3a2e31f2844df5cb91eedbf24c0b93de4b0aa08525f733132c2bce0d7ab81acc

Submit
Reports

Overview

overview

Static

static

002d23802f...a9.elf

ubuntu-24.04-amd64

006e75ccf3...e6.exe

windows7-x64

006e75ccf3...e6.exe

windows10-2004-x64

010b63314e...17.exe

windows7-x64

010b63314e...17.exe

windows10-2004-x64

017f252187...45.exe

windows7-x64

017f252187...45.exe

windows10-2004-x64

$PLUGINSDI...em.dll

windows7-x64

$PLUGINSDI...em.dll

windows10-2004-x64

Unmonument...GL.dll

windows7-x64

Unmonument...GL.dll

windows10-2004-x64

025a7cc996...12.exe

windows7-x64

025a7cc996...12.exe

windows10-2004-x64

026a0d5ada...ed.exe

windows7-x64

026a0d5ada...ed.exe

windows10-2004-x64

0296e49137...b6.exe

windows7-x64

0296e49137...b6.exe

windows10-2004-x64

0382436149...62.exe

windows7-x64

0382436149...62.exe

windows10-2004-x64

039b7cbbe0...f4.exe

windows7-x64

039b7cbbe0...f4.exe

windows10-2004-x64

03a0e7298d...43.exe

windows7-x64

03a0e7298d...43.exe

windows10-2004-x64

044d4141fa...83.apk

android-9-x86

044d4141fa...83.apk

android-10-x64

044d4141fa...83.apk

android-11-x64

0488488429...83.exe

windows7-x64

0488488429...83.exe

windows10-2004-x64

04ba453903...df.elf

ubuntu-22.04-amd64

054c0c0eb0...5c.exe

windows7-x64

054c0c0eb0...5c.exe

windows10-2004-x64

058c3a111c...0bc.js

windows7-x64

Resubmissions

21-12-2024 22:57

241221-2xpr2atjar 10

21-12-2024 20:29

241221-y9xfvsyngy 10

Analysis

max time kernel
0s
max time network
21s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
21-12-2024 20:29

Sharing

Copy URL

Twitter E-mail

Static task

static1

37 signatures

Behavioral task

behavioral1

Sample

002d23802f5e90492a340a0202f8082ddf84d3abdb7834bf7cb771c81161e0a9.elf

Resource

ubuntu2404-amd64-20240523-en

ubuntu-24.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

006e75ccf30448182c69a7f7bc7a4308caa78a87e6d834926599ce6b11e222e6.exe

Resource

win7-20240903-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

006e75ccf30448182c69a7f7bc7a4308caa78a87e6d834926599ce6b11e222e6.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

010b63314edf0d096b2c259cfc5b95fe28cae4d983e0ea547e13f8b16ff42c17.exe

Resource

win7-20241010-en

agenttesla collection credential_access discovery keylogger spyware stealer trojan

windows7-x64

17 signatures

150 seconds

Behavioral task

behavioral5

Sample

010b63314edf0d096b2c259cfc5b95fe28cae4d983e0ea547e13f8b16ff42c17.exe

Resource

win10v2004-20241007-en

agenttesla collection credential_access discovery keylogger spyware stealer trojan

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral6

Sample

017f252187d69448ce91bef978fabdd931c56a7f57d43ba3557da5c49b133e45.exe

Resource

win7-20241023-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral7

Sample

017f252187d69448ce91bef978fabdd931c56a7f57d43ba3557da5c49b133e45.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/System.dll

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

Unmonumented/libEGL.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Unmonumented/libEGL.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

025a7cc996fdece05721b7ac336a6e2e614f7a76b59f0a3aff2278e374ac7b12.exe

Resource

win7-20240903-en

agenttesla collection credential_access discovery keylogger spyware stealer trojan

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral13

Sample

025a7cc996fdece05721b7ac336a6e2e614f7a76b59f0a3aff2278e374ac7b12.exe

Resource

win10v2004-20241007-en

agenttesla collection credential_access discovery keylogger spyware stealer trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral14

Sample

026a0d5ada04432b47b8f00e05304f11c2f72374b522d0c906f919d115c4b0ed.exe

Resource

win7-20240903-en

agenttesla collection discovery keylogger persistence spyware stealer trojan

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral15

Sample

026a0d5ada04432b47b8f00e05304f11c2f72374b522d0c906f919d115c4b0ed.exe

Resource

win10v2004-20241007-en

agenttesla collection discovery keylogger persistence spyware stealer trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral16

Sample

0296e49137a482b7db3bed7fe16c5ad20b083b20a8ce56b6c42309fff94d50b6.exe

Resource

win7-20241010-en

snakekeylogger collection credential_access discovery execution keylogger stealer

windows7-x64

16 signatures

150 seconds

Behavioral task

behavioral17

Sample

0296e49137a482b7db3bed7fe16c5ad20b083b20a8ce56b6c42309fff94d50b6.exe

Resource

win10v2004-20241007-en

snakekeylogger collection credential_access discovery execution keylogger stealer

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral18

Sample

038243614941cbef3abaa0524ae4c26cef4b8c902b0f674ebc77b04b1e035662.exe

Resource

win7-20240903-en

tofsee discovery evasion execution persistence privilege_escalation trojan

windows7-x64

16 signatures

150 seconds

Behavioral task

behavioral19

Sample

038243614941cbef3abaa0524ae4c26cef4b8c902b0f674ebc77b04b1e035662.exe

Resource

win10v2004-20241007-en

tofsee discovery evasion execution persistence privilege_escalation trojan

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral20

Sample

039b7cbbe00107f02b5004f4e2560b6d3f8c9e7c81a01ddd3c85a3c94b311bf4.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

039b7cbbe00107f02b5004f4e2560b6d3f8c9e7c81a01ddd3c85a3c94b311bf4.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

03a0e7298d12838300b55acae66e5c132a980bd33ff63703d1657632326db543.exe

Resource

win7-20240903-en

smokeloader pub2 backdoor discovery trojan

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral23

Sample

03a0e7298d12838300b55acae66e5c132a980bd33ff63703d1657632326db543.exe

Resource

win10v2004-20241007-en

smokeloader pub2 backdoor discovery trojan

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral24

Sample

044d4141fa14d7abac6f282b72e4d4a6f0fec56df3d0d1650e2db3a1a5c80783.apk

Resource

android-x86-arm-20240624-en

discovery

android-9-x86

2 signatures

150 seconds

Behavioral task

behavioral25

Sample

044d4141fa14d7abac6f282b72e4d4a6f0fec56df3d0d1650e2db3a1a5c80783.apk

Resource

android-x64-20240624-en

discovery evasion persistence

android-10-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

044d4141fa14d7abac6f282b72e4d4a6f0fec56df3d0d1650e2db3a1a5c80783.apk

Resource

android-x64-arm64-20240624-en

discovery evasion persistence

android-11-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

0488488429b7776b837be76cef378782ec22ebbd71fe37ae16b3f325e0742283.exe

Resource

win7-20240729-en

tofsee discovery evasion execution persistence privilege_escalation trojan

windows7-x64

16 signatures

150 seconds

Behavioral task

behavioral28

Sample

0488488429b7776b837be76cef378782ec22ebbd71fe37ae16b3f325e0742283.exe

Resource

win10v2004-20241007-en

tofsee discovery evasion execution persistence privilege_escalation trojan

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral29

Sample

04ba4539039a535365ac32abf01cb409f0efbc33545a864865a073e09d7500df.elf

Resource

ubuntu2204-amd64-20240522.1-en

defense_evasion discovery

ubuntu-22.04-amd64

6 signatures

150 seconds

Behavioral task

behavioral30

Sample

054c0c0eb0f5db96a0f5c39dfc6c822377462a12aff74bc86150d450aa880e5c.exe

Resource

win7-20240903-en

gcleaner mirai botnet discovery loader

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral31

Sample

054c0c0eb0f5db96a0f5c39dfc6c822377462a12aff74bc86150d450aa880e5c.exe

Resource

win10v2004-20241007-en

gcleaner discovery loader

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral32

Sample

058c3a111cb50601c15b4410b3770720b948702207b5ad6492b82e1c4fd310bc.js

Resource

win7-20241010-en

vjw0rm execution persistence trojan worm

windows7-x64

8 signatures

150 seconds

Errors

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\039b7cbbe00107f02b5004f4e2560b6d3f8c9e7c81a01ddd3c85a3c94b311bf4.exe command="C:\Users\Admin\AppData\Local\Temp\039b7cbbe00107f02b5004f4e2560b6d3f8c9e7c81a01ddd3c85a3c94b311bf4.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: %1 is not a valid Win32 application.

Report Analysis Logs

General

Target

039b7cbbe00107f02b5004f4e2560b6d3f8c9e7c81a01ddd3c85a3c94b311bf4.exe
Size

87KB
MD5

d86f012be2a0bf6656356775f2b847a4
SHA1

18f30e1b369c0464fd77941e39aa8b90242cbe40
SHA256

039b7cbbe00107f02b5004f4e2560b6d3f8c9e7c81a01ddd3c85a3c94b311bf4
SHA512

d02d55484f19bed8ddcd643149aa240798a7af1f754279319a634bb9564d5a05e1913e1f2ef123b5125b3250612b5d13ac682d18b564e8df83e11a0fd44ebd27
SSDEEP

1536:vonBB23/71LL4rNpOWPpc1HQN3G+hLrQggXc:vonS9L4rNMw5G8LUw

Resubmissions

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads