031527224e74b82bf16e639c666134674ecc8a6e648fed2f68255617bd6a3b18

Submit
Reports

Overview

overview

Static

static

Order.exe

windows7-x64

Order.exe

windows10-2004-x64

төлем...DF.exe

windows7-x64

төлем...DF.exe

windows10-2004-x64

87597.exe

windows7-x64

87597.exe

windows10-2004-x64

29146c1ccd...70.exe

windows7-x64

29146c1ccd...70.exe

windows10-2004-x64

2cc3b42957...8e.exe

windows7-x64

2cc3b42957...8e.exe

windows10-2004-x64

RICHIESTA ...TA.exe

windows7-x64

RICHIESTA ...TA.exe

windows10-2004-x64

39c1e12e0a...25c.js

windows7-x64

39c1e12e0a...25c.js

windows10-2004-x64

3f46e10e5f...3b.exe

windows7-x64

3f46e10e5f...3b.exe

windows10-2004-x64

53074094ad...95dbec

debian-12-mipsel

632cfc71bd...b1.doc

windows7-x64

632cfc71bd...b1.doc

windows10-2004-x64

685dce7a17...03.exe

windows7-x64

685dce7a17...03.exe

windows10-2004-x64

6c4aab4c3b...e2.exe

windows7-x64

6c4aab4c3b...e2.exe

windows10-2004-x64

73a52a4c60...c0.exe

windows7-x64

73a52a4c60...c0.exe

windows10-2004-x64

Inv_7623980.exe

windows7-x64

Inv_7623980.exe

windows10-2004-x64

8954739d96...a8.ps1

windows7-x64

8954739d96...a8.ps1

windows10-2004-x64

USD $.exe

windows7-x64

USD $.exe

windows10-2004-x64

91d079d937...b9.exe

windows7-x64

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
23-12-2024 12:40

Sharing

Copy URL

Twitter E-mail

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

Order.exe

Resource

win7-20240729-en

discovery

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

Order.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

төлем туралы есеп#454326_PDF.exe

Resource

win7-20240903-en

formbook vd9n discovery rat spyware stealer trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral4

Sample

төлем туралы есеп#454326_PDF.exe

Resource

win10v2004-20241007-en

formbook vd9n discovery rat spyware stealer trojan

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral5

Sample

87597.exe

Resource

win7-20241010-en

agenttesla discovery keylogger persistence spyware stealer trojan

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral6

Sample

87597.exe

Resource

win10v2004-20241007-en

agenttesla collection credential_access discovery keylogger persistence spyware stealer trojan

windows10-2004-x64

21 signatures

150 seconds

Behavioral task

behavioral7

Sample

29146c1ccdf280c8ac9d0c861f8bd222d2d93777c8a822da4d72c64fc3f78670.exe

Resource

win7-20240903-en

credential_access discovery spyware stealer

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

29146c1ccdf280c8ac9d0c861f8bd222d2d93777c8a822da4d72c64fc3f78670.exe

Resource

win10v2004-20241007-en

credential_access discovery spyware stealer

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

2cc3b4295747aeeb5a54b923fdbc9be766ee156c8914f5c07663f7cb1055068e.exe

Resource

win7-20240903-en

xloader synv discovery loader rat

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral10

Sample

2cc3b4295747aeeb5a54b923fdbc9be766ee156c8914f5c07663f7cb1055068e.exe

Resource

win10v2004-20241007-en

xloader synv discovery loader rat

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral11

Sample

RICHIESTA DI OFFERTA.exe

Resource

win7-20240903-en

guloader discovery downloader

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

RICHIESTA DI OFFERTA.exe

Resource

win10v2004-20241007-en

guloader discovery downloader

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

39c1e12e0ada85fa835b623a4698345bf95372bea57a7d3a5070ea1d5d5d825c.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

