b7dd3bce3ebfbc2d5e3a9f00d47f27cb6a5895c4618c878e314e573a7c216df1

Submit
Reports

Overview

overview

Static

static

The-MALWAR...ug.exe

windows7-x64

The-MALWAR...le.exe

windows7-x64

The-MALWAR...an.bat

windows7-x64

The-MALWAR...Lz.bat

windows7-x64

The-MALWAR...ou.exe

windows7-x64

The-MALWAR...MZ.exe

windows7-x64

The-MALWAR...st.exe

windows7-x64

The-MALWAR...er.exe

windows7-x64

The-MALWAR...RC.exe

windows7-x64

The-MALWAR...er.exe

windows7-x64

The-MALWAR....a.exe

windows7-x64

The-MALWAR...rk.exe

windows7-x64

The-MALWAR...an.exe

windows7-x64

The-MALWAR...98.exe

windows7-x64

The-MALWAR...aj.exe

windows7-x64

The-MALWAR...jB.exe

windows7-x64

The-MALWAR...om.exe

windows7-x64

The-MALWAR...1C.exe

windows7-x64

The-MALWAR...90.exe

windows7-x64

The-MALWAR...6a.exe

windows7-x64

The-MALWAR...it.exe

windows7-x64

The-MALWAR...m_.eml

windows7-x64

The-MALWAR...ng.exe

windows7-x64

The-MALWAR....a.exe

windows7-x64

The-MALWAR...1A.exe

windows7-x64

The-MALWAR...as.exe

windows7-x64

The-MALWAR...te.exe

windows7-x64

The-MALWAR....a.exe

windows7-x64

The-MALWAR...le.exe

windows7-x64

The-MALWAR...us.exe

windows7-x64

The-MALWAR...er.exe

windows7-x64

The-MALWAR...ff.exe

windows7-x64

Analysis

max time kernel
1798s
max time network
1820s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
13-12-2024 22:18

Sharing

Copy URL

Twitter E-mail

Static task

static1

19 signatures

Behavioral task

behavioral1

Sample

The-MALWARE-Repo-master/Trojan/ColorBug.exe

Resource

win7-20240903-en

persistence

windows7-x64

3 signatures

1800 seconds

Behavioral task

behavioral2

Sample

The-MALWARE-Repo-master/Trojan/DesktopPuzzle.exe

Resource

win7-20240903-en

discovery

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral3

Sample

The-MALWARE-Repo-master/Trojan/DudleyTrojan.bat

Resource

win7-20240903-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral4

Sample

The-MALWARE-Repo-master/Trojan/L0Lz.bat

Resource

win7-20240903-en

discovery evasion persistence privilege_escalation

windows7-x64

8 signatures

1800 seconds

Behavioral task

behavioral5

Sample

The-MALWARE-Repo-master/Trojan/LoveYou.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral6

Sample

The-MALWARE-Repo-master/Trojan/MEMZ.exe

Resource

win7-20240903-en

bootkit discovery persistence phishing

windows7-x64

16 signatures

1800 seconds

Behavioral task

behavioral7

Sample

The-MALWARE-Repo-master/Trojan/Mist/MistInfected_newest.exe

Resource

win7-20240903-en

discovery

windows7-x64

13 signatures

1800 seconds

Behavioral task

behavioral8

Sample

The-MALWARE-Repo-master/Trojan/Mist/MistInstaller.exe

Resource

win7-20241010-en

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral9

Sample

The-MALWARE-Repo-master/Trojan/Mist/MistInstallerRC.exe

Resource

win7-20240903-en

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral10

Sample

The-MALWARE-Repo-master/Trojan/PCToaster.exe

Resource

win7-20240903-en

discovery

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral11

Sample

The-MALWARE-Repo-master/Trojan/Sevgi.a.exe

Resource

win7-20240708-en

discovery persistence

windows7-x64

4 signatures

1800 seconds

Behavioral task

behavioral12

Sample

The-MALWARE-Repo-master/Trojan/Spark/Spark.exe

Resource

win7-20240903-en

defense_evasion discovery evasion ransomware

windows7-x64

8 signatures

1800 seconds

Behavioral task

behavioral13

Sample

The-MALWARE-Repo-master/Virus/MadMan.exe

Resource

win7-20241010-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral14

Sample

The-MALWARE-Repo-master/Virus/WinNuke.98.exe

Resource

win7-20241010-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral15

Sample

The-MALWARE-Repo-master/Virus/Xpaj/xpaj.exe

Resource

win7-20240903-en

bootkit discovery persistence spyware stealer

windows7-x64

6 signatures

1800 seconds

Behavioral task

behavioral16

Sample

The-MALWARE-Repo-master/Virus/Xpaj/xpajB.exe

Resource

win7-20241023-en

discovery spyware stealer

windows7-x64

6 signatures

1800 seconds

Behavioral task

behavioral17

Sample

The-MALWARE-Repo-master/Worm/Bezilom.exe

Resource

win7-20240903-en

discovery persistence

windows7-x64

4 signatures

1800 seconds

Behavioral task

behavioral18

Sample

The-MALWARE-Repo-master/Worm/Blaster/607B60AD512C50B7D71DCCC057E85F1C.exe

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

1800 seconds

Behavioral task

behavioral19

Sample

The-MALWARE-Repo-master/Worm/Blaster/8676210e6246948201aa014db471de90.exe

Resource

win7-20240903-en

discovery persistence

windows7-x64

3 signatures

1800 seconds

Behavioral task

behavioral20

Sample

The-MALWARE-Repo-master/Worm/Blaster/8a17f336f86e81f04d8e66fa23f9b36a.exe

Resource

win7-20240903-en

discovery persistence upx

windows7-x64

10 signatures

1800 seconds

Behavioral task

behavioral21

Sample

The-MALWARE-Repo-master/Worm/Blaster/DComExploit.exe

Resource

win7-20240708-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral22

Sample

The-MALWARE-Repo-master/Worm/Blaster/SANS_ Malware FAQ_ What is W32_Blaster worm_.eml

Resource

win7-20240708-en

discovery

windows7-x64

5 signatures

1800 seconds

Behavioral task

behavioral23

Sample

The-MALWARE-Repo-master/Worm/Bumerang.exe

Resource

win7-20240903-en

discovery upx

windows7-x64

7 signatures

1800 seconds

Behavioral task

behavioral24

Sample

The-MALWARE-Repo-master/Worm/Fagot.a.exe

Resource

win7-20240729-en

adware defense_evasion discovery evasion persistence privilege_escalation stealer trojan

windows7-x64

30 signatures

1800 seconds

Behavioral task

behavioral25

Sample

The-MALWARE-Repo-master/Worm/Heap41A.exe

Resource

win7-20240729-en

discovery persistence upx

windows7-x64

10 signatures

1800 seconds

Behavioral task

behavioral26

Sample

The-MALWARE-Repo-master/Worm/Mantas.exe

Resource

win7-20241010-en

discovery persistence upx

windows7-x64

5 signatures

1800 seconds

Behavioral task

behavioral27

Sample

The-MALWARE-Repo-master/Worm/NadIote/Nadlote.exe

Resource

win7-20240903-en

discovery persistence

windows7-x64

16 signatures

1800 seconds

Behavioral task

behavioral28

Sample

The-MALWARE-Repo-master/Worm/Netres.a.exe

Resource

win7-20240903-en

discovery

windows7-x64

1 signatures

1800 seconds

Behavioral task

behavioral29

Sample

The-MALWARE-Repo-master/Worm/Nople.exe

Resource

win7-20241023-en

discovery

windows7-x64

1 signatures

1800 seconds

Behavioral task

behavioral30

Sample

The-MALWARE-Repo-master/Worm/Vobfus/Vobus.exe

Resource

win7-20241010-en

discovery evasion persistence

windows7-x64

9 signatures

1800 seconds

Behavioral task

behavioral31

Sample

The-MALWARE-Repo-master/rogues/AdwereCleaner.exe

Resource

win7-20240903-en

discovery persistence

windows7-x64

8 signatures

1800 seconds

Behavioral task

behavioral32

Sample

The-MALWARE-Repo-master/rogues/SpySheriff.exe

Resource

win7-20240903-en

discovery

windows7-x64

1 signatures

1800 seconds

Report Analysis Logs

General

Target

The-MALWARE-Repo-master/Trojan/Mist/MistInstaller.exe
Size

83KB
MD5

8813125a606768fdf8df506029daa16f
SHA1

48e825f14522bd4d149ef8b426af81eec0287947
SHA256

323060680fed9a3205e3e36d2b62b7b5b6c6e6245e4555dcc733cf6ef390f41c
SHA512

9486a027029a27cbf0424760625c08d73aa62e28e45081751c5bada7c07ca05b4e44239da7774cf4f76298fb6b71769ae62595ae439b470c8308d39e1b2289d8
SSDEEP

1536:IyD2eyujEyC5YYafh1Mc8/gsWjcdjl9btC:I+2eytf3B9bQ

Score

8^/10

Malware Config

Signatures

Drops file in Drivers directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\drivers\mistdrv.sys	MistInstaller.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
464	Process not Found

Processes

C:\Users\Admin\AppData\Local\Temp\The-MALWARE-Repo-master\Trojan\Mist\MistInstaller.exe
"C:\Users\Admin\AppData\Local\Temp\The-MALWARE-Repo-master\Trojan\Mist\MistInstaller.exe"
1⤵
- Drops file in Drivers directory
PID:2596

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads