909aaea4a3072305c0bcaab9d7b9cab70990305541db276ab8d870e3fbc51a18 | Triage

Submit
Reports

Overview

overview

Static

static

7

Mr4X5srRQR...AN.exe

windows7-x64

Mr4X5srRQR...AN.exe

windows10-2004-x64

OEmxRS9Uai...jI.exe

windows7-x64

OEmxRS9Uai...jI.exe

windows10-2004-x64

OvVYhhgvd6...oB.exe

windows7-x64

9

OvVYhhgvd6...oB.exe

windows10-2004-x64

9

QKvpJeDIaP...YY.exe

windows7-x64

9

QKvpJeDIaP...YY.exe

windows10-2004-x64

9

QxZsdXOO8X...jN.exe

windows7-x64

QxZsdXOO8X...jN.exe

windows10-2004-x64

QzUu4XgUxQ...C3.exe

windows7-x64

QzUu4XgUxQ...C3.exe

windows10-2004-x64

SHSPDO6BYD...j9.exe

windows7-x64

SHSPDO6BYD...j9.exe

windows10-2004-x64

SqCuVl85T1...Di.exe

windows7-x64

SqCuVl85T1...Di.exe

windows10-2004-x64

T8Ulrjj8F6..._x.exe

windows7-x64

T8Ulrjj8F6..._x.exe

windows10-2004-x64

Trj0QcTNVE...S9.exe

windows7-x64

Trj0QcTNVE...S9.exe

windows10-2004-x64

Uwc7l02Hzj...tU.exe

windows7-x64

Uwc7l02Hzj...tU.exe

windows10-2004-x64

1

VoTrXaqIJ3...LW.exe

windows7-x64

VoTrXaqIJ3...LW.exe

windows10-2004-x64

Wp77te7Dqj...Hr.exe

windows7-x64

9

Wp77te7Dqj...Hr.exe

windows10-2004-x64

9

XOCYAkm_Nn...Q3.exe

windows7-x64

XOCYAkm_Nn...Q3.exe

windows10-2004-x64

Xd_XnNqsZT...Ai.exe

windows7-x64

Xd_XnNqsZT...Ai.exe

windows10-2004-x64

Xr9ca9oQNQ...Z9.exe

windows7-x64

9

Xr9ca9oQNQ...Z9.exe

windows10-2004-x64

9

Analysis

max time kernel
147s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
25-12-2024 03:57

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Mr4X5srRQR20TfuVZShfsrAN.exe

Resource

win7-20240903-en

gcleaner onlylogger discovery loader

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

Mr4X5srRQR20TfuVZShfsrAN.exe

Resource

win10v2004-20241007-en

gcleaner onlylogger discovery loader

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral3

Sample

OEmxRS9UaiMPqIKXPz6Ef8jI.exe

Resource

win7-20240903-en

redline sectoprat 23.08 discovery infostealer rat trojan

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral4

Sample

OEmxRS9UaiMPqIKXPz6Ef8jI.exe

Resource

win10v2004-20241007-en

redline sectoprat 23.08 discovery infostealer rat trojan

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral5

Sample

OvVYhhgvd6ZhUony5cRMqVoB.exe

Resource

win7-20240708-en

discovery evasion themida trojan

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral6

Sample

OvVYhhgvd6ZhUony5cRMqVoB.exe

Resource

win10v2004-20241007-en

discovery evasion themida trojan

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral7

Sample

QKvpJeDIaPtXDcwKwH_WmAYY.exe

Resource

win7-20240903-en

discovery evasion themida trojan

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral8

Sample

QKvpJeDIaPtXDcwKwH_WmAYY.exe

Resource

win10v2004-20241007-en

discovery evasion themida trojan

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral9

Sample

QxZsdXOO8Xn2bW7iW8ff3gjN.exe

Resource

win7-20240903-en

gcleaner onlylogger discovery loader

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral10

Sample

QxZsdXOO8Xn2bW7iW8ff3gjN.exe

Resource

win10v2004-20241007-en

gcleaner onlylogger discovery loader

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral11

Sample

QzUu4XgUxQuvhFNx7Nf5D6C3.exe

Resource

win7-20241010-en

glupteba metasploit backdoor discovery dropper evasion loader persistence privilege_escalation rootkit trojan

windows7-x64

30 signatures

150 seconds

Behavioral task

behavioral12

Sample

QzUu4XgUxQuvhFNx7Nf5D6C3.exe

Resource

win10v2004-20241007-en

glupteba metasploit backdoor discovery dropper evasion loader persistence privilege_escalation rootkit trojan

windows10-2004-x64

23 signatures

150 seconds

Behavioral task

behavioral13

Sample

SHSPDO6BYDV7xlwsZDJxsLj9.exe

Resource

win7-20240903-en

gcleaner onlylogger discovery loader

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral14

Sample

SHSPDO6BYDV7xlwsZDJxsLj9.exe

Resource

win10v2004-20241007-en

gcleaner onlylogger discovery loader

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral15

Sample

SqCuVl85T1P8OuH3gpVMKnDi.exe

Resource

win7-20241010-en

vidar 995 discovery stealer

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral16

Sample

SqCuVl85T1P8OuH3gpVMKnDi.exe

Resource

win10v2004-20241007-en

vidar 995 discovery stealer

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral17

Sample

T8Ulrjj8F65YXJ2qZEm11v_x.exe

Resource

win7-20240903-en

redline sectoprat dibild2 discovery infostealer rat trojan

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral18

Sample

T8Ulrjj8F65YXJ2qZEm11v_x.exe

Resource

win10v2004-20241007-en

redline sectoprat dibild2 discovery infostealer rat trojan

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral19

Sample

Trj0QcTNVE3l8SBp_3LNLFS9.exe

Resource

win7-20240903-en

glupteba metasploit backdoor discovery dropper evasion loader persistence privilege_escalation rootkit trojan

windows7-x64

30 signatures

150 seconds

Behavioral task

behavioral20

Sample

Trj0QcTNVE3l8SBp_3LNLFS9.exe

Resource

win10v2004-20241007-en

glupteba metasploit backdoor discovery dropper evasion loader persistence privilege_escalation rootkit trojan

windows10-2004-x64

23 signatures

150 seconds

Behavioral task

behavioral21

Sample

Uwc7l02HzjEVLDdBFF3ZKItU.exe

Resource

win7-20241023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Uwc7l02HzjEVLDdBFF3ZKItU.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

VoTrXaqIJ3vc2GnUIU6Wi5LW.exe

Resource

win7-20240729-en

gcleaner onlylogger discovery loader

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral24

Sample

VoTrXaqIJ3vc2GnUIU6Wi5LW.exe

Resource

win10v2004-20241007-en

gcleaner onlylogger discovery loader

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral25

Sample

Wp77te7DqjxTjTIGMDSB0RHr.exe

Resource

win7-20241010-en

discovery evasion themida trojan

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral26

Sample

Wp77te7DqjxTjTIGMDSB0RHr.exe

Resource

win10v2004-20241007-en

discovery evasion themida trojan

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral27

Sample

XOCYAkm_NnnfPmgVDNgu9MQ3.exe

Resource

win7-20240708-en

sectoprat discovery evasion rat themida trojan

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral28

Sample

XOCYAkm_NnnfPmgVDNgu9MQ3.exe

Resource

win10v2004-20241007-en

sectoprat discovery evasion rat themida trojan

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral29

Sample

Xd_XnNqsZTJJf8dCq4s_mlAi.exe

Resource

win7-20240903-en

smokeloader pub1 backdoor discovery trojan

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral30

Sample

Xd_XnNqsZTJJf8dCq4s_mlAi.exe

Resource

win10v2004-20241007-en

smokeloader pub1 backdoor discovery trojan

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral31

Sample

Xr9ca9oQNQWbUwEgChRmX6Z9.exe

Resource

win7-20240903-en

discovery evasion themida trojan

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral32

Sample

Xr9ca9oQNQWbUwEgChRmX6Z9.exe

Resource

win10v2004-20241007-en

discovery evasion themida trojan

windows10-2004-x64

6 signatures

150 seconds

Report Analysis Logs

General

Target

Uwc7l02HzjEVLDdBFF3ZKItU.exe
Size

900KB
MD5

7714deedb24c3dcfa81dc660dd383492
SHA1

56fae3ab1186009430e175c73b914c77ed714cc0
SHA256

435badbad2fc138245a4771a74ebb9075658e294d1bcfcf191ccea466eea825c
SHA512

2cf05ac9470ab4e6d487ec9e4d7ab36fb2c8ce1405dba01b58934778829c7c4db703818087e0c5fbffe6cf821dfa190427e1205530409359ace2ad416e781c58
SSDEEP

12288:jx1vJUpzeLkTqhqeEmC7QOZGafeei7fqiHf:H2zIkTgqeEVQO5fess

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\Uwc7l02HzjEVLDdBFF3ZKItU.exe
"C:\Users\Admin\AppData\Local\Temp\Uwc7l02HzjEVLDdBFF3ZKItU.exe"
1⤵
PID:3576

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy