526b432752bac2edc49ee4a3cc2428f5d7249fa3afe66deba5d23e12e4bce68c

Submit
Reports

Overview

overview

Static

static

Rack/023f6...10.exe

windows7-x64

Rack/023f6...10.exe

windows10-2004-x64

Rack/311d0...c2.exe

windows7-x64

Rack/311d0...c2.exe

windows10-2004-x64

Rack/47f84...1f.exe

windows7-x64

Rack/47f84...1f.exe

windows10-2004-x64

Rack/5578d...e5.exe

windows7-x64

Rack/5578d...e5.exe

windows10-2004-x64

Rack/5606c...56.exe

windows7-x64

Rack/5606c...56.exe

windows10-2004-x64

Rack/62354...c9.exe

windows7-x64

Rack/62354...c9.exe

windows10-2004-x64

Rack/666a3...e6.exe

windows7-x64

Rack/666a3...e6.exe

windows10-2004-x64

Rack/6a08b...68.exe

windows7-x64

Rack/6a08b...68.exe

windows10-2004-x64

Rack/73809...4e.exe

windows7-x64

Rack/73809...4e.exe

windows10-2004-x64

Rack/849eb...7c.exe

windows7-x64

Rack/849eb...7c.exe

windows10-2004-x64

Rack/8afc5...7e.exe

windows7-x64

Rack/8afc5...7e.exe

windows10-2004-x64

Rack/d4d53...91.exe

windows7-x64

Rack/d4d53...91.exe

windows10-2004-x64

Rack/e4ea7...8a.exe

windows7-x64

Rack/e4ea7...8a.exe

windows10-2004-x64

Rack/e5876...5c.exe

windows7-x64

Rack/e5876...5c.exe

windows10-2004-x64

Rack/e98b1...8d.exe

windows7-x64

Rack/e98b1...8d.exe

windows10-2004-x64

Rack/fc330...dd.exe

windows7-x64

Rack/fc330...dd.exe

windows10-2004-x64

Analysis

max time kernel
0s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
19-11-2024 23:52

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Rack/023f69ef6dae03563d033b53730b56c53cedcb376d253ada613fd98c9a9ee010.exe

Resource

win7-20241010-en

windows7-x64

20 signatures

150 seconds

Behavioral task

behavioral2

Sample

Rack/023f69ef6dae03563d033b53730b56c53cedcb376d253ada613fd98c9a9ee010.exe

Resource

win10v2004-20241007-en

dharma credential_access defense_evasion discovery execution impact persistence ransomware spyware stealer

windows10-2004-x64

21 signatures

150 seconds

Behavioral task

behavioral3

Sample

Rack/311d088d7c22fea0c84e1f53d3ba5dd8fb9429a2cf7476e061d061c40c20d8c2.exe

Resource

win7-20240903-en

collection defense_evasion discovery evasion execution impact persistence ransomware trojan

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral4

Sample

Rack/311d088d7c22fea0c84e1f53d3ba5dd8fb9429a2cf7476e061d061c40c20d8c2.exe

Resource

win10v2004-20241007-en

defense_evasion discovery execution impact persistence ransomware

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral5

Sample

Rack/47f84419a3c49e289492b9e348c14c268b117cd26964746fa65318c893cbe81f.exe

Resource

win7-20240903-en

defense_evasion discovery evasion execution impact persistence ransomware trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral6

Sample

Rack/47f84419a3c49e289492b9e348c14c268b117cd26964746fa65318c893cbe81f.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

Rack/5578d702c7fd246e11f71c4edb27b316ca267c6161effab324c9f6e6260bc9e5.exe

Resource

win7-20240903-en

defense_evasion discovery evasion execution impact persistence ransomware trojan

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral8

Sample

Rack/5578d702c7fd246e11f71c4edb27b316ca267c6161effab324c9f6e6260bc9e5.exe

Resource

win10v2004-20241007-en

defense_evasion discovery evasion execution impact persistence ransomware trojan

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral9

Sample

Rack/5606ce60e5b92f774579a2e60d76a1eaccbf946df8bd5fe828ef343856b7af56.exe

Resource

win7-20241023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Rack/5606ce60e5b92f774579a2e60d76a1eaccbf946df8bd5fe828ef343856b7af56.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Rack/6235491cac4d58eb04c20f1649de6b3381972cdd33158b797fa6f6845afcd2c9.exe

Resource

win7-20241010-en

discovery evasion persistence trojan

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral12

Sample

Rack/6235491cac4d58eb04c20f1649de6b3381972cdd33158b797fa6f6845afcd2c9.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral13

Sample

Rack/666a3daa2ef51e1b14e0abeddecce8ba836a27cc37781899c88a3b6f328d17e6.exe

Resource

win7-20240903-en

dharma credential_access defense_evasion discovery execution impact persistence ransomware spyware stealer

windows7-x64

20 signatures

150 seconds

Behavioral task

behavioral14

Sample

Rack/666a3daa2ef51e1b14e0abeddecce8ba836a27cc37781899c88a3b6f328d17e6.exe

Resource

win10v2004-20241007-en

dharma credential_access defense_evasion discovery execution impact persistence ransomware spyware stealer

windows10-2004-x64

21 signatures

150 seconds

Behavioral task

behavioral15

Sample

Rack/6a08b51e02a7b510972907c326041222ff4632ba53b89573fca7e80b59c4e168.exe

Resource

win7-20240903-en

discovery

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

Rack/6a08b51e02a7b510972907c326041222ff4632ba53b89573fca7e80b59c4e168.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

Rack/73809e9329c76c069035ac65dd9645c87aee3459a0f62b0fab1a640b56b6a34e.exe

Resource

win7-20240903-en

dharma credential_access defense_evasion discovery execution impact persistence ransomware spyware stealer

windows7-x64

20 signatures

150 seconds

Behavioral task

behavioral18

Sample

Rack/73809e9329c76c069035ac65dd9645c87aee3459a0f62b0fab1a640b56b6a34e.exe

Resource

win10v2004-20241007-en

dharma credential_access defense_evasion discovery execution impact persistence ransomware spyware stealer

windows10-2004-x64

21 signatures

150 seconds

Behavioral task

behavioral19

Sample

Rack/849ebe96bbc8cb10dc7f980e272aea06dbedc66d7228ff1333542a7ff6aa017c.exe

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Rack/849ebe96bbc8cb10dc7f980e272aea06dbedc66d7228ff1333542a7ff6aa017c.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Rack/8afc51fb904b25124bd5cb41985e917333071d1af1c6ab83cc7ae408e7cb0e7e.exe

Resource

win7-20240708-en

defense_evasion discovery evasion execution impact persistence ransomware trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral22

Sample

Rack/8afc51fb904b25124bd5cb41985e917333071d1af1c6ab83cc7ae408e7cb0e7e.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

Rack/d4d53c64cb46b4a286bdfdecaa928ed77942d8838506356bfbb6b8da8349c191.exe

Resource

win7-20240903-en

dharma credential_access defense_evasion discovery execution impact persistence ransomware spyware stealer

windows7-x64

24 signatures

150 seconds

Behavioral task

behavioral24

Sample

Rack/d4d53c64cb46b4a286bdfdecaa928ed77942d8838506356bfbb6b8da8349c191.exe

Resource

win10v2004-20241007-en

dharma credential_access defense_evasion discovery execution impact persistence ransomware spyware stealer

windows10-2004-x64

21 signatures

150 seconds

Behavioral task

behavioral25

Sample

Rack/e4ea72a1de2c5e1388cb35eee6beffdae4e06f9fe08f9aca04ad6350e32e338a.exe

Resource

win7-20240708-en

defense_evasion discovery evasion execution impact persistence ransomware trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral26

Sample

Rack/e4ea72a1de2c5e1388cb35eee6beffdae4e06f9fe08f9aca04ad6350e32e338a.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral27

Sample

Rack/e58768c3df867270aa9e3177709415005914b39d272623e8d296106ad5cf125c.exe

Resource

win7-20240903-en

defense_evasion discovery evasion execution impact persistence ransomware trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral28

Sample

Rack/e58768c3df867270aa9e3177709415005914b39d272623e8d296106ad5cf125c.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral29

Sample

Rack/e98b1768aa5636c335985669c52319f9226089f9298dd5f9840c062bf8dcd18d.exe

Resource

win7-20241010-en

dharma credential_access defense_evasion discovery execution impact persistence ransomware spyware stealer

windows7-x64

20 signatures

150 seconds

Behavioral task

behavioral30

Sample

Rack/e98b1768aa5636c335985669c52319f9226089f9298dd5f9840c062bf8dcd18d.exe

Resource

win10v2004-20241007-en

dharma credential_access defense_evasion discovery execution impact persistence ransomware spyware stealer

windows10-2004-x64

21 signatures

150 seconds

Behavioral task

behavioral31

Sample

Rack/fc330047cbdd7edc5776a5ef560e9ca73f3986ccd17f0e775a57b563dd8a2cdd.exe

Resource

win7-20240729-en

defense_evasion discovery evasion execution impact persistence ransomware trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral32

Sample

Rack/fc330047cbdd7edc5776a5ef560e9ca73f3986ccd17f0e775a57b563dd8a2cdd.exe

Resource

win10v2004-20241007-en

defense_evasion discovery evasion execution impact persistence ransomware trojan

windows10-2004-x64

11 signatures

150 seconds

Errors

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\Rack\5606ce60e5b92f774579a2e60d76a1eaccbf946df8bd5fe828ef343856b7af56.exe command="C:\Users\Admin\AppData\Local\Temp\Rack\5606ce60e5b92f774579a2e60d76a1eaccbf946df8bd5fe828ef343856b7af56.exe" wdir=C:\Users\Admin\AppData\Local\Temp\Rack Payload error: %1 is not a valid Win32 application.

Report Analysis Logs

General

Target

Rack/5606ce60e5b92f774579a2e60d76a1eaccbf946df8bd5fe828ef343856b7af56.exe
Size

1.1MB
MD5

e3aa99937965b8f10885803153373540
SHA1

6b12def96c216fc6acb1f240a38693f6531b5bdf
SHA256

5606ce60e5b92f774579a2e60d76a1eaccbf946df8bd5fe828ef343856b7af56
SHA512

39179217d54f50437e3cf6b3278f2c74f20e9bf2ff0797561f0551a424fc627849466f0c4c4789b3f470e4eea3c8a195ff5f5372a61b1e7711d4af588b7319a7
SSDEEP

12288:eW+pDu9YrDQKiXEfiVzhY1Iys0P9ckMveteJCfol1cUX9NqnQaCfol1cUX9NqnQj:eb0sDNiUfiPgI91kMveYvfgnQ8fgnQj

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads