c41899315b2f3dad512ed1f58746e59fdb2f9717badcf7b2c861c1248d945991

Submit
Reports

Overview

overview

Static

static

D02D012970...94.exe

windows7-x64

DBm0yQwt.exe.ViR.exe

windows7-x64

ca6ec46ee9...52.apk

windows7-x64

calc.exe

windows7-x64

ccc71c83c8...B3.exe

windows7-x64

ccc71c83c8...68.exe

windows7-x64

cd2d085998...-0.dll

windows7-x64

cdffb7e75b...ss.exe

windows7-x64

cf7382c25a...c9.exe

windows7-x64

cgi19-alpt...e_.exe

windows7-x64

chrst.exe

windows7-x64

ci05l2a.exe

windows7-x64

cl.exe

windows7-x64

clean.exe

windows7-x64

coinvault.exe

windows7-x64

com_loader.exe

windows7-x64

csrss.ex_.exe

windows7-x64

d.exe

windows7-x64

d0a5cfec8e...B3.exe

windows7-x64

d0a5cfec8e...A6.exe

windows7-x64

d2164cdbc9...FB.exe

windows7-x64

d2164cdbc9...08.exe

windows7-x64

d4439055d2..._1.dll

windows7-x64

d54d2a216e...96.exe

windows7-x64

d5f29750a8...c5.apk

windows7-x64

d6c32b0146...4d.zip

windows7-x64

d889734783...48.exe

windows7-x64

daaa72f48b...2d.exe

windows7-x64

ddbf1840bf...e2.exe

windows7-x64

de882c049b..._3.dll

windows7-x64

decrypt.exe

windows7-x64

decrypted.ex_.exe

windows7-x64

Analysis

max time kernel
0s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
22-11-2024 03:21

Sharing

Copy URL

Twitter E-mail

Static task

static1

upx

4 signatures

Behavioral task

behavioral1

Sample

D02D012970AA164CAD15C757D7E52994.exe

Resource

win7-20240903-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral2

Sample

DBm0yQwt.exe.ViR.exe

Resource

win7-20240903-en

defense_evasion discovery execution impact ransomware

windows7-x64

21 signatures

300 seconds

Behavioral task

behavioral3

Sample

ca6ec46ee9435a4745fd3a03267f051dc64540dd348f127bb33e9675dadd3d52.apk

Resource

win7-20240729-en

discovery

windows7-x64

6 signatures

300 seconds

Behavioral task

behavioral4

Sample

calc.exe

Resource

win7-20241010-en

discovery persistence upx

windows7-x64

10 signatures

300 seconds

Behavioral task

behavioral5

Sample

ccc71c83c8d9895ef0b375273f9f185dfac63ecd01775e2dc705afe4d48c95e2_Dumped_TDS=4F9911B3.exe

Resource

win7-20241023-en

persistence

windows7-x64

3 signatures

300 seconds

Behavioral task

behavioral6

Sample

ccc71c83c8d9895ef0b375273f9f185dfac63ecd01775e2dc705afe4d48c95e2_TDS=4FAD9768.exe

Resource

win7-20240903-en

discovery persistence

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral7

Sample

cd2d085998a289134ffaf27fbdcbc8cb_api-ms-win-system-dispex-l1-1-0.dll

Resource

win7-20240903-en

discovery spyware stealer

windows7-x64

9 signatures

300 seconds

Behavioral task

behavioral8

Sample

cdffb7e75b20eeae4db75c9962c17b3be980a719f7597e8b11a747d72c975a36_not_packed_maybe_useless.exe

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

300 seconds

Behavioral task

behavioral9

Sample

cf7382c25a8bf0d904d51063ceb29fb70f630bc9.exe

Resource

win7-20240708-en

discovery persistence

windows7-x64

6 signatures

300 seconds

Behavioral task

behavioral10

Sample

cgi19-alptsevs-h555.exe_.exe

Resource

win7-20240903-en

bootkit discovery persistence spyware stealer

windows7-x64

20 signatures

300 seconds

Behavioral task

behavioral11

Sample

chrst.exe

Resource

win7-20241010-en

discovery

windows7-x64

3 signatures

300 seconds

Behavioral task

behavioral12

Sample

ci05l2a.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral13

Sample

cl.exe

Resource

win7-20240903-en

discovery persistence

windows7-x64

7 signatures

300 seconds

Behavioral task

behavioral14

Sample

clean.exe

Resource

win7-20240903-en

discovery

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral15

Sample

coinvault.exe

Resource

win7-20240903-en

defense_evasion discovery execution impact persistence ransomware

windows7-x64

9 signatures

300 seconds

Behavioral task

behavioral16

Sample

com_loader.exe

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

300 seconds

Behavioral task

behavioral17

Sample

csrss.ex_.exe

Resource

win7-20240708-en

discovery persistence upx

windows7-x64

8 signatures

300 seconds

Behavioral task

behavioral18

Sample

d.exe

Resource

win7-20240729-en

discovery

windows7-x64

2 signatures

300 seconds

Behavioral task

behavioral19

Sample

d0a5cfec8e80622b3e194b5ee03e93d78c7ef3478bead6a039d213caaaa58523_Dumped_TDS=4F9911B3.exe

Resource

win7-20241010-en

persistence

windows7-x64

3 signatures

300 seconds

Behavioral task

behavioral20

Sample

d0a5cfec8e80622b3e194b5ee03e93d78c7ef3478bead6a039d213caaaa58523_TDS=4FA478A6.exe

Resource

win7-20240903-en

discovery persistence

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral21

Sample

d2164cdbc9c78db0115f382a139ccd758f8a25ebfc5ab3e0034e7aef0fe0b6b4_Dumped_TDS=4FB252FB.exe

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

300 seconds

Behavioral task

behavioral22

Sample

d2164cdbc9c78db0115f382a139ccd758f8a25ebfc5ab3e0034e7aef0fe0b6b4_TDS=4FB30D08.exe

Resource

win7-20241023-en

discovery

windows7-x64

2 signatures

300 seconds

Behavioral task

behavioral23

Sample

d4439055d2d63e52ffc23c6d24d89194_86e510605f1ee068bdc1ae306312652a__1.dll

Resource

win7-20240903-en

discovery

windows7-x64

2 signatures

300 seconds

Behavioral task

behavioral24

Sample

d54d2a216e637bcd36e5217cfba98896.exe

Resource

win7-20240903-en

discovery

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral25

Sample

d5f29750a8cb158d9b89a1e02e8addc5e410d1ddc48e660589144ade47f794c5.apk

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

300 seconds

Behavioral task

behavioral26

Sample

d6c32b0146f219bdcb5cf524ea9e0047d9b9bd0fd7c395d5b11cbc4c3298824d.zip

Resource

win7-20240903-en

collection defense_evasion discovery evasion execution impact persistence ransomware trojan

windows7-x64

18 signatures

300 seconds

Behavioral task

behavioral27

Sample

d889734783273b7158deeae6cf804a6be99c3a5353d94225a4dbe92caf3a3d48.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral28

Sample

daaa72f48bea498c5ac7ce9bc315e585ff11dad04d1eeb0d1b0ce33a28bedf2d.exe

Resource

win7-20240729-en

collection defense_evasion discovery evasion execution impact persistence ransomware trojan

windows7-x64

15 signatures

300 seconds

Behavioral task

behavioral29

Sample

ddbf1840bf626da19d8f3467fe9e20e2.exe

Resource

win7-20241010-en

dharma credential_access defense_evasion discovery execution impact persistence ransomware spyware stealer

windows7-x64

20 signatures

300 seconds

Behavioral task

behavioral30

Sample

de882c049be133a950b6917562bb2313_583a76e23c1998307d702709dadbe103__3.dll

Resource

win7-20240708-en

discovery

windows7-x64

2 signatures

300 seconds

Behavioral task

behavioral31

Sample

decrypt.exe

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

300 seconds

Behavioral task

behavioral32

Sample

decrypted.ex_.exe

Resource

win7-20240903-en

discovery persistence

windows7-x64

4 signatures

300 seconds

Errors

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\ci05l2a.exe command="C:\Users\Admin\AppData\Local\Temp\ci05l2a.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: This version of %1 is not compatible with the version of Windows you're running. Check your computer's system information to see whether you need a x86 (32-bit) or x64 (64-bit) version of the program, and then contact the software publisher.

Report Analysis Logs

General

Target

ci05l2a.exe
Size

179KB
MD5

27b4d4c481f97f0a90c420fb106be2a1
SHA1

35c8fd7176b2f50caf6af597b07d18074a6c8619
SHA256

94bf77695e893c6c9cd0b69e1081eb00a617ec384c980c127681d010f8aceb71
SHA512

8e6d23ec233308c32dfe4373900132b021856082584c94ddc01c31b74c859cdf73cb3b2816fd51a693848b35d248bcdc76212a3b323ccc045dcfc8df59bb31c5
SSDEEP

3072:Kz23EV9nbulU4sYjoEgwNLu4T4gG1ZJC8VMKsMJ9Bi1YrJ+YPkiKL/vZ6d:o3aJoEgiLuEEJjMaNI1iI6d

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads