51b3773145652b5d559396a08e1282a3a1d92d4df473f774d61791386fca0598

Submit
Reports

Overview

overview

Static

static

AES-NI.exe

windows10-2004-x64

Abrechnung.exe

windows10-2004-x64

Box (2).exe

windows10-2004-x64

Box.exe

windows10-2004-x64

a66dde2298...43.exe

windows10-2004-x64

a7768f4973...e0.exe

windows10-2004-x64

aa7ff3bc28...1e.exe

windows10-2004-x64

aace43af8d...99.exe

windows10-2004-x64

ad3cc219a8...ws.dll

windows10-2004-x64

aee03626b8...b1.exe

windows10-2004-x64

afd3b729cf...2e.exe

windows10-2004-x64

b56c4569d6...ss.exe

windows10-2004-x64

0.84762379...67.exe

windows10-2004-x64

zsgblrbrum...ke.exe

windows10-2004-x64

b7d9f11c16...b0.exe

windows10-2004-x64

b8f60c64c7...af.exe

windows10-2004-x64

Saldo.Pdf_...__.exe

windows10-2004-x64

bc557a7bfe...8f.exe

windows10-2004-x64

bd2d4d4300...17.vbs

windows10-2004-x64

be03e43db0...5F.exe

windows10-2004-x64

be03e43db0...8A.exe

windows10-2004-x64

be514549a2...1f.exe

windows10-2004-x64

bfb8f7f6cb...-0.dll

windows10-2004-x64

bldjad.ex1.exe

windows10-2004-x64

bldjad.exe

windows10-2004-x64

bldjad2.exe

windows10-2004-x64

c145a26dd6...a0.exe

windows10-2004-x64

c325092750...db.apk

windows10-2004-x64

c36c46f4de...6e.exe

windows10-2004-x64

c3dd2e3cf0...04.exe

windows10-2004-x64

c71c26bf89...3_.exe

windows10-2004-x64

c846282987...fd.exe

windows10-2004-x64

Resubmissions

22-11-2024 22:54

241122-2vh7gaxmfl 10

22-11-2024 03:27

241122-dzqkcatmht 10

22-11-2024 03:16

241122-dsgc4atlgs 10

Analysis

max time kernel
0s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
22-11-2024 22:54

Sharing

Copy URL

Twitter E-mail

Static task

static1

upx

5 signatures

Behavioral task

behavioral1

Sample

AES-NI.exe

Resource

win10v2004-20241007-en

credential_access discovery persistence privilege_escalation ransomware stealer upx

windows10-2004-x64

22 signatures

150 seconds

Behavioral task

behavioral2

Sample

Abrechnung.exe

Resource

win10v2004-20241007-en

discovery evasion persistence upx

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral3

Sample

Box (2).exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

Box.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

a66dde22983583da6d3b1e5b9eb1e8fb019f5157eda508305942292c0d10fa43.exe

Resource

win10v2004-20241007-en

defense_evasion discovery evasion execution impact persistence ransomware trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral6

Sample

a7768f4973ad7cf8217212a4d12dbae0.exe

Resource

win10v2004-20241007-en

discovery evasion persistence trojan upx

windows10-2004-x64

14 signatures

150 seconds

Behavioral task

behavioral7

Sample

aa7ff3bc285bcb4ec48bf2f361f0ad0a1d9fc8f17b7323d2f0615ade68973c1e.exe

Resource

win10v2004-20241007-en

discovery persistence

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral8

Sample

aace43af8d0932a7b01c5b8fb71c8199.exe

Resource

win10v2004-20241007-en

defense_evasion discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

ad3cc219a818047d6d3c38a8e4662e21dfedc858578cb2bde2c127d66dfeb7de_PonyNews.dll

Resource

win10v2004-20241007-en

pony credential_access discovery rat spyware stealer

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral10

Sample

aee03626b83a88b71b06899116cb7ce4b8092365103d69792b0c2d7153f24cb1.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral11

Sample

afd3b729cf99fb9ea441f42862a4835d1d6eeb36ee535f9b206e3a00382c972e.exe

Resource

win10v2004-20241007-en

hydracrypt defense_evasion discovery execution impact persistence ransomware spyware stealer

windows10-2004-x64

20 signatures

150 seconds

Behavioral task

behavioral12

Sample

b56c4569d639e8ce104d9e52dffeba6d18813c058887a3404350904811f32d54_not_packed_maybe_useless.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

0.8476237917779167.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

zsgblrbrumorwxfizuke.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

b7d9f11c166fa1a4ceef446dd9c8561c77115cb3ce4910a056dd6a361338a2b0.exe

Resource

win10v2004-20241007-en

discovery upx

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral16

Sample

b8f60c64c70f03c263bf9e9261aa157a73864aaf.exe

Resource

win10v2004-20241007-en

xorist discovery persistence ransomware spyware stealer upx

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral17

Sample

Saldo.Pdf______________________________________________________________.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

bc557a7bfec430aab3a1b326f35c8d6c1d2de0532263df872b2280af65f32b8f.exe

Resource

win10v2004-20241007-en

discovery persistence spyware stealer

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral19

Sample

bd2d4d43009623941f49554f5932188154fc9d16d820e00db1281d057468b017.vbs

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

be03e43db0b190b879c893102a76183231ea39ec51206d25651a3cacffa8d81d_Dumped_TDS=4F8C315F.exe

Resource

win10v2004-20241007-en

discovery persistence

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral21

Sample

be03e43db0b190b879c893102a76183231ea39ec51206d25651a3cacffa8d81d_TDS=4F90A68A.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

be514549a2e654706aeeaa15c8cffce504f0e271c904fe07d865f3999ebaa61f.exe

Resource

win10v2004-20241007-en

credential_access discovery persistence ransomware spyware stealer

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral23

Sample

bfb8f7f6cbe24330a310e5c7cbe99ed4_api-ms-win-system-wer-l1-1-0.dll

Resource

win10v2004-20241007-en

discovery spyware stealer

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral24

Sample

bldjad.ex1.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

bldjad.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

bldjad2.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral27

Sample

c145a26dd6d200080c16300456e7c0bc95f2b71f56d94136619e239e466a04a0.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

c325092750dd55898c47be7ec8a7622c3bf8d1a79c40b160ef7901c2ef18f5db.apk

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

c36c46f4de045ef332decc006694db6e.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

c3dd2e3cf0ebeec7a6c280e187a044a32b54b369a78aaaa89c600a0767b49704.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral31

Sample

c71c26bf894feb5dbedb2cf2477258f3edf3133a3c22c68ab378ba65ecf251d3_.exe

Resource

win10v2004-20241007-en

discovery persistence

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral32

Sample

c8462829871b7bdb005f4dd881d253aa255a1b2f6f3d89edb1d609b51f5d04fd.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Errors

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\Saldo.Pdf______________________________________________________________.exe command="C:\Users\Admin\AppData\Local\Temp\Saldo.Pdf______________________________________________________________.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: %1 is not a valid Win32 application.

Report Analysis Logs

General

Target

Saldo.Pdf______________________________________________________________.exe
Size

446KB
MD5

93cbe4ed3d46abe732a124a41e7147a2
SHA1

94a24be60d90479ce27f7787a86678472aabdc6e
SHA256

89e71eb0a6403725d2f95cb9e6506b8b139a6948a61dc1c5cfedf18648241ec4
SHA512

8f46af90d8a2d78da003a8a395fd7f74cc235595238ee3a3e4d87fee2aa4c8abf6ece403bb3726122d3825437f5d079ea1f8d6b275153bb76b3b0d75c243ef09
SSDEEP

6144:XOOxeLzWoeNqagVRUvOWcTwlOcTeP8uENXIEQSdO8c/AVxYflxiW:txeHWoA/Wr0lfQ8BfLkIVxYfrd

Resubmissions

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads