60b290310f67adb0ae186b4b938ca466a6b55653b2519261fa425127f5500a1f | Triage™

Login
Reports

Overview

overview

Static

static

Archive.zip

windows10-1703-x64

1

Dropper/Berbew.exe

windows10-1703-x64

Dropper/Phorphiex.exe

windows10-1703-x64

out.exe

windows10-1703-x64

3

RAT/31.exe

windows10-1703-x64

RAT/XClient.exe

windows10-1703-x64

RAT/file.exe

windows10-1703-x64

7

Ransomware...-2.exe

windows10-1703-x64

Ransomware...01.exe

windows10-1703-x64

Ransomware...lt.exe

windows10-1703-x64

Stealers/Azorult.exe

windows10-1703-x64

Stealers/B...on.exe

windows10-1703-x64

Stealers/Dridex.dll

windows10-1703-x64

Stealers/M..._2.exe

windows10-1703-x64

Stealers/lumma.exe

windows10-1703-x64

Trojan/BetaBot.exe

windows10-1703-x64

Trojan/Smo...er.exe

windows10-1703-x64

Resubmissions

23/03/2026, 02:00

260323-cffqcsds9n10

05/03/2026, 16:32

260305-t1xm2scx3k10

11/02/2026, 21:18

260211-z5q9qaav8h10

11/05/2025, 03:54

250511-egp2javwat10

03/09/2024, 14:02

240903-rb57sazdqf10

03/09/2024, 13:51

240903-q59avszclf10

02/09/2024, 19:51

240902-yk8gtsxbpd10

02/09/2024, 02:27

240902-cxh7tazflg10

02/09/2024, 02:26

240902-cwxc2sygll10

21/06/2024, 19:37

240621-yca7cszgnd10

Analysis

max time kernel
124s
max time network
129s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
02/09/2024, 02:27

Sharing

Copy URL Twitter E-mail

Static task

static1

11 signatures

upx stealer system xworm revengerat zeppelin modiloader

Behavioral task

behavioral1

Sample

Archive.zip

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Dropper/Berbew.exe

Resource

win10-20240404-en

windows10-1703-x64

7 signatures

150 seconds

discovery persistence

Behavioral task

behavioral3

Sample

Dropper/Phorphiex.exe

Resource

win10-20240404-en

windows10-1703-x64

9 signatures

150 seconds

phorphiex discovery evasion loader persistence trojan upx worm

Behavioral task

behavioral4

Sample

out.exe

Resource

win10-20240611-en

windows10-1703-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

RAT/31.exe

Resource

win10-20240404-en

windows10-1703-x64

27 signatures

150 seconds

agenttesla danabot formbook gozi raccoon 86920224 w9z agilenet banker botnet cryptone defense_evasion discovery execution impact keylogger packer ransomware rat rezer0 rm3 spyware stealer trojan

Behavioral task

behavioral6

Sample

RAT/XClient.exe

Resource

win10-20240404-en

windows10-1703-x64

12 signatures

150 seconds

xworm execution persistence rat trojan

Behavioral task

behavioral7

Sample

RAT/file.exe

Resource

win10-20240404-en

windows10-1703-x64

7 signatures

150 seconds

Behavioral task

behavioral8

Sample

Ransomware/Client-2.exe

Resource

win10-20240404-en

windows10-1703-x64

18 signatures

150 seconds

hakbit credential_access discovery evasion execution ransomware spyware stealer

Behavioral task

behavioral9

Sample

Ransomware/criticalupdate01.exe

Resource

win10-20240404-en

windows10-1703-x64

10 signatures

150 seconds

fantom discovery evasion ransomware

Behavioral task

behavioral10

Sample

Ransomware/default.exe

Resource

win10-20240404-en

windows10-1703-x64

12 signatures

150 seconds

zeppelin discovery persistence ransomware

Behavioral task

behavioral11

Sample

Stealers/Azorult.exe

Resource

win10-20240404-en

windows10-1703-x64

52 signatures

150 seconds

azorult rms aspackv2 defense_evasion discovery evasion execution infostealer lateral_movement persistence privilege_escalation rat trojan upx

Behavioral task

behavioral12

Sample

Stealers/BlackMoon.exe

Resource

win10-20240404-en

windows10-1703-x64

6 signatures

150 seconds

blackmoon banker discovery trojan upx

Behavioral task

behavioral13

Sample

Stealers/Dridex.dll

Resource

win10-20240404-en

windows10-1703-x64

9 signatures

150 seconds

dridex botnet evasion payload persistence trojan

Behavioral task

behavioral14

Sample

Stealers/Masslogger/mouse_2.exe

Resource

win10-20240611-en

windows10-1703-x64

19 signatures

150 seconds

masslogger collection credential_access discovery rezer0 spyware stealer

Behavioral task

behavioral15

Sample

Stealers/lumma.exe

Resource

win10-20240404-en

windows10-1703-x64

2 signatures

150 seconds

lumma discovery stealer

Behavioral task

behavioral16

Sample

Trojan/BetaBot.exe

Resource

win10-20240404-en

windows10-1703-x64

22 signatures

150 seconds

betabot modiloader backdoor botnet defense_evasion discovery evasion persistence trojan

Behavioral task

behavioral17

Sample

Trojan/SmokeLoader.exe

Resource

win10-20240404-en

windows10-1703-x64

6 signatures

150 seconds

smokeloader backdoor discovery trojan

Report Analysis Logs

General

Target
Archive.zip
Size 25.8MB
Sample240902-cxh7tazflg
SHA256 60b290310f67adb0ae186b4b938ca466a6b55653b2519261fa425127f5500a1f
MD5 83671dbfab2418604f11993fdc392094
SHA1 5386d1fb94ec2974736a4d8895a2218855ffda69
SHA512 9cf982c9b2949f05ea4ab7d27b369924334cb9f8a0b85c374cf08ac059281ecf96c97088bb983f74033a1a8fba01f09c2f3f41ae3a60e7c79db8b6312edd5138
SSDEEP 786432:+r/Da8WA3C5BENmtAWzdVTkvq+GY8NEXcJap4DFEME/:4/W8WAS5BENmtZ1kvq+GYi8pw+T
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Archive.zip
1⤵
PID:1416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2026

Terms | Privacy