51b3773145652b5d559396a08e1282a3a1d92d4df473f774d61791386fca0598

Submit
Reports

Overview

overview

Static

static

AES-NI.exe

windows7-x64

Abrechnung.exe

windows7-x64

Box (2).exe

windows7-x64

Box.exe

windows7-x64

a66dde2298...43.exe

windows7-x64

a7768f4973...e0.exe

windows7-x64

aa7ff3bc28...1e.exe

windows7-x64

aace43af8d...99.exe

windows7-x64

ad3cc219a8...ws.dll

windows7-x64

aee03626b8...b1.exe

windows7-x64

afd3b729cf...2e.exe

windows7-x64

b56c4569d6...ss.exe

windows7-x64

b7989d9eac...ss.zip

windows7-x64

zsgblrbrum...ke.exe

windows7-x64

b7d9f11c16...b0.exe

windows7-x64

b8f60c64c7...af.exe

windows7-x64

Saldo.Pdf_...__.exe

windows7-x64

Transazion...__.exe

windows7-x64

bc557a7bfe...8f.exe

windows7-x64

bd2d4d4300...17.vbs

windows7-x64

be03e43db0...5F.exe

windows7-x64

be03e43db0...8A.exe

windows7-x64

be514549a2...1f.exe

windows7-x64

bldjad.ex1.exe

windows7-x64

bldjad.exe

windows7-x64

bldjad2.exe

windows7-x64

c145a26dd6...a0.exe

windows7-x64

c325092750...db.apk

windows7-x64

c36c46f4de...6e.exe

windows7-x64

c3dd2e3cf0...04.exe

windows7-x64

c71c26bf89...3_.exe

windows7-x64

c846282987...fd.exe

windows7-x64

Analysis

max time kernel
590s
max time network
358s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
22-11-2024 03:09

Sharing

Copy URL

Twitter E-mail

Static task

static1

upx

5 signatures

Behavioral task

behavioral1

Sample

AES-NI.exe

Resource

win7-20240903-en

credential_access discovery ransomware stealer upx

windows7-x64

15 signatures

600 seconds

Behavioral task

behavioral2

Sample

Abrechnung.exe

Resource

win7-20240903-en

discovery evasion persistence upx

windows7-x64

13 signatures

600 seconds

Behavioral task

behavioral3

Sample

Box (2).exe

Resource

win7-20240729-en

discovery

windows7-x64

1 signatures

600 seconds

Behavioral task

behavioral4

Sample

Box.exe

Resource

win7-20240708-en

discovery

windows7-x64

1 signatures

600 seconds

Behavioral task

behavioral5

Sample

a66dde22983583da6d3b1e5b9eb1e8fb019f5157eda508305942292c0d10fa43.exe

Resource

win7-20240903-en

defense_evasion discovery evasion execution impact persistence ransomware trojan

windows7-x64

11 signatures

600 seconds

Behavioral task

behavioral6

Sample

a7768f4973ad7cf8217212a4d12dbae0.exe

Resource

win7-20240903-en

discovery evasion persistence trojan upx

windows7-x64

16 signatures

600 seconds

Behavioral task

behavioral7

Sample

aa7ff3bc285bcb4ec48bf2f361f0ad0a1d9fc8f17b7323d2f0615ade68973c1e.exe

Resource

win7-20240729-en

discovery persistence

windows7-x64

5 signatures

600 seconds

Behavioral task

behavioral8

Sample

aace43af8d0932a7b01c5b8fb71c8199.exe

Resource

win7-20241023-en

defense_evasion discovery

windows7-x64

3 signatures

600 seconds

Behavioral task

behavioral9

Sample

ad3cc219a818047d6d3c38a8e4662e21dfedc858578cb2bde2c127d66dfeb7de_PonyNews.dll

Resource

win7-20240903-en

pony credential_access discovery rat spyware stealer

windows7-x64

9 signatures

600 seconds

Behavioral task

behavioral10

Sample

aee03626b83a88b71b06899116cb7ce4b8092365103d69792b0c2d7153f24cb1.exe

Resource

win7-20240903-en

discovery

windows7-x64

7 signatures

600 seconds

Behavioral task

behavioral11

Sample

afd3b729cf99fb9ea441f42862a4835d1d6eeb36ee535f9b206e3a00382c972e.exe

Resource

win7-20240903-en

hydracrypt defense_evasion discovery execution impact persistence ransomware spyware stealer

windows7-x64

20 signatures

600 seconds

Behavioral task

behavioral12

Sample

b56c4569d639e8ce104d9e52dffeba6d18813c058887a3404350904811f32d54_not_packed_maybe_useless.exe

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

600 seconds

Behavioral task

behavioral13

Sample

b7989d9eacb5a8b224fd183f6ba65e4e6bd30a4f0e4e1a299f0d2b63dcb56730_Archive_useless.zip

Resource

win7-20240903-en

windows7-x64

3 signatures

600 seconds

Behavioral task

behavioral14

Sample

zsgblrbrumorwxfizuke.exe

Resource

win7-20240903-en

discovery persistence

windows7-x64

7 signatures

600 seconds

Behavioral task

behavioral15

Sample

b7d9f11c166fa1a4ceef446dd9c8561c77115cb3ce4910a056dd6a361338a2b0.exe

Resource

win7-20240903-en

discovery upx

windows7-x64

5 signatures

600 seconds

Behavioral task

behavioral16

Sample

b8f60c64c70f03c263bf9e9261aa157a73864aaf.exe

Resource

win7-20240903-en

xorist discovery persistence ransomware spyware stealer upx

windows7-x64

17 signatures

600 seconds

Behavioral task

behavioral17

Sample

Saldo.Pdf______________________________________________________________.exe

Resource

win7-20241023-en

collection defense_evasion discovery evasion execution impact persistence ransomware trojan

windows7-x64

13 signatures

600 seconds

Behavioral task

behavioral18

Sample

Transazione.Pdf______________________________________________________________.exe

Resource

win7-20240903-en

collection defense_evasion discovery evasion execution impact persistence ransomware trojan

windows7-x64

13 signatures

600 seconds

Behavioral task

behavioral19

Sample

bc557a7bfec430aab3a1b326f35c8d6c1d2de0532263df872b2280af65f32b8f.exe

Resource

win7-20240903-en

discovery persistence spyware stealer

windows7-x64

8 signatures

600 seconds

Behavioral task

behavioral20

Sample

bd2d4d43009623941f49554f5932188154fc9d16d820e00db1281d057468b017.vbs

Resource

win7-20240903-en

windows7-x64

0 signatures

600 seconds

Behavioral task

behavioral21

Sample

be03e43db0b190b879c893102a76183231ea39ec51206d25651a3cacffa8d81d_Dumped_TDS=4F8C315F.exe

Resource

win7-20240903-en

discovery persistence

windows7-x64

7 signatures

600 seconds

Behavioral task

behavioral22

Sample

be03e43db0b190b879c893102a76183231ea39ec51206d25651a3cacffa8d81d_TDS=4F90A68A.exe

Resource

win7-20241023-en

discovery persistence

windows7-x64

7 signatures

600 seconds

Behavioral task

behavioral23

Sample

be514549a2e654706aeeaa15c8cffce504f0e271c904fe07d865f3999ebaa61f.exe

Resource

win7-20240903-en

credential_access discovery persistence ransomware spyware stealer

windows7-x64

13 signatures

600 seconds

Behavioral task

behavioral24

Sample

bldjad.ex1.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

600 seconds

Behavioral task

behavioral25

Sample

bldjad.exe

Resource

win7-20241010-en

windows7-x64

0 signatures

600 seconds

Behavioral task

behavioral26

Sample

bldjad2.exe

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

600 seconds

Behavioral task

behavioral27

Sample

c145a26dd6d200080c16300456e7c0bc95f2b71f56d94136619e239e466a04a0.exe

Resource

win7-20241010-en

discovery

windows7-x64

1 signatures

600 seconds

Behavioral task

behavioral28

Sample

c325092750dd55898c47be7ec8a7622c3bf8d1a79c40b160ef7901c2ef18f5db.apk

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

600 seconds

Behavioral task

behavioral29

Sample

c36c46f4de045ef332decc006694db6e.exe

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

600 seconds

Behavioral task

behavioral30

Sample

c3dd2e3cf0ebeec7a6c280e187a044a32b54b369a78aaaa89c600a0767b49704.exe

Resource

win7-20240903-en

discovery

windows7-x64

2 signatures

600 seconds

Behavioral task

behavioral31

Sample

c71c26bf894feb5dbedb2cf2477258f3edf3133a3c22c68ab378ba65ecf251d3_.exe

Resource

win7-20240903-en

discovery persistence

windows7-x64

10 signatures

600 seconds

Behavioral task

behavioral32

Sample

c8462829871b7bdb005f4dd881d253aa255a1b2f6f3d89edb1d609b51f5d04fd.exe

Resource

win7-20241010-en

discovery

windows7-x64

3 signatures

600 seconds

Report Analysis Logs

General

Target

bldjad.ex1.exe
Size

132KB
MD5

b1c88e7ed0edb803ead0c0eeeef53935
SHA1

ddc529d37589d68e9013327e57d3cb15ddd6b406
SHA256

3fb245ab1427cb59a359fb2e910a3a8e7e4535114cf61469001d740305e97200
SHA512

129ade5293e0c5f0d5a1ad0dfde0e6e0f5eac5f3031f9d57d855a368e034dda932fca4f6d7020d111e463a37fd3da3ffc3405ec750e3a0dea5113a26ce316cd0
SSDEEP

1536:/udS9WayNWqE9pDV6PSPP7dl5vUOENrlSN+jvNYvecy1q2sJ6Ysktv8FkXAk3RCG:/R9jyMqMVmcdlONoNklYvhvGklRWAx

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\bldjad.ex1.exe
"C:\Users\Admin\AppData\Local\Temp\bldjad.ex1.exe"
1⤵
PID:2532

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2532-0-0x0000000000220000-0x0000000000250000-memory.dmp

Filesize
192KB

Download
memory/2532-1-0x0000000000400000-0x0000000000430000-memory.dmp

Filesize
192KB

Download