8b0f9d248e67199bb7f1a778a03e4caee7d267e61d8a7d70fa1c1f6d7944e96a

Submit
Reports

Overview

overview

Static

static

30bc4934d7...f0.exe

windows7-x64

338fdf3626...13.exe

windows7-x64

342933cb4c...20.exe

windows7-x64

343ace5874...03.exe

windows7-x64

34818CE171...49.dll

windows7-x64

360390_crypt.exe

windows7-x64

360390_tree.cmd

windows7-x64

3896f8a370...e_.exe

windows7-x64

3a061ee07d...8c.dll

windows7-x64

3af4fa2bff...d1.dll

windows7-x64

3bb691982d...21.exe

windows7-x64

3e3f980ab6...95.exe

windows7-x64

3e3f980ab6...26.exe

windows7-x64

3e75e8238a..._2.exe

windows7-x64

400cad56ff...9a.exe

windows7-x64

40b3cb2a21...0c.exe

windows7-x64

425c42d610...5F.exe

windows7-x64

425c42d610...FF.exe

windows7-x64

42d77128db...e7.exe

windows7-x64

4561647.exe

windows7-x64

457C9141EC...C8.exe

windows7-x64

46a9660c57...83.exe

windows7-x64

46ca6b1972...FB.exe

windows7-x64

46ca6b1972...FC.exe

windows7-x64

4e60f3c8ea...5b.exe

windows7-x64

4f0b660543...B3.exe

windows7-x64

4f0b660543...BB.exe

windows7-x64

4f5bff6416...09.exe

windows7-x64

Versamento...__.exe

windows7-x64

4fda5e7e8e...00.exe

windows7-x64

5 Rules for Snort.doc

windows7-x64

502de64ee4...c2.exe

windows7-x64

Analysis

max time kernel
1560s
max time network
1561s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
22-11-2024 02:21

Sharing

Copy URL

Twitter E-mail

Static task

static1

upx macro

5 signatures

Behavioral task

behavioral1

Sample

30bc4934d7e29c8c4c4c9be0510fc7558fddf8db666a0343784c5cf1587b3af0.exe

Resource

win7-20240903-en

discovery

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral2

Sample

338fdf3626aa4a48a5972f291aacf3d6172dd920fe16ac4da4dd6c5b999d2f13.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral3

Sample

342933cb4cbb31a2c30ac1733afc318a6e5cd0226160a59197686d635ec71b20.exe

Resource

win7-20240903-en

discovery persistence ransomware spyware stealer

windows7-x64

12 signatures

1800 seconds

Behavioral task

behavioral4

Sample

343ace5874a5854858e11e6c196007bffc045717ed29db9b03f23d01568e8303.exe

Resource

win7-20240903-en

discovery evasion persistence

windows7-x64

16 signatures

1800 seconds

Behavioral task

behavioral5

Sample

34818CE171EA150B91429AC1DD6FBE49.dll

Resource

win7-20240903-en

discovery evasion

windows7-x64

12 signatures

1800 seconds

Behavioral task

behavioral6

Sample

360390_crypt.exe

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

1800 seconds

Behavioral task

behavioral7

Sample

360390_tree.cmd

Resource

win7-20240903-en

persistence spyware stealer

windows7-x64

3 signatures

1800 seconds

Behavioral task

behavioral8

Sample

3896f8a37034429e9784d767765d85ef6dcde105320568516fac4e31400514db.exe_.exe

Resource

win7-20240903-en

bootkit discovery persistence spyware stealer

windows7-x64

16 signatures

1800 seconds

Behavioral task

behavioral9

Sample

3a061ee07d87a6bb13e613e000e9f685cbffb96bd7024a9e7b4cb0be9a4af38c.dll

Resource

win7-20240903-en

discovery

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral10

Sample

3af4fa2bffaab37fd557ae8146ae0a29ba0faf6d99ad8a1a8d5bf598ac9a23d1.dll

Resource

win7-20241010-en

discovery

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral11

Sample

3bb691982de416a7a4e57b91211e80bea82dcca7b4bdbf25c0c80451dc138421.exe

Resource

win7-20240903-en

credential_access defense_evasion discovery execution impact persistence ransomware spyware stealer

windows7-x64

15 signatures

1800 seconds

Behavioral task

behavioral12

Sample

3e3f980ab668ccde6aafee60ce16e3c35cd91e9b59bff20ce1615d5fb362a458_Dumped_TDS=4FBA3695.exe

Resource

win7-20240903-en

windows7-x64

1 signatures

1800 seconds

Behavioral task

behavioral13

Sample

3e3f980ab668ccde6aafee60ce16e3c35cd91e9b59bff20ce1615d5fb362a458_TDS=4FBADA26.exe

Resource

win7-20240903-en

discovery

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral14

Sample

3e75e8238a6bbd8817164658696198af_72889f61171de37d6b4d59016c55ec52__2.exe

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

1800 seconds

Behavioral task

behavioral15

Sample

400cad56ff3d210346cf6c4795aeb607e5b211b3dc4a8421b9437621c254239a.exe

Resource

win7-20240903-en

discovery evasion persistence upx

windows7-x64

7 signatures

1800 seconds

Behavioral task

behavioral16

Sample

40b3cb2a210fafdaabdebefe1430862bd1192a80fcde84f51ceb387136d1410c.exe

Resource

win7-20240708-en

defense_evasion discovery evasion execution impact persistence ransomware trojan

windows7-x64

11 signatures

1800 seconds

Behavioral task

behavioral17

Sample

425c42d6108db6b6b5cbda7a5417b5f55225c47ac588f5f0a293c2b07a78d14b_Dumped_TDS=4F8C315F.exe

Resource

win7-20240903-en

discovery persistence

windows7-x64

7 signatures

1800 seconds

Behavioral task

behavioral18

Sample

425c42d6108db6b6b5cbda7a5417b5f55225c47ac588f5f0a293c2b07a78d14b_TDS=4F9906FF.exe

Resource

win7-20240903-en

discovery persistence

windows7-x64

7 signatures

1800 seconds

Behavioral task

behavioral19

Sample

42d77128db6bea33966478f01aecda1cf6c17bf9ab5d5782650c1b32cd63bae7.exe

Resource

win7-20240729-en

discovery persistence

windows7-x64

6 signatures

1800 seconds

Behavioral task

behavioral20

Sample

4561647.exe

Resource

win7-20241010-en

discovery ransomware

windows7-x64

7 signatures

1800 seconds

Behavioral task

behavioral21

Sample

457C9141ECDD9E9CFC61551FEA2BCB86AFF56CC8.exe

Resource

win7-20240903-en

modiloader discovery evasion execution persistence trojan

windows7-x64

26 signatures

1800 seconds

Behavioral task

behavioral22

Sample

46a9660c57e244636a28df62e0879300a62552ab9b5cfd4708ff677af7453883.exe

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

1800 seconds

Behavioral task

behavioral23

Sample

46ca6b1972c81eab77202146184afe95b797bd4e3788c59e8036e748b55fc28c_Dumped_TDS=4FB252FB.exe

Resource

win7-20240903-en

windows7-x64

1 signatures

1800 seconds

Behavioral task

behavioral24

Sample

46ca6b1972c81eab77202146184afe95b797bd4e3788c59e8036e748b55fc28c_TDS=4FB566FC.exe

Resource

win7-20240729-en

discovery

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral25

Sample

4e60f3c8eaa0441d4ffdced18aa04153bb91b5470bc5441ba5878f7760ca9b5b.exe

Resource

win7-20240903-en

discovery persistence

windows7-x64

9 signatures

1800 seconds

Behavioral task

behavioral26

Sample

4f0b6605434c1355b10950024eaa9f695822278f57c29275706c0e5b29b369b0_Dumped_TDS=4F9911B3.exe

Resource

win7-20240903-en

discovery persistence

windows7-x64

7 signatures

1800 seconds

Behavioral task

behavioral27

Sample

4f0b6605434c1355b10950024eaa9f695822278f57c29275706c0e5b29b369b0_TDS=4FA6FBBB.exe

Resource

win7-20241010-en

discovery persistence

windows7-x64

7 signatures

1800 seconds

Behavioral task

behavioral28

Sample

4f5bff64160044d9a769ab277ff85ba954e2a2e182c6da4d0672790cf1d48309.exe

Resource

win7-20240729-en

discovery

windows7-x64

6 signatures

1800 seconds

Behavioral task

behavioral29

Sample

Versamento.Pdf______________________________________________________________.exe

Resource

win7-20241010-en

collection defense_evasion discovery evasion execution impact persistence ransomware trojan

windows7-x64

13 signatures

1800 seconds

Behavioral task

behavioral30

Sample

4fda5e7e8e682870e993f97ad26ba6b2.000.exe

Resource

win7-20240903-en

discovery spyware stealer

windows7-x64

5 signatures

1800 seconds

Behavioral task

behavioral31

Sample

5 Rules for Snort.doc

Resource

win7-20240903-en

discovery

windows7-x64

9 signatures

1800 seconds

Behavioral task

behavioral32

Sample

502de64ee4fe0133a1ea5efa4919c03bbca1adc2.exe

Resource

win7-20240903-en

defense_evasion discovery execution impact ransomware spyware stealer

windows7-x64

17 signatures

1800 seconds

Report Analysis Logs

General

Target

338fdf3626aa4a48a5972f291aacf3d6172dd920fe16ac4da4dd6c5b999d2f13.exe
Size

6KB
MD5

f297544a20bda66ee6f98e3dc91060c6
SHA1

3e140a5df3161ff5d3935b1139275e07903cfff5
SHA256

338fdf3626aa4a48a5972f291aacf3d6172dd920fe16ac4da4dd6c5b999d2f13
SHA512

3f626ba5a5153a0a0a0d7b09e810689f5c79e9d0d017bb639fbc18b3d0c052ad179bb994b4fb25f0030c06bb8b741819620e65622c6bc47584ca24e2520c78a7
SSDEEP

96:lia+ERqIgNI9X6xIzKSnjeKk/GJi/T9oCN1GzNt:liauIq/SnjC/VpRQ

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\338fdf3626aa4a48a5972f291aacf3d6172dd920fe16ac4da4dd6c5b999d2f13.exe
"C:\Users\Admin\AppData\Local\Temp\338fdf3626aa4a48a5972f291aacf3d6172dd920fe16ac4da4dd6c5b999d2f13.exe"
1⤵
PID:2688

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2688-0-0x000007FEF55EE000-0x000007FEF55EF000-memory.dmp

Filesize
4KB

Download
memory/2688-1-0x000007FEF5330000-0x000007FEF5CCD000-memory.dmp

Filesize
9.6MB

Download