bd7a853e20ec918539038278bb788fea3314d1da09e7f75608d13a8cd2436362 | Triage

Submit
Reports

Overview

overview

Static

static

3

tmpfile-ma...r3.exe

windows7-x64

8

tmpfile-ma...r3.exe

windows10-2004-x64

8

tmpfile-ma...rm.exe

windows7-x64

tmpfile-ma...rm.exe

windows10-2004-x64

tmpfile-ma...ir.exe

windows7-x64

tmpfile-ma...ir.exe

windows10-2004-x64

tmpfile-ma...32.exe

windows7-x64

tmpfile-ma...32.exe

windows10-2004-x64

tmpfile-ma...63.exe

windows7-x64

3

tmpfile-ma...63.exe

windows10-2004-x64

3

tmpfile-ma...64.exe

windows7-x64

tmpfile-ma...64.exe

windows10-2004-x64

tmpfile-ma...ox.exe

windows7-x64

7

tmpfile-ma...ox.exe

windows10-2004-x64

7

tmpfile-ma...7I.exe

windows7-x64

1

tmpfile-ma...7I.exe

windows10-2004-x64

1

tmpfile-ma...8I.exe

windows7-x64

7

tmpfile-ma...8I.exe

windows10-2004-x64

7

Analysis

max time kernel
92s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
17-11-2024 17:33

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

tmpfile-main/0000000r00d000r3.exe

Resource

win7-20240729-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

tmpfile-main/0000000r00d000r3.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral3

Sample

tmpfile-main/Exterm.exe

Resource

win7-20240903-en

bdaejec aspackv2 backdoor discovery evasion execution

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral4

Sample

tmpfile-main/Exterm.exe

Resource

win10v2004-20241007-en

bdaejec aspackv2 backdoor discovery evasion execution

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral5

Sample

tmpfile-main/Gaming Chair.exe

Resource

win7-20241023-en

bdaejec aspackv2 backdoor discovery evasion execution

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral6

Sample

tmpfile-main/Gaming Chair.exe

Resource

win10v2004-20241007-en

bdaejec aspackv2 backdoor discovery evasion execution

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral7

Sample

tmpfile-main/Node32.exe

Resource

win7-20240903-en

discovery evasion execution persistence

windows7-x64

16 signatures

150 seconds

Behavioral task

behavioral8

Sample

tmpfile-main/Node32.exe

Resource

win10v2004-20241007-en

discovery execution persistence

windows10-2004-x64

23 signatures

150 seconds

Behavioral task

behavioral9

Sample

tmpfile-main/Node63.exe

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

tmpfile-main/Node63.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

tmpfile-main/Node64.exe

Resource

win7-20241010-en

discovery evasion execution persistence

windows7-x64

16 signatures

150 seconds

Behavioral task

behavioral12

Sample

tmpfile-main/Node64.exe

Resource

win10v2004-20241007-en

discovery execution persistence

windows10-2004-x64

24 signatures

150 seconds

Behavioral task

behavioral13

Sample

tmpfile-main/Sobfox.exe

Resource

win7-20240903-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

tmpfile-main/Sobfox.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral15

Sample

tmpfile-main/stTfuo7I.exe

Resource

win7-20241023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

tmpfile-main/stTfuo7I.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

tmpfile-main/stTfuo8I.exe

Resource

win7-20240903-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

tmpfile-main/stTfuo8I.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

4 signatures

150 seconds

Report Analysis Logs

General

Target

tmpfile-main/stTfuo7I.exe
Size

4.9MB
MD5

6f179cb4399501b0aef6bed87067c461
SHA1

8cdfeebc4075540d4eb80403aab1c412ce1ff483
SHA256

caa64978428e81f087a0407398a5a0d47c1d5e6e438f220c2ea34de3aa0bcb0c
SHA512

20361366df3d0fe038a17230ab8002e784f5d10026375894b223b69cfde0c7885cefd294aecb5870fcd6dee12c5a427c98b0e086f96ae6c21120b2932893d2e2
SSDEEP

98304:Mxv9MTqUi2Rg7yxivn0jokds41Fh4bpgxAYDaRDzHM4TOFRAJSNfcFXN/D+HxowG:2v9mfi866AYafs4iITrmnhpDBzvTKS

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\tmpfile-main\stTfuo7I.exe
"C:\Users\Admin\AppData\Local\Temp\tmpfile-main\stTfuo7I.exe"
1⤵
PID:3980

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3980-0-0x00007FF7697C0000-0x00007FF769CD9000-memory.dmp

Filesize
5.1MB

Download
memory/3980-2-0x00007FF7697C0000-0x00007FF769CD9000-memory.dmp

Filesize
5.1MB

Download

© 2018-2024

Terms | Privacy