031527224e74b82bf16e639c666134674ecc8a6e648fed2f68255617bd6a3b18

Submit
Reports

Overview

overview

Static

static

Order.exe

windows7-x64

Order.exe

windows10-2004-x64

төлем...DF.exe

windows7-x64

төлем...DF.exe

windows10-2004-x64

87597.exe

windows7-x64

87597.exe

windows10-2004-x64

29146c1ccd...70.exe

windows7-x64

29146c1ccd...70.exe

windows10-2004-x64

2cc3b42957...8e.exe

windows7-x64

2cc3b42957...8e.exe

windows10-2004-x64

RICHIESTA ...TA.exe

windows7-x64

RICHIESTA ...TA.exe

windows10-2004-x64

39c1e12e0a...25c.js

windows7-x64

39c1e12e0a...25c.js

windows10-2004-x64

3f46e10e5f...3b.exe

windows7-x64

3f46e10e5f...3b.exe

windows10-2004-x64

53074094ad...95dbec

debian-12-mipsel

632cfc71bd...b1.doc

windows7-x64

632cfc71bd...b1.doc

windows10-2004-x64

685dce7a17...03.exe

windows7-x64

685dce7a17...03.exe

windows10-2004-x64

6c4aab4c3b...e2.exe

windows7-x64

6c4aab4c3b...e2.exe

windows10-2004-x64

73a52a4c60...c0.exe

windows7-x64

73a52a4c60...c0.exe

windows10-2004-x64

Inv_7623980.exe

windows7-x64

Inv_7623980.exe

windows10-2004-x64

8954739d96...a8.ps1

windows7-x64

8954739d96...a8.ps1

windows10-2004-x64

USD $.exe

windows7-x64

USD $.exe

windows10-2004-x64

91d079d937...b9.exe

windows7-x64

Analysis

max time kernel
0s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
23-12-2024 12:40

Sharing

Copy URL

Twitter E-mail

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

Order.exe

Resource

win7-20240729-en

discovery

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

Order.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

төлем туралы есеп#454326_PDF.exe

Resource

win7-20240903-en

formbook vd9n discovery rat spyware stealer trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral4

Sample

төлем туралы есеп#454326_PDF.exe

Resource

win10v2004-20241007-en

formbook vd9n discovery rat spyware stealer trojan

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral5

Sample

87597.exe

Resource

win7-20241010-en

agenttesla discovery keylogger persistence spyware stealer trojan

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral6

Sample

87597.exe

Resource

win10v2004-20241007-en

agenttesla collection credential_access discovery keylogger persistence spyware stealer trojan

windows10-2004-x64

21 signatures

150 seconds

Behavioral task

behavioral7

Sample

29146c1ccdf280c8ac9d0c861f8bd222d2d93777c8a822da4d72c64fc3f78670.exe

Resource

win7-20240903-en

credential_access discovery spyware stealer

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

29146c1ccdf280c8ac9d0c861f8bd222d2d93777c8a822da4d72c64fc3f78670.exe

Resource

win10v2004-20241007-en

credential_access discovery spyware stealer

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

2cc3b4295747aeeb5a54b923fdbc9be766ee156c8914f5c07663f7cb1055068e.exe

Resource

win7-20240903-en

xloader synv discovery loader rat

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral10

Sample

2cc3b4295747aeeb5a54b923fdbc9be766ee156c8914f5c07663f7cb1055068e.exe

Resource

win10v2004-20241007-en

xloader synv discovery loader rat

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral11

Sample

RICHIESTA DI OFFERTA.exe

Resource

win7-20240903-en

guloader discovery downloader

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

RICHIESTA DI OFFERTA.exe

Resource

win10v2004-20241007-en

guloader discovery downloader

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

39c1e12e0ada85fa835b623a4698345bf95372bea57a7d3a5070ea1d5d5d825c.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

39c1e12e0ada85fa835b623a4698345bf95372bea57a7d3a5070ea1d5d5d825c.js

Resource

win10v2004-20241007-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

3f46e10e5fe376b995e2947d1be21955aa8341f39d80cca737109fcf2cf2bf3b.exe

Resource

win7-20240903-en

blustealer discovery stealer

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral16

Sample

3f46e10e5fe376b995e2947d1be21955aa8341f39d80cca737109fcf2cf2bf3b.exe

Resource

win10v2004-20241007-en

blustealer discovery stealer

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral17

Sample

53074094addc55786936f3d67d7fe36554a7c4f4f96c06252ae768707295dbec

Resource

debian12-mipsel-20240221-en

mirai botnet

debian-12-mipsel

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

632cfc71bd4734fdd98e48166a52fbc4a48d43640f3375fd882dd374479bffb1.doc

Resource

win7-20240903-en

discovery

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral19

Sample

632cfc71bd4734fdd98e48166a52fbc4a48d43640f3375fd882dd374479bffb1.doc

Resource

win10v2004-20241007-en

remcos remotehost discovery rat

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral20

Sample

685dce7a17356b2a9fe68600ab29af885c591d23221e8f65396478d3a1f5ae03.exe

Resource

win7-20241010-en

bitrat discovery execution trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral21

Sample

685dce7a17356b2a9fe68600ab29af885c591d23221e8f65396478d3a1f5ae03.exe

Resource

win10v2004-20241007-en

bitrat discovery execution trojan

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral22

Sample

6c4aab4c3bd1ba8f77a781d70ecbc1b4c7dfd9d3c7ad60158fb8d35d1d4246e2.exe

Resource

win7-20240729-en

servhelper backdoor defense_evasion discovery execution exploit lateral_movement persistence trojan upx

windows7-x64

26 signatures

150 seconds

Behavioral task

behavioral23

Sample

6c4aab4c3bd1ba8f77a781d70ecbc1b4c7dfd9d3c7ad60158fb8d35d1d4246e2.exe

Resource

win10v2004-20241007-en

servhelper backdoor defense_evasion discovery execution exploit lateral_movement persistence trojan upx

windows10-2004-x64

28 signatures

150 seconds

Behavioral task

behavioral24

Sample

73a52a4c60d253ccdb79e5d50814d1689a49fd85f9e0a40a0dc57ba7fb54e5c0.exe

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral25

Sample

73a52a4c60d253ccdb79e5d50814d1689a49fd85f9e0a40a0dc57ba7fb54e5c0.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

Inv_7623980.exe

Resource

win7-20240903-en

xloader m6b5 discovery loader rat

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral27

Sample

Inv_7623980.exe

Resource

win10v2004-20241007-en

xloader m6b5 discovery loader rat

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral28

Sample

8954739d960eecd84aa64e657aed72d40567764023ba14e048778d0ebf24cba8.ps1

Resource

win7-20240903-en

execution

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

8954739d960eecd84aa64e657aed72d40567764023ba14e048778d0ebf24cba8.ps1

Resource

win10v2004-20241007-en

execution

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

USD $.exe

Resource

win7-20241010-en

xloader weni discovery loader rat

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral31

Sample

USD $.exe

Resource

win10v2004-20241007-en

xloader weni discovery loader rat

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral32

Sample

91d079d9371fa53227e4bb2207ba4d3aa4733feee607773b696779c5e87846b9.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Errors

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\91d079d9371fa53227e4bb2207ba4d3aa4733feee607773b696779c5e87846b9.exe command="C:\Users\Admin\AppData\Local\Temp\91d079d9371fa53227e4bb2207ba4d3aa4733feee607773b696779c5e87846b9.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: %1 is not a valid Win32 application.

Report Analysis Logs

General

Target

91d079d9371fa53227e4bb2207ba4d3aa4733feee607773b696779c5e87846b9.exe
Size

400KB
MD5

315c3439a84941a3da05b9b09752dd5f
SHA1

ef24cc39f3f75c879d819480831541f12273f9f0
SHA256

91d079d9371fa53227e4bb2207ba4d3aa4733feee607773b696779c5e87846b9
SHA512

78229f409f4cdf93b87153325e37460855363eac92a84193d5aa82a6121c538d89e77c0da0dac977fbe3f8dc43482f560831ce2384e68268c8c99beb1d71d4ff
SSDEEP

6144:gFLtM1nJIDQx2L2RCo0iRdd21gloXpSFyLbSp13XsfN1/QH5s1mkbK4f4OxoWts4:EOLIyRn0ivdVlCSFlp1383wsmC4VplY1

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads