b7dd3bce3ebfbc2d5e3a9f00d47f27cb6a5895c4618c878e314e573a7c216df1

Submit
Reports

Overview

overview

Static

static

The-MALWAR...ot.exe

windows10-ltsc 2021-x64

The-MALWAR...ll.exe

windows10-ltsc 2021-x64

The-MALWAR...BS.exe

windows10-ltsc 2021-x64

The-MALWAR...in.exe

windows10-ltsc 2021-x64

The-MALWAR....A.exe

windows10-ltsc 2021-x64

The-MALWAR....A.exe

windows10-ltsc 2021-x64

The-MALWAR....A.dll

windows10-ltsc 2021-x64

The-MALWAR...r.xlsm

windows10-ltsc 2021-x64

The-MALWAR...36c859

windows10-ltsc 2021-x64

The-MALWAR...caa742

windows10-ltsc 2021-x64

The-MALWAR...c1a732

windows10-ltsc 2021-x64

The-MALWAR...57c046

windows10-ltsc 2021-x64

The-MALWAR...4cde86

windows10-ltsc 2021-x64

The-MALWAR...460a01

windows10-ltsc 2021-x64

The-MALWAR...ece0c5

windows10-ltsc 2021-x64

The-MALWAR...257619

windows10-ltsc 2021-x64

The-MALWAR...fbcc59

windows10-ltsc 2021-x64

The-MALWAR...54f69c

windows10-ltsc 2021-x64

The-MALWAR...d539a6

windows10-ltsc 2021-x64

The-MALWAR...4996dd

windows10-ltsc 2021-x64

The-MALWAR...8232d5

windows10-ltsc 2021-x64

The-MALWAR...66b948

windows10-ltsc 2021-x64

The-MALWAR...f9db86

windows10-ltsc 2021-x64

The-MALWAR...ea2485

windows10-ltsc 2021-x64

The-MALWAR...us.exe

windows10-ltsc 2021-x64

The-MALWAR....a.exe

windows10-ltsc 2021-x64

The-MALWAR....a.exe

windows10-ltsc 2021-x64

The-MALWAR...ok.exe

windows10-ltsc 2021-x64

The-MALWAR...y.html

windows10-ltsc 2021-x64

The-MALWAR...ft.exe

windows10-ltsc 2021-x64

The-MALWAR...en.exe

windows10-ltsc 2021-x64

The-MALWAR...min.js

windows10-ltsc 2021-x64

Analysis

max time kernel
108s
max time network
143s
platform
windows10-ltsc 2021_x64
resource
win10ltsc2021-20241211-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20241211-enlocale:en-usos:windows10-ltsc 2021-x64system
submitted
04-01-2025 01:14

Sharing

Copy URL

Twitter E-mail

Static task

static1

21 signatures

Behavioral task

behavioral1

Sample

The-MALWARE-Repo-master/Banking-Malware/DanaBot.exe

Resource

win10ltsc2021-20241211-en

danabot banker botnet discovery trojan

windows10-ltsc 2021-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

The-MALWARE-Repo-master/Banking-Malware/Dridex/Dridex.JhiSharp.dll.exe

Resource

win10ltsc2021-20241211-en

dridex botnet discovery

windows10-ltsc 2021-x64

9 signatures

150 seconds

Behavioral task

behavioral3

Sample

The-MALWARE-Repo-master/Banking-Malware/Dridex/DridexDroppedVBS.exe

Resource

win10ltsc2021-20241023-en

dridex botnet discovery

windows10-ltsc 2021-x64

9 signatures

150 seconds

Behavioral task

behavioral4

Sample

The-MALWARE-Repo-master/Banking-Malware/Dridex/DridexLoader.bin.exe

Resource

win10ltsc2021-20241211-en

discovery

windows10-ltsc 2021-x64

7 signatures

150 seconds

Behavioral task

behavioral5

Sample

The-MALWARE-Repo-master/Banking-Malware/Dridex/Trojan.Dridex.A.exe

Resource

win10ltsc2021-20241211-en

discovery

windows10-ltsc 2021-x64

7 signatures

150 seconds

Behavioral task

behavioral6

Sample

The-MALWARE-Repo-master/Banking-Malware/Dridex/Trojan.Dridex.A.exe

Resource

win10ltsc2021-20241211-en

dridex botnet discovery

windows10-ltsc 2021-x64

9 signatures

150 seconds

Behavioral task

behavioral7

Sample

The-MALWARE-Repo-master/Banking-Malware/Dridex/Trojan.Dridex.A.dll

Resource

win10ltsc2021-20241211-en

persistence

windows10-ltsc 2021-x64

8 signatures

150 seconds

Behavioral task

behavioral8

Sample

The-MALWARE-Repo-master/Banking-Malware/Zloader.xlsm

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

7 signatures

150 seconds

Behavioral task

behavioral9

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/001eb377f0452060012124cb214f658754c7488ccb82e23ec56b2f45a636c859

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/041bc20ca8ac3161098cbc976e67e3c0f1b672ad36ecbe22fd21cbd53bcaa742

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/0ab8836efcaa62c7daac314e0b7ab1679319b2901578fd9e95ec3476b4c1a732

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/103b8404dc64c9a44511675981a09fd01395ee837452d114f1350c295357c046

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/2378e76aba1ad6e0c937fb39989217bf0de616fdad4726c0f4233bf5414cde86

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/30c150419000d27dafcd5d00702411b2b23b0f5d7e4d0cc729a7d63b2e460a01

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/3205603282a636979a55aa1e1be518cd3adcbbe491745d996ceb4b5a4dece0c5

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/453468b86856665f2cc0e0e71668c0b6aac8b14326c623995ba5963f22257619

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/5fb29fb0136978b9ccf60750af09cec74a257a0ca9c47159ca74dbba21fbcc59

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/6fe6808b9cfe654f526108ec61cb5211bb6601d28e192cadf06102073b54f69c

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/7745b070943e910e8807e3521ac7b7a01401d131bf6c18a63433f8177ed539a6

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/7f18e5b5b7645a80a0d44adf3fecdafcbf937bfe30a4cfb965a1421e034996dd

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/90b61cc77bb2d726219fd00ae2d0ecdf6f0fe7078529e87b7ec8e603008232d5

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/9384b9e39334479194aacb53cb25ace289b6afe2e41bdc8619b2d2cae966b948

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/985ffee662969825146d1b465d068ea4f5f01990d13827511415fd497cf9db86

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

The-MALWARE-Repo-master/Botnets/FritzFrog/d1e82d4a37959a9e6b661e31b8c8c6d2813c93ac92508a2771b2491b04ea2485

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

The-MALWARE-Repo-master/Email-Worm/Amus.exe

Resource

win10ltsc2021-20241211-en

discovery persistence

windows10-ltsc 2021-x64

5 signatures

150 seconds

Behavioral task

behavioral26

Sample

The-MALWARE-Repo-master/Email-Worm/Anap.a.exe

Resource

win10ltsc2021-20241211-en

discovery

windows10-ltsc 2021-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

The-MALWARE-Repo-master/Email-Worm/Axam.a.exe

Resource

win10ltsc2021-20241211-en

discovery persistence

windows10-ltsc 2021-x64

7 signatures

150 seconds

Behavioral task

behavioral28

Sample

The-MALWARE-Repo-master/Email-Worm/Brontok.exe

Resource

win10ltsc2021-20241211-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

The-MALWARE-Repo-master/Email-Worm/BubbleBoy.html

Resource

win10ltsc2021-20241211-en

discovery

windows10-ltsc 2021-x64

8 signatures

150 seconds

Behavioral task

behavioral30

Sample

The-MALWARE-Repo-master/Email-Worm/Bugsoft.exe

Resource

win10ltsc2021-20241211-en

discovery

windows10-ltsc 2021-x64

4 signatures

150 seconds

Behavioral task

behavioral31

Sample

The-MALWARE-Repo-master/Email-Worm/Duksten.exe

Resource

win10ltsc2021-20241211-en

discovery persistence

windows10-ltsc 2021-x64

5 signatures

150 seconds

Behavioral task

behavioral32

Sample

The-MALWARE-Repo-master/Email-Worm/Emin.js

Resource

win10ltsc2021-20241211-en

execution

windows10-ltsc 2021-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

The-MALWARE-Repo-master/Email-Worm/Anap.a.exe
Size

16KB
MD5

0231c3a7d92ead1bad77819d5bda939d
SHA1

683523ae4b60ac43d62cac5dad05fd8b5b8b8ae0
SHA256

da1798c0a49b991fbda674f02007b0a3be4703e2b07ee540539db7e5bf983278
SHA512

e34af2a1bd8f17ddc994671db37b29728e933e62eded7aff93ab0194a813103cad9dba522388f9f67ba839196fb6ed54ce87e1bebcfd98957feb40b726a7e0c6
SSDEEP

192:nC34zPAmm2VkeyLffMhyyuyeYHOGFeDK6P6t6:U6oj7LLffMI/jqBo

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Anap.a.exe

Processes

C:\Users\Admin\AppData\Local\Temp\The-MALWARE-Repo-master\Email-Worm\Anap.a.exe
"C:\Users\Admin\AppData\Local\Temp\The-MALWARE-Repo-master\Email-Worm\Anap.a.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5056

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads