3a2e31f2844df5cb91eedbf24c0b93de4b0aa08525f733132c2bce0d7ab81acc

Submit
Reports

Overview

overview

Static

static

09fe7735f7...8a.exe

windows11-21h2-x64

0a08857b3b...19.vbs

windows11-21h2-x64

0a92b6b6c9...d0.exe

windows11-21h2-x64

0b1f6297e8...e6.exe

windows11-21h2-x64

0b4ffb13a4...aa.exe

windows11-21h2-x64

0b9a6ed57e...55.exe

windows11-21h2-x64

0be395d43c...ca.exe

windows11-21h2-x64

0c046f07cd...89.exe

windows11-21h2-x64

0c1e5acd77...53.exe

windows11-21h2-x64

0d825ad1df...37.exe

windows11-21h2-x64

0db3c21dec...f9.exe

windows11-21h2-x64

0de875f11e...e9.exe

windows11-21h2-x64

0e3bb95b7b...77.exe

windows11-21h2-x64

0edd5342b1...6d.exe

windows11-21h2-x64

0f4450a6b2...b6.exe

windows11-21h2-x64

10758789ca...d1.exe

windows11-21h2-x64

11a3fde6fb...96.exe

windows11-21h2-x64

11bb525d06...1c.exe

windows11-21h2-x64

124dcea053...69.exe

windows11-21h2-x64

13431e2ee5...1c.elf

windows11-21h2-x64

15387da23f...315.js

windows11-21h2-x64

15938b5637...72.exe

windows11-21h2-x64

170dc238d7...a4.exe

windows11-21h2-x64

1728680969...4d.xll

windows11-21h2-x64

17dadc2b10...b1.elf

windows11-21h2-x64

190ffc93d1...d7.apk

windows11-21h2-x64

1a4383821d...e1.vbs

windows11-21h2-x64

1aa85c5026...8d.exe

windows11-21h2-x64

1b13d05cae...26.exe

windows11-21h2-x64

1b9334e09c...52.exe

windows11-21h2-x64

1bcbf1dce6...0c.exe

windows11-21h2-x64

1bd3fa491c...5b.exe

windows11-21h2-x64

Resubmissions

21-12-2024 22:57

241221-2xpr2atjar 10

21-12-2024 20:29

241221-y9xfvsyngy 10

Analysis

max time kernel
7s
max time network
31s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
21-12-2024 22:57

Sharing

Copy URL

Twitter E-mail

Static task

static1

37 signatures

Behavioral task

behavioral1

Sample

09fe7735f742e003ace00c9884b1eb6d55c719735a1fcd207ac985ce746b008a.exe

Resource

win11-20241007-en

netwire botnet discovery execution rat stealer

windows11-21h2-x64

11 signatures

60 seconds

Behavioral task

behavioral2

Sample

0a08857b3b6b52510c544f54f8b7489038e371a85db858ad3c34c4f7198da819.vbs

Resource

win11-20241023-en

execution

windows11-21h2-x64

6 signatures

60 seconds

Behavioral task

behavioral3

Sample

0a92b6b6c9ccba573ca47718bf608715dbc87ad48afc19bf7004d8eb9bf598d0.exe

Resource

win11-20241007-en

formbook xloader fofg discovery loader rat spyware stealer trojan

windows11-21h2-x64

10 signatures

60 seconds

Behavioral task

behavioral4

Sample

0b1f6297e8bfa8fc9ff8a7ad85487ff456c0d66ef2d908588cd27345fba5f4e6.exe

Resource

win11-20241007-en

redline discovery infostealer

windows11-21h2-x64

6 signatures

60 seconds

Behavioral task

behavioral5

Sample

0b4ffb13a42cb2432b4e021c18f4b4dd51b669ba0356804ca32dac2de7741caa.exe

Resource

win11-20241007-en

gcleaner discovery loader

windows11-21h2-x64

9 signatures

60 seconds

Behavioral task

behavioral6

Sample

0b9a6ed57e23d874bde98d89d3c50a44b3982570cb8bbf41660fad19d3fbe855.exe

Resource

win11-20241007-en

discovery persistence vmprotect

windows11-21h2-x64

7 signatures

60 seconds

Behavioral task

behavioral7

Sample

0be395d43c98fe7b2d0fff10863410665ee11ce31a10277dc03049e77661b1ca.exe

Resource

win11-20241007-en

discovery

windows11-21h2-x64

5 signatures

60 seconds

Behavioral task

behavioral8

Sample

0c046f07cd96f008a224dc272c32b52af4611cd1852d38db9737abbe3fcf9e89.exe

Resource

win11-20241007-en

tofsee discovery evasion execution persistence privilege_escalation trojan

windows11-21h2-x64

16 signatures

60 seconds

Behavioral task

behavioral9

Sample

0c1e5acd77d667335c59b10f7bd08997ff5bac4aeb52722fffe17c60d1779553.exe

Resource

win11-20241007-en

redline dozkey discovery infostealer

windows11-21h2-x64

5 signatures

60 seconds

Behavioral task

behavioral10

Sample

0d825ad1df7c2ac718991f061800e31c6ae4ac7a35516676ac0dad40b84b6037.exe

Resource

win11-20241007-en

smokeloader pub4 backdoor discovery trojan

windows11-21h2-x64

5 signatures

60 seconds

Behavioral task

behavioral11

Sample

0db3c21dec09a297e99a07ec1ebd007146adfbcb3c8f0d4a3f88868778c6aef9.exe

Resource

win11-20241007-en

gcleaner discovery loader

windows11-21h2-x64

4 signatures

60 seconds

Behavioral task

behavioral12

Sample

0de875f11ee5d69c5b4633e3b878529f08788440f87fb3ab0cde77e698b200e9.exe

Resource

win11-20241007-en

redline dozkey discovery infostealer

windows11-21h2-x64

5 signatures

60 seconds

Behavioral task

behavioral13

Sample

0e3bb95b7ba92dadc59985e6b0d1a75db091d6ca03f755fca34437398217f877.exe

Resource

win11-20241007-en

gcleaner discovery loader

windows11-21h2-x64

9 signatures

60 seconds

Behavioral task

behavioral14

Sample

0edd5342b1fc252b5164f41118b0b0e69d954772a4ec6ee14f49d15fa4ddf66d.exe

Resource

win11-20241023-en

discovery

windows11-21h2-x64

3 signatures

60 seconds

Behavioral task

behavioral15

Sample

0f4450a6b298d95d7fdd6ac63a917b1975221fe90e520ff30e9c6b0d8a4955b6.exe

Resource

win11-20241007-en

tofsee discovery evasion execution persistence privilege_escalation trojan

windows11-21h2-x64

16 signatures

60 seconds

Behavioral task

behavioral16

Sample

10758789ca875d9783a8988e0b0dbfd88f75a6ac0eb544b5b37241492223fdd1.exe

Resource

win11-20241007-en

formbook a20e discovery execution rat spyware stealer trojan

windows11-21h2-x64

11 signatures

60 seconds

Behavioral task

behavioral17

Sample

11a3fde6fbce94c261cc8785856d132eccd5239e95a9129c2ba404cad58bbd96.exe

Resource

win11-20241007-en

vidar 1636 discovery stealer

windows11-21h2-x64

3 signatures

60 seconds

Behavioral task

behavioral18

Sample

11bb525d06957723f55934f7697eaf4c6e0437e435d3fea9f1f4a16d71cd041c.exe

Resource

win11-20241007-en

smokeloader pub4 backdoor discovery trojan

windows11-21h2-x64

5 signatures

60 seconds

Behavioral task

behavioral19

Sample

124dcea053b32060dc96c5b2901df4264837a87ea25e635e0ac76145450d9a69.exe

Resource

win11-20241007-en

snakekeylogger collection credential_access discovery execution keylogger spyware stealer

windows11-21h2-x64

19 signatures

60 seconds

Behavioral task

behavioral20

Sample

13431e2ee5bc86bdc9b53f47dd2ea61912a00952a3ea8f97ea3842ad7053551c.elf

Resource

win11-20241007-en

windows11-21h2-x64

3 signatures

60 seconds

Behavioral task

behavioral21

Sample

15387da23f7465d5c4ccd137bc21d15d74c0006c7536b92afed5337cdb3e0315.js

Resource

win11-20241007-en

execution

windows11-21h2-x64

2 signatures

60 seconds

Behavioral task

behavioral22

Sample

15938b5637e639c182992c8fdf65b8db3d461c85f6eac57044f40d2a68955372.exe

Resource

win11-20241007-en

tofsee discovery evasion execution persistence privilege_escalation trojan

windows11-21h2-x64

16 signatures

60 seconds

Behavioral task

behavioral23

Sample

170dc238d7e8c6f55a0aedddd2d01deb03d62e71d7da5c51f67632d2de3f93a4.exe

Resource

win11-20241007-en

agenttesla collection credential_access discovery keylogger persistence spyware stealer trojan

windows11-21h2-x64

16 signatures

60 seconds

Behavioral task

behavioral24

Sample

17286809694b9d22325e29af4e74b2083398de0488d9a96644566c468628554d.xll

Resource

win11-20241007-en

windows11-21h2-x64

7 signatures

60 seconds

Behavioral task

behavioral25

Sample

17dadc2b105c925bb5d598789e418a9fdedac3a5a26a05fa4b77c8d82f685bb1.elf

Resource

win11-20241023-en

windows11-21h2-x64

3 signatures

60 seconds

Behavioral task

behavioral26

Sample

190ffc93d1cf8112811d0568736905e6a943cc4787fb569754ed7e15ecd2efd7.apk

Resource

win11-20241007-en

windows11-21h2-x64

3 signatures

60 seconds

Behavioral task

behavioral27

Sample

1a4383821db896055970d1358d5f3591a7b5963f93ffcca737ac94bf6972cce1.vbs

Resource

win11-20241007-en

discovery

windows11-21h2-x64

6 signatures

60 seconds

Behavioral task

behavioral28

Sample

1aa85c5026608d04abec7b7af789f3b5e28c59064733c0efdb942a543926558d.exe

Resource

win11-20241007-en

lokibot collection discovery spyware stealer trojan

windows11-21h2-x64

12 signatures

60 seconds

Behavioral task

behavioral29

Sample

1b13d05cae0e4eac18dbaffe04a238238d6c2c2be285d825712cfbef91341326.exe

Resource

win11-20241007-en

discovery

windows11-21h2-x64

5 signatures

60 seconds

Behavioral task

behavioral30

Sample

1b9334e09c3df74ba3135169e49533c7a4d5a6c7ce090e31188e6f6a33403b52.exe

Resource

win11-20241007-en

tofsee discovery evasion execution persistence privilege_escalation trojan

windows11-21h2-x64

16 signatures

60 seconds

Behavioral task

behavioral31

Sample

1bcbf1dce6780dbfb1b1ad1d86f25d4b7a50063be5b4640f8939085980c4e00c.exe

Resource

win11-20241007-en

discovery

windows11-21h2-x64

5 signatures

60 seconds

Behavioral task

behavioral32

Sample

1bd3fa491c5de8cb9189ff8f86fd1a7e27a8140e3578f8fa9ebb23931550cc5b.exe

Resource

win11-20241007-en

agenttesla collection credential_access discovery keylogger spyware stealer trojan

windows11-21h2-x64

13 signatures

60 seconds

Report Analysis Logs

General

Target

15387da23f7465d5c4ccd137bc21d15d74c0006c7536b92afed5337cdb3e0315.js
Size

100KB
MD5

ed9d1e4c580a9f92815d0cbf00b47b20
SHA1

ccc8533cc8fd804988c75f9ff827192bb98dab3b
SHA256

15387da23f7465d5c4ccd137bc21d15d74c0006c7536b92afed5337cdb3e0315
SHA512

ae543bb540190d4e799cce94f943526ca60d1b8376413dc8fb66251f567087ffaa8ebaf4e67761c51b098c538e0da937e8b65859f968bc58908b9899fd0b24b4
SSDEEP

3072:9F7D4Y+Jk9olJaXvY96bal9BtNe66WWtUrcZtXGD23VMJFB:9FniHKYIOB

Score

8^/10

execution

Malware Config

Signatures

Blocklisted process makes network request 2 IoCs

flow	pid	Process
2	2844	wscript.exe
5	2844	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\15387da23f7465d5c4ccd137bc21d15d74c0006c7536b92afed5337cdb3e0315.js
1⤵
- Blocklisted process makes network request
PID:2844

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads