b7dd3bce3ebfbc2d5e3a9f00d47f27cb6a5895c4618c878e314e573a7c216df1

Submit
Reports

Overview

overview

Static

static

The-MALWAR...ug.exe

windows7-x64

The-MALWAR...le.exe

windows7-x64

The-MALWAR...an.bat

windows7-x64

The-MALWAR...Lz.bat

windows7-x64

The-MALWAR...ou.exe

windows7-x64

The-MALWAR...MZ.exe

windows7-x64

The-MALWAR...st.exe

windows7-x64

The-MALWAR...er.exe

windows7-x64

The-MALWAR...RC.exe

windows7-x64

The-MALWAR...er.exe

windows7-x64

The-MALWAR....a.exe

windows7-x64

The-MALWAR...rk.exe

windows7-x64

The-MALWAR...an.exe

windows7-x64

The-MALWAR...98.exe

windows7-x64

The-MALWAR...aj.exe

windows7-x64

The-MALWAR...jB.exe

windows7-x64

The-MALWAR...om.exe

windows7-x64

The-MALWAR...1C.exe

windows7-x64

The-MALWAR...90.exe

windows7-x64

The-MALWAR...6a.exe

windows7-x64

The-MALWAR...it.exe

windows7-x64

The-MALWAR...m_.eml

windows7-x64

The-MALWAR...ng.exe

windows7-x64

The-MALWAR....a.exe

windows7-x64

The-MALWAR...1A.exe

windows7-x64

The-MALWAR...as.exe

windows7-x64

The-MALWAR...te.exe

windows7-x64

The-MALWAR....a.exe

windows7-x64

The-MALWAR...le.exe

windows7-x64

The-MALWAR...us.exe

windows7-x64

The-MALWAR...er.exe

windows7-x64

The-MALWAR...ff.exe

windows7-x64

Analysis

max time kernel
1558s
max time network
1566s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
13-12-2024 22:18

Sharing

Copy URL

Twitter E-mail

Static task

static1

19 signatures

Behavioral task

behavioral1

Sample

The-MALWARE-Repo-master/Trojan/ColorBug.exe

Resource

win7-20240903-en

persistence

windows7-x64

3 signatures

1800 seconds

Behavioral task

behavioral2

Sample

The-MALWARE-Repo-master/Trojan/DesktopPuzzle.exe

Resource

win7-20240903-en

discovery

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral3

Sample

The-MALWARE-Repo-master/Trojan/DudleyTrojan.bat

Resource

win7-20240903-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral4

Sample

The-MALWARE-Repo-master/Trojan/L0Lz.bat

Resource

win7-20240903-en

discovery evasion persistence privilege_escalation

windows7-x64

8 signatures

1800 seconds

Behavioral task

behavioral5

Sample

The-MALWARE-Repo-master/Trojan/LoveYou.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral6

Sample

The-MALWARE-Repo-master/Trojan/MEMZ.exe

Resource

win7-20240903-en

bootkit discovery persistence phishing

windows7-x64

16 signatures

1800 seconds

Behavioral task

behavioral7

Sample

The-MALWARE-Repo-master/Trojan/Mist/MistInfected_newest.exe

Resource

win7-20240903-en

discovery

windows7-x64

13 signatures

1800 seconds

Behavioral task

behavioral8

Sample

The-MALWARE-Repo-master/Trojan/Mist/MistInstaller.exe

Resource

win7-20241010-en

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral9

Sample

The-MALWARE-Repo-master/Trojan/Mist/MistInstallerRC.exe

Resource

win7-20240903-en

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral10

Sample

The-MALWARE-Repo-master/Trojan/PCToaster.exe

Resource

win7-20240903-en

discovery

windows7-x64

2 signatures

1800 seconds

Behavioral task

behavioral11

Sample

The-MALWARE-Repo-master/Trojan/Sevgi.a.exe

Resource

win7-20240708-en

discovery persistence

windows7-x64

4 signatures

1800 seconds

Behavioral task

behavioral12

Sample

The-MALWARE-Repo-master/Trojan/Spark/Spark.exe

Resource

win7-20240903-en

defense_evasion discovery evasion ransomware

windows7-x64

8 signatures

1800 seconds

Behavioral task

behavioral13

Sample

The-MALWARE-Repo-master/Virus/MadMan.exe

Resource

win7-20241010-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral14

Sample

The-MALWARE-Repo-master/Virus/WinNuke.98.exe

Resource

win7-20241010-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral15

Sample

The-MALWARE-Repo-master/Virus/Xpaj/xpaj.exe

Resource

win7-20240903-en

bootkit discovery persistence spyware stealer

windows7-x64

6 signatures

1800 seconds

Behavioral task

behavioral16

Sample

The-MALWARE-Repo-master/Virus/Xpaj/xpajB.exe

Resource

win7-20241023-en

discovery spyware stealer

windows7-x64

6 signatures

1800 seconds

Behavioral task

behavioral17

Sample

The-MALWARE-Repo-master/Worm/Bezilom.exe

Resource

win7-20240903-en

discovery persistence

windows7-x64

4 signatures

1800 seconds

Behavioral task

behavioral18

Sample

The-MALWARE-Repo-master/Worm/Blaster/607B60AD512C50B7D71DCCC057E85F1C.exe

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

1800 seconds

Behavioral task

behavioral19

Sample

The-MALWARE-Repo-master/Worm/Blaster/8676210e6246948201aa014db471de90.exe

Resource

win7-20240903-en

discovery persistence

windows7-x64

3 signatures

1800 seconds

Behavioral task

behavioral20

Sample

The-MALWARE-Repo-master/Worm/Blaster/8a17f336f86e81f04d8e66fa23f9b36a.exe

Resource

win7-20240903-en

discovery persistence upx

windows7-x64

10 signatures

1800 seconds

Behavioral task

behavioral21

Sample

The-MALWARE-Repo-master/Worm/Blaster/DComExploit.exe

Resource

win7-20240708-en

windows7-x64

0 signatures

1800 seconds

Behavioral task

behavioral22

Sample

The-MALWARE-Repo-master/Worm/Blaster/SANS_ Malware FAQ_ What is W32_Blaster worm_.eml

Resource

win7-20240708-en

discovery

windows7-x64

5 signatures

1800 seconds

Behavioral task

behavioral23

Sample

The-MALWARE-Repo-master/Worm/Bumerang.exe

Resource

win7-20240903-en

discovery upx

windows7-x64

7 signatures

1800 seconds

Behavioral task

behavioral24

Sample

The-MALWARE-Repo-master/Worm/Fagot.a.exe

Resource

win7-20240729-en

adware defense_evasion discovery evasion persistence privilege_escalation stealer trojan

windows7-x64

30 signatures

1800 seconds

Behavioral task

behavioral25

Sample

The-MALWARE-Repo-master/Worm/Heap41A.exe

Resource

win7-20240729-en

discovery persistence upx

windows7-x64

10 signatures

1800 seconds

Behavioral task

behavioral26

Sample

The-MALWARE-Repo-master/Worm/Mantas.exe

Resource

win7-20241010-en

discovery persistence upx

windows7-x64

5 signatures

1800 seconds

Behavioral task

behavioral27

Sample

The-MALWARE-Repo-master/Worm/NadIote/Nadlote.exe

Resource

win7-20240903-en

discovery persistence

windows7-x64

16 signatures

1800 seconds

Behavioral task

behavioral28

Sample

The-MALWARE-Repo-master/Worm/Netres.a.exe

Resource

win7-20240903-en

discovery

windows7-x64

1 signatures

1800 seconds

Behavioral task

behavioral29

Sample

The-MALWARE-Repo-master/Worm/Nople.exe

Resource

win7-20241023-en

discovery

windows7-x64

1 signatures

1800 seconds

Behavioral task

behavioral30

Sample

The-MALWARE-Repo-master/Worm/Vobfus/Vobus.exe

Resource

win7-20241010-en

discovery evasion persistence

windows7-x64

9 signatures

1800 seconds

Behavioral task

behavioral31

Sample

The-MALWARE-Repo-master/rogues/AdwereCleaner.exe

Resource

win7-20240903-en

discovery persistence

windows7-x64

8 signatures

1800 seconds

Behavioral task

behavioral32

Sample

The-MALWARE-Repo-master/rogues/SpySheriff.exe

Resource

win7-20240903-en

discovery

windows7-x64

1 signatures

1800 seconds

Report Analysis Logs

General

Target

The-MALWARE-Repo-master/Trojan/Mist/MistInstallerRC.exe
Size

83KB
MD5

d81acaef0db08aac297d4bd3c58ddf50
SHA1

02e6ac2c001c639078c3e842132f91509a6f7466
SHA256

95d5594cac9cfa5826e1c0b12fec980ff8a01136364aed2831164b46cbb13ca1
SHA512

45b1f047816f4ba8e730cf6914331f9ced81c1e6614f594a748eb6469efb2f311f0ef86e3241cafb2794b580df14302f9cb279175bc1064e79c6c501fa2dc738
SSDEEP

1536:ryD2eyujEyC5YYafh1Mc8/gsWjcdjl9btC:r+2eytf3B9bQ

Score

8^/10

Malware Config

Signatures

Drops file in Drivers directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\drivers\mistdrv.sys	MistInstallerRC.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
472	Process not Found

Processes

C:\Users\Admin\AppData\Local\Temp\The-MALWARE-Repo-master\Trojan\Mist\MistInstallerRC.exe
"C:\Users\Admin\AppData\Local\Temp\The-MALWARE-Repo-master\Trojan\Mist\MistInstallerRC.exe"
1⤵
- Drops file in Drivers directory
PID:2872

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads