e9b99706a9b48b09974dd18c1af8a0e402ccddcaa0c91edf43fdd838128a7408

Submit
Reports

Overview

overview

Static

static

0.46582298...58.exe

windows7-x64

00331dd25b...3a.exe

windows7-x64

065988f36f...a0.exe

windows7-x64

0826716413...57.exe

windows7-x64

08cf8ed94c...a4.exe

windows7-x64

0997ba7292...3c.exe

windows7-x64

0b7996bca4...5f.exe

windows7-x64

0c3431dbb8...ui.dll

windows7-x64

0cd7440ca9...bc.exe

windows7-x64

100b8bfff5...ir.exe

windows7-x64

101.ex_.exe

windows7-x64

119.executable.exe

windows7-x64

119.unp.exe

windows7-x64

11abb44de5...47.exe

windows7-x64

11fb52c968...22.exe

windows7-x64

123.exe

windows7-x64

139.exe

windows7-x64

13E418BF18...73.dll

windows7-x64

144.exe

windows7-x64

17697e1829...44.dll

windows7-x64

19561b3379...er.exe

windows7-x64

19ec0d0e51...C5.exe

windows7-x64

1a6bed2aff...f2.exe

windows7-x64

1f210c60f9...40.exe

windows7-x64

1f3509cc11...dd.exe

windows7-x64

20c6d29da8...7d.exe

windows7-x64

234e77145d...2d.exe

windows7-x64

263fc6fc9e...32.exe

windows7-x64

2e0da054d0...23.zip

windows7-x64

Compenso.P...__.exe

windows7-x64

301a3f5017...5f.exe

windows7-x64

30620.ex_.exe

windows7-x64

Analysis

max time kernel
0s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
22-11-2024 02:14

Sharing

Copy URL

Twitter E-mail

Static task

static1

upx blackmoon

5 signatures

Behavioral task

behavioral1

Sample

0.4658229854220858.exe

Resource

win7-20240708-en

discovery

windows7-x64

7 signatures

300 seconds

Behavioral task

behavioral2

Sample

00331dd25b83984d4b6d9753fec2b306e88ac87371ea48188df49cb630905d3a.exe

Resource

win7-20240903-en

discovery evasion persistence

windows7-x64

15 signatures

300 seconds

Behavioral task

behavioral3

Sample

065988f36f3ab99ff40893c7ad756cfcc3baea1b8b5217f17cdd6e44160df0a0.exe

Resource

win7-20240729-en

discovery

windows7-x64

2 signatures

300 seconds

Behavioral task

behavioral4

Sample

082671641341d89fe49d0da717846035ba6af02edb59840148eddc3586d21557.exe

Resource

win7-20240903-en

persistence

windows7-x64

9 signatures

300 seconds

Behavioral task

behavioral5

Sample

08cf8ed94cc1ef6ae23133f3e506a50d8aad9047c6fa74568a0373d991261aa4.exe

Resource

win7-20240903-en

credential_access defense_evasion discovery evasion execution impact persistence ransomware stealer

windows7-x64

22 signatures

300 seconds

Behavioral task

behavioral6

Sample

0997ba7292ddbac1c7e7ade6766ed53c.exe

Resource

win7-20240708-en

discovery

windows7-x64

3 signatures

300 seconds

Behavioral task

behavioral7

Sample

0b7996bca486575be15e68dba7cbd802b1e5f90436ba23f802da66292c8a055f.exe

Resource

win7-20240708-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral8

Sample

0c3431dbb8cd0478250eb4357257880e_localui.dll

Resource

win7-20241023-en

windows7-x64

3 signatures

300 seconds

Behavioral task

behavioral9

Sample

0cd7440ca94d31212e21867439f38f0828823b76c94d566e81f5dfaf71574ebc.exe

Resource

win7-20240903-en

discovery spyware stealer upx

windows7-x64

11 signatures

300 seconds

Behavioral task

behavioral10

Sample

100b8bfff550fb74c98a2ef9a71d4bb53553d2d7ba509bb451fe32814ec57e48.exe.vir.exe

Resource

win7-20240903-en

discovery

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral11

Sample

101.ex_.exe

Resource

win7-20240729-en

discovery

windows7-x64

6 signatures

300 seconds

Behavioral task

behavioral12

Sample

119.executable.exe

Resource

win7-20241010-en

discovery persistence upx

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral13

Sample

119.unp.exe

Resource

win7-20240903-en

discovery persistence

windows7-x64

3 signatures

300 seconds

Behavioral task

behavioral14

Sample

11abb44de53807e32980a010a473514694f901841e63ab33f5e0ff8754009b47.exe

Resource

win7-20240903-en

blackmoon banker discovery evasion persistence spyware stealer trojan upx

windows7-x64

22 signatures

300 seconds

Behavioral task

behavioral15

Sample

11fb52c96853e12f011b7b7894e9884e56eb5522.exe

Resource

win7-20240903-en

discovery evasion persistence trojan upx

windows7-x64

22 signatures

300 seconds

Behavioral task

behavioral16

Sample

123.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral17

Sample

139.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral18

Sample

13E418BF18B03AC80580DB69ADA305A2B7093DFED00692DCF91A99D2526D3A73.dll

Resource

win7-20240903-en

discovery

windows7-x64

2 signatures

300 seconds

Behavioral task

behavioral19

Sample

144.exe

Resource

win7-20241010-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral20

Sample

17697e1829f0d18d2051a67bc2bca134_da3ded254909e9abaa46eb5bc3b10944.dll

Resource

win7-20240903-en

discovery

windows7-x64

2 signatures

300 seconds

Behavioral task

behavioral21

Sample

19561b33793dcb865eae56575a899ce8_kovter_from_Sakura82_taskmanger.exe

Resource

win7-20240903-en

modiloader discovery evasion persistence trojan upx

windows7-x64

18 signatures

300 seconds

Behavioral task

behavioral22

Sample

19ec0d0e5143940492a1c79c06eb8f18aa9feb356e41b8b79fdc6a16a3bcd7bf_TDS=4F9B33C5.exe

Resource

win7-20241010-en

discovery persistence

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral23

Sample

1a6bed2afff1b9880e42a29cea9b8139bcb12e34085fb008de13aa983b82a4f2.exe

Resource

win7-20240903-en

hydracrypt defense_evasion discovery execution impact persistence ransomware spyware stealer

windows7-x64

20 signatures

300 seconds

Behavioral task

behavioral24

Sample

1f210c60f90fd8403099482455f3220b56b2864bc4d2b6af0abda4a2c3854d40.exe

Resource

win7-20240903-en

xorist discovery persistence ransomware spyware stealer upx

windows7-x64

14 signatures

300 seconds

Behavioral task

behavioral25

Sample

1f3509cc11ffa1f7d839df93615cf1ba0819d75cafd5ef59110d9b01fb90addd.exe

Resource

win7-20240903-en

mimikatz discovery spyware stealer

windows7-x64

16 signatures

300 seconds

Behavioral task

behavioral26

Sample

20c6d29da875075afa0ed7b4fb58e555de89d4bed13bf5ad109817c593ddd77d.exe

Resource

win7-20241023-en

defense_evasion discovery evasion execution impact ransomware

windows7-x64

12 signatures

300 seconds

Behavioral task

behavioral27

Sample

234e77145d329956192c389249e20520851853e2a33779be93530788201b612d.exe

Resource

win7-20240729-en

discovery evasion persistence trojan upx

windows7-x64

16 signatures

300 seconds

Behavioral task

behavioral28

Sample

263fc6fc9efa4c05a08d9ff1fc7bb060a7b8f376f82afa17fd3fc267bc8e8032.exe

Resource

win7-20240903-en

defense_evasion discovery execution impact persistence ransomware

windows7-x64

11 signatures

300 seconds

Behavioral task

behavioral29

Sample

2e0da054d03fde4e7b2c2057cc4aa410c64b6ab8777ee6d4fd43f031a5170a23.zip

Resource

win7-20240708-en

collection defense_evasion discovery evasion execution impact persistence ransomware trojan

windows7-x64

18 signatures

300 seconds

Behavioral task

behavioral30

Sample

Compenso.Pdf______________________________________________________________.exe

Resource

win7-20240903-en

collection defense_evasion discovery evasion execution impact persistence ransomware trojan

windows7-x64

13 signatures

300 seconds

Behavioral task

behavioral31

Sample

301a3f5017e578fb04b0eb33f45831bb9bb8318020e0a18d222ebea08bf1c75f.exe

Resource

win7-20240903-en

discovery evasion persistence

windows7-x64

15 signatures

300 seconds

Behavioral task

behavioral32

Sample

30620.ex_.exe

Resource

win7-20241010-en

discovery persistence

windows7-x64

5 signatures

300 seconds

Errors

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\0b7996bca486575be15e68dba7cbd802b1e5f90436ba23f802da66292c8a055f.exe command="C:\Users\Admin\AppData\Local\Temp\0b7996bca486575be15e68dba7cbd802b1e5f90436ba23f802da66292c8a055f.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: This version of %1 is not compatible with the version of Windows you're running. Check your computer's system information to see whether you need a x86 (32-bit) or x64 (64-bit) version of the program, and then contact the software publisher.

Report Analysis Logs

General

Target

0b7996bca486575be15e68dba7cbd802b1e5f90436ba23f802da66292c8a055f.exe
Size

475KB
MD5

27d857e12b9be5d43f935b8cc86eaabf
SHA1

ffebffc89a0b417e56dea3fdce962ee54f7ce00f
SHA256

0b7996bca486575be15e68dba7cbd802b1e5f90436ba23f802da66292c8a055f
SHA512

0898c58b8c69528c37d231a4ab5d83833d7b5235abdff5f94a238824f02fac794e57802cdeac5a39259723ff8cb860831a230300d39ddab390a0b2c93aa7e439
SSDEEP

12288:jp429hwR3RIryG/iMTL5IG8FEVVnk0Okn:jD9hwnrhMTGG8FEvk0Okn

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads