994d6a3c00f42e919b596a6234346a095521ce84013474aa462570aa49b0e3da

Submit
Reports

Overview

overview

Static

static

Malware-1-...30.exe

windows11-21h2-x64

Malware-1-...40.exe

windows11-21h2-x64

Malware-1-...32.exe

windows11-21h2-x64

Malware-1-.../5.exe

windows11-21h2-x64

Malware-1-...91.exe

windows11-21h2-x64

Malware-1-...ey.exe

windows11-21h2-x64

Malware-1-...ad.exe

windows11-21h2-x64

Malware-1-...ti.exe

windows11-21h2-x64

Malware-1-...an.bat

windows11-21h2-x64

Malware-1-...an.exe

windows11-21h2-x64

Malware-1-...ve.bat

windows11-21h2-x64

Malware-1-...ve.exe

windows11-21h2-x64

Malware-1-...ya.exe

windows11-21h2-x64

Malware-1-...re.exe

windows11-21h2-x64

Malware-1-...ry.exe

windows11-21h2-x64

Malware-1-...ck.exe

windows11-21h2-x64

Malware-1-...he.exe

windows11-21h2-x64

Malware-1-...op.exe

windows11-21h2-x64

Malware-1-...rb.exe

windows11-21h2-x64

Malware-1-...ue.exe

windows11-21h2-x64

Malware-1-...ng.exe

windows11-21h2-x64

Malware-1-...kt.bat

windows11-21h2-x64

Malware-1-...o3.exe

windows11-21h2-x64

Malware-1-...ey.exe

windows11-21h2-x64

Malware-1-.../m.exe

windows11-21h2-x64

Malware-1-...o3.exe

windows11-21h2-x64

Malware-1-...32.exe

windows11-21h2-x64

Malware-1-...nf.exe

windows11-21h2-x64

Malware-1-.../o.exe

windows11-21h2-x64

Malware-1-...B8.exe

windows11-21h2-x64

Malware-1-...ig.exe

windows11-21h2-x64

Malware-1-...rv.exe

windows11-21h2-x64

Analysis

max time kernel
434s
max time network
458s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
16/01/2025, 13:33

Sharing

Copy URL

Twitter E-mail

Static task

static1

6 signatures

Behavioral task

behavioral1

Sample

Malware-1-master/2530.exe

Resource

win11-20241007-en

emotet banker discovery trojan

windows11-21h2-x64

7 signatures

900 seconds

Behavioral task

behavioral2

Sample

Malware-1-master/2887140.exe

Resource

win11-20241007-en

emotet banker discovery trojan

windows11-21h2-x64

7 signatures

900 seconds

Behavioral task

behavioral3

Sample

Malware-1-master/32.exe

Resource

win11-20241007-en

emotet banker discovery trojan

windows11-21h2-x64

7 signatures

900 seconds

Behavioral task

behavioral4

Sample

Malware-1-master/5.exe

Resource

win11-20241007-en

emotet banker discovery trojan

windows11-21h2-x64

7 signatures

900 seconds

Behavioral task

behavioral5

Sample

Malware-1-master/96591.exe

Resource

win11-20241007-en

emotet banker discovery trojan

windows11-21h2-x64

9 signatures

900 seconds

Behavioral task

behavioral6

Sample

Malware-1-master/Amadey.exe

Resource

win11-20241007-en

defense_evasion discovery

windows11-21h2-x64

5 signatures

900 seconds

Behavioral task

behavioral7

Sample

Malware-1-master/Download.exe

Resource

win11-20241007-en

discovery

windows11-21h2-x64

6 signatures

900 seconds

Behavioral task

behavioral8

Sample

Malware-1-master/Illuminati.exe

Resource

win11-20241007-en

discovery upx

windows11-21h2-x64

3 signatures

900 seconds

Behavioral task

behavioral9

Sample

Malware-1-master/MEMZ-Clean.bat

Resource

win11-20241007-en

discovery execution

windows11-21h2-x64

11 signatures

900 seconds

Behavioral task

behavioral10

Sample

Malware-1-master/MEMZ-Clean.exe

Resource

win11-20241007-en

discovery

windows11-21h2-x64

19 signatures

900 seconds

Behavioral task

behavioral11

Sample

Malware-1-master/MEMZ-Destructive.bat

Resource

win11-20241007-en

bootkit discovery execution persistence

windows11-21h2-x64

23 signatures

900 seconds

Behavioral task

behavioral12

Sample

Malware-1-master/MEMZ-Destructive.exe

Resource

win11-20241023-en

bootkit discovery persistence

windows11-21h2-x64

14 signatures

900 seconds

Behavioral task

behavioral13

Sample

Malware-1-master/Petya.exe

Resource

win11-20241007-en

bootkit persistence

windows11-21h2-x64

2 signatures

900 seconds

Behavioral task

behavioral14

Sample

Malware-1-master/Software.exe

Resource

win11-20241007-en

imminent discovery spyware trojan

windows11-21h2-x64

9 signatures

900 seconds

Behavioral task

behavioral15

Sample

Malware-1-master/WannaCry.exe

Resource

win11-20241007-en

wannacry defense_evasion discovery execution impact persistence ransomware spyware stealer worm

windows11-21h2-x64

21 signatures

900 seconds

Behavioral task

behavioral16

Sample

Malware-1-master/Win32.EvilClusterFuck.exe

Resource

win11-20241007-en

discovery

windows11-21h2-x64

4 signatures

900 seconds

Behavioral task

behavioral17

Sample

Malware-1-master/apache.exe

Resource

win11-20241007-en

darkcomet guest16 discovery evasion persistence rat trojan upx

windows11-21h2-x64

22 signatures

900 seconds

Behavioral task

behavioral18

Sample

Malware-1-master/butterflyondesktop.exe

Resource

win11-20241023-en

discovery persistence

windows11-21h2-x64

13 signatures

900 seconds

Behavioral task

behavioral19

Sample

Malware-1-master/crb.exe

Resource

win11-20241007-en

gandcrab backdoor credential_access defense_evasion discovery execution impact ransomware spyware stealer

windows11-21h2-x64

19 signatures

900 seconds

Behavioral task

behavioral20

Sample

Malware-1-master/eternalblue.exe

Resource

win11-20241007-en

windows11-21h2-x64

2 signatures

900 seconds

Behavioral task

behavioral21

Sample

Malware-1-master/fear.png.exe

Resource

win11-20241007-en

windows11-21h2-x64

3 signatures

900 seconds

Behavioral task

behavioral22

Sample

Malware-1-master/getr3kt.bat

Resource

win11-20241007-en

bootkit discovery execution persistence

windows11-21h2-x64

22 signatures

900 seconds

Behavioral task

behavioral23

Sample

Malware-1-master/iimo3.exe

Resource

win11-20241007-en

discovery evasion trojan

windows11-21h2-x64

9 signatures

900 seconds

Behavioral task

behavioral24

Sample

Malware-1-master/jey.exe

Resource

win11-20241007-en

azorult discovery infostealer trojan

windows11-21h2-x64

4 signatures

900 seconds

Behavioral task

behavioral25

Sample

Malware-1-master/m.exe

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral26

Sample

Malware-1-master/mo3.exe

Resource

win11-20241007-en

discovery evasion

windows11-21h2-x64

8 signatures

900 seconds

Behavioral task

behavioral27

Sample

Malware-1-master/mo332.exe

Resource

win11-20241007-en

discovery evasion persistence trojan

windows11-21h2-x64

20 signatures

900 seconds

Behavioral task

behavioral28

Sample

Malware-1-master/mysqlconf.exe

Resource

win11-20241007-en

darkcomet guest16 discovery evasion persistence rat trojan upx

windows11-21h2-x64

22 signatures

900 seconds

Behavioral task

behavioral29

Sample

Malware-1-master/o.exe

Resource

win11-20241007-en

discovery

windows11-21h2-x64

1 signatures

900 seconds

Behavioral task

behavioral30

Sample

Malware-1-master/qOA7iZJcoB8.exe

Resource

win11-20241007-en

emotet banker discovery trojan

windows11-21h2-x64

7 signatures

900 seconds

Behavioral task

behavioral31

Sample

Malware-1-master/rig.exe

Resource