39c1e12e0ada85fa835b623a4698345bf95372bea57a7d3a5070ea1d5d5d825c.js

Resource

win10v2004-20241007-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

3f46e10e5fe376b995e2947d1be21955aa8341f39d80cca737109fcf2cf2bf3b.exe

Resource

win7-20240903-en

blustealer discovery stealer

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral16

Sample

3f46e10e5fe376b995e2947d1be21955aa8341f39d80cca737109fcf2cf2bf3b.exe

Resource

win10v2004-20241007-en

blustealer discovery stealer

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral17

Sample

53074094addc55786936f3d67d7fe36554a7c4f4f96c06252ae768707295dbec

Resource

debian12-mipsel-20240221-en

mirai botnet

debian-12-mipsel

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

632cfc71bd4734fdd98e48166a52fbc4a48d43640f3375fd882dd374479bffb1.doc

Resource

win7-20240903-en

discovery

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral19

Sample

632cfc71bd4734fdd98e48166a52fbc4a48d43640f3375fd882dd374479bffb1.doc

Resource

win10v2004-20241007-en

remcos remotehost discovery rat

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral20

Sample

685dce7a17356b2a9fe68600ab29af885c591d23221e8f65396478d3a1f5ae03.exe

Resource

win7-20241010-en

bitrat discovery execution trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral21

Sample

685dce7a17356b2a9fe68600ab29af885c591d23221e8f65396478d3a1f5ae03.exe

Resource

win10v2004-20241007-en

bitrat discovery execution trojan

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral22

Sample

6c4aab4c3bd1ba8f77a781d70ecbc1b4c7dfd9d3c7ad60158fb8d35d1d4246e2.exe

Resource

win7-20240729-en

servhelper backdoor defense_evasion discovery execution exploit lateral_movement persistence trojan upx

windows7-x64

26 signatures

150 seconds

Behavioral task

behavioral23

Sample

6c4aab4c3bd1ba8f77a781d70ecbc1b4c7dfd9d3c7ad60158fb8d35d1d4246e2.exe

Resource

win10v2004-20241007-en

servhelper backdoor defense_evasion discovery execution exploit lateral_movement persistence trojan upx

windows10-2004-x64

28 signatures

150 seconds

Behavioral task

behavioral24

Sample

73a52a4c60d253ccdb79e5d50814d1689a49fd85f9e0a40a0dc57ba7fb54e5c0.exe

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral25

Sample

73a52a4c60d253ccdb79e5d50814d1689a49fd85f9e0a40a0dc57ba7fb54e5c0.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

Inv_7623980.exe

Resource

win7-20240903-en

xloader m6b5 discovery loader rat

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral27

Sample

Inv_7623980.exe

Resource

win10v2004-20241007-en

xloader m6b5 discovery loader rat

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral28

Sample

8954739d960eecd84aa64e657aed72d40567764023ba14e048778d0ebf24cba8.ps1

Resource

win7-20240903-en

execution

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

8954739d960eecd84aa64e657aed72d40567764023ba14e048778d0ebf24cba8.ps1

Resource

win10v2004-20241007-en

execution

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

USD $.exe

Resource

win7-20241010-en

xloader weni discovery loader rat

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral31

Sample

USD $.exe

Resource

win10v2004-20241007-en

xloader weni discovery loader rat

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral32

Sample

91d079d9371fa53227e4bb2207ba4d3aa4733feee607773b696779c5e87846b9.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

39c1e12e0ada85fa835b623a4698345bf95372bea57a7d3a5070ea1d5d5d825c.js
Size

846B
MD5

351b843f627dad02a1e21178f29b59ab
SHA1

801db68232be9a0d7b89a834a18d0d1ecf4cdeea
SHA256

39c1e12e0ada85fa835b623a4698345bf95372bea57a7d3a5070ea1d5d5d825c
SHA512

9c3adc2f1251223b1e0dd1ce983dcb0e4a86c5b3abc7880b4028b1e5d9e8d9c59a394e2b0638eaea2aa9dd84c2d49a0ff775a1558bcfee4c3c9443481d0c46a0

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\39c1e12e0ada85fa835b623a4698345bf95372bea57a7d3a5070ea1d5d5d825c.js
1⤵
PID:2668

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads