2024 18:43

21-08-2024 17:16

30-06-2024 00:59

20-06-2024 02:02

20-06-2024 01:44

19-06-2024 01:10

18-06-2024 20:40

18-06-2024 13:45

Analysis

max time kernel
314s
max time network
1612s
platform
windows10-1703_x64
resource
win10-20240611-en
resource tags

arch:x64arch:x86image:win10-20240611-enlocale:en-usos:windows10-1703-x64system
submitted
22-08-2024 18:43

Sharing

Copy URL

Twitter E-mail

Static task

static1

upx

2 signatures

Behavioral task

behavioral1

Sample

bc41543926dda3762ae39e35aba7a813_JaffaCakes118.zip

Resource

win10-20240611-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral2

Sample

Documents/Ransomware.Cerber/cerber.exe

Resource

win10-20240404-en

cerber defense_evasion discovery evasion persistence privilege_escalation ransomware trojan

windows10-1703-x64

30 signatures

1800 seconds

Behavioral task

behavioral3

Sample

Documents/Ransomware.Cryptowall/cryptowall.exe

Resource

win10-20240404-en

discovery

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral4

Sample

Documents/Ransomware.Jigsaw/jigsaw.exe

Resource

win10-20240404-en

jigsaw discovery persistence ransomware spyware stealer

windows10-1703-x64

19 signatures

1800 seconds

Behavioral task

behavioral5

Sample

Documents/Ransomware.Locky/Locky.exe

Resource

win10-20240404-en

locky discovery ransomware

windows10-1703-x64

2 signatures

1800 seconds

Behavioral task

behavioral6

Sample

Documents/Ransomware.Mamba/131.exe

Resource

win10-20240404-en

discovery

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral7

Sample

Documents/Ransomware.Matsnu/Matsnu-MBRwipingRansomware_1B2D2A4B97C7C2727D571BBF9376F54F_Inkasso Rechnung vom 27.05.2013 .exe

Resource

win10-20240404-en

discovery

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral8

Sample

Documents/Ransomware.Petrwrap/Ransomware.Petrwrap/027cc450ef5f8c5f653329641ec1fed9.dll

Resource

win10-20240611-en

mimikatz bootkit discovery persistence spyware stealer

windows10-1703-x64

14 signatures

1800 seconds

Behavioral task

behavioral9

Sample

Documents/Ransomware.Petrwrap/Ransomware.Petrwrap/027cc450ef5f8c5f653329641ec1fed91f694e0d229928963b.gz

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral10

Sample

027cc450ef5f8c5f653329641ec1fed91f694e0d229928963b30f6b0d7d3a745_98STJd8lju.dll

Resource

win10-20240404-en

mimikatz bootkit discovery persistence spyware stealer

windows10-1703-x64

14 signatures

1800 seconds

Behavioral task

behavioral11

Sample

Documents/Ransomware.Petrwrap/Ransomware.Petrwrap/ee29b9c01318a1e23836b949942db14d4811246fdae2f41df9f0dcd922c63bc6.bin.gz

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral12

Sample

ee29b9c01318a1e23836b949942db14d4811246fdae2f41df9f0dcd922c63bc6.js

Resource

win10-20240404-en

execution

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral13

Sample

Documents/Ransomware.Petrwrap/Ransomware.Petrwrap/fe2e5d0543b4c8769e401ec216d78a5a3547dfd426fd47e097.gz

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral14

Sample

fe2e5d0543b4c8769e401ec216d78a5a3547dfd426fd47e097df04a5f7d6d206_OFkNP1kKL9.rtf

Resource

win10-20240404-en

windows10-1703-x64

6 signatures

1800 seconds

Behavioral task

behavioral15

Sample

Documents/Ransomware.Petrwrap/Ransomware.Petrwrap/myguy.hta

Resource

win10-20240611-en

discovery

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral16

Sample

Documents/Ransomware.Petrwrap/Ransomware.Petrwrap/svchost.exe

Resource

win10-20240404-en

windows10-1703-x64

5 signatures

1800 seconds

Behavioral task

behavioral17

Sample

Documents/Ransomware.Petya/Ransomware.Petya/26b4699a7b9eeb16e76305d843d4ab05e94d43f3201436927e13b3ebafa90739.exe

Resource

win10-20240404-en

bootkit persistence

windows10-1703-x64

2 signatures

1800 seconds

Behavioral task

behavioral18

Sample

Documents/Ransomware.Petya/Ransomware.Petya/4c1dc737915d76b7ce579abddaba74ead6fdb5b519a1ea45308b8c49b950655c.exe

Resource

win10-20240404-en

bootkit discovery persistence

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral19

Sample

Documents/Ransomware.Radamant/Ransomware.Radamant/DUMP_00A10000-00A1D000.exe

Resource

win10-20240404-en

discovery persistence upx

windows10-1703-x64

11 signatures

1800 seconds

Behavioral task

behavioral20

Sample

out.exe

Resource

win10-20240404-en

discovery

windows10-1703-x64

2 signatures

1800 seconds

Behavioral task

behavioral21

Sample

Documents/Ransomware.Radamant/Ransomware.Radamant/Supplementary Agreement 26_01_2016.zip

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral22

Sample

Documents/Ransomware.Rex/WTEpZSFwgb

Resource

win10-20240611-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral23

Sample

Documents/Ransomware.Satana/Ransomware.Satana/683a09da219918258c58a7f61f7dc4161a3a7a377cf82a31b840baabfb9a4a96.exe

Resource

win10-20240404-en

discovery

windows10-1703-x64

4 signatures

1800 seconds

Behavioral task

behavioral24

Sample

Documents/Ransomware.Satana/Ransomware.Satana/unpacked.exe

Resource

win10-20240404-en

satana bootkit defense_evasion discovery execution impact persistence ransomware spyware stealer

windows10-1703-x64

17 signatures

1800 seconds

Behavioral task

behavioral25

Sample

Documents/Ransomware.TeslaCrypt/Ransomware.TeslaCrypt/3372c1edab46837f1e973164fa2d726c5c5e17bcb888828ccd7c4dfcc234a370.exe

Resource

win10-20240404-en

defense_evasion discovery execution impact persistence ransomware spyware stealer

windows10-1703-x64

19 signatures

1800 seconds

Behavioral task

behavioral26

Sample

Documents/Ransomware.TeslaCrypt/Ransomware.TeslaCrypt/51B4EF5DC9D26B7A26E214CEE90598631E2EAA67.exe

Resource

win10-20240404-en

discovery

windows10-1703-x64

2 signatures

1800 seconds

Behavioral task

behavioral27

Sample

Documents/Ransomware.TeslaCrypt/Ransomware.TeslaCrypt/E906FA3D51E86A61741B3499145A114E9BFB7C56.exe

Resource

win10-20240404-en

discovery

windows10-1703-x64

2 signatures

1800 seconds

Behavioral task

behavioral28

Sample

Documents/Ransomware.Vipasana/Ransomware.Vipasana/0442cfabb3212644c4b894a7e4a7e84c00fd23489cc4f96490f9988e6074b6ab.exe

Resource

win10-20240611-en

discovery persistence ransomware spyware stealer

windows10-1703-x64

13 signatures

1800 seconds

Behavioral task

behavioral29

Sample

Documents/Ransomware.Vipasana/Ransomware.Vipasana/c0cf40b8830d666a24bdd4febdc162e95aa30ed968fa3675e26ad97b2e88e03a.exe

Resource

win10-20240404-en

discovery persistence ransomware spyware stealer

windows10-1703-x64

13 signatures

1800 seconds

Behavioral task

behavioral30

Sample

Documents/Ransomware.Vipasana/Ransomware.Vipasana/e49778d20a2f9b1f8b00ddd24b6bcee81af381ed02cfe0a3c9ab3111cda5f573.exe

Resource

win10-20240404-en

discovery persistence ransomware spyware stealer

windows10-1703-x64

13 signatures

1800 seconds

Behavioral task

behavioral31

Sample

Documents/Ransomware.WannaCry/Ransomware.WannaCry.zip

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral32

Sample

Documents/Ransomware.WannaCry/ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe

Resource

win10-20240404-en

wannacry defense_evasion discovery execution impact persistence ransomware spyware stealer worm

windows10-1703-x64

20 signatures

1800 seconds

Report Analysis Logs

General

Target

Documents/Ransomware.Rex/WTEpZSFwgb
Size

7.3MB
MD5

5bd44a35094fe6f7794d895122ddfa62
SHA1

98172e49c3d5d70ffdcefd071f9762c58430a393
SHA256

762a4f2bf5ea4ff72fce674da1adf29f0b9357be18de4cd992d79198c56bb514
SHA512

4033c7335a44a7536a3980aad8cf18ff6336186d71dd7b7f02c3d5c93001ed974285fe9fbbf783bc0abac3e3b3581993ad6d2ac285249aa24b0aafa261f74de8
SSDEEP

49152:mNLLdMtTbVDtCsN5laK2BfCDvI7ZR9kAs5dkPjU2NhYCWpdLJaDSfUGZnh7X3cM9:mNlMt1tCsN5LGfCL7ATfscS8QhXP

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Documents\Ransomware.Rex\WTEpZSFwgb
1⤵
PID:1756

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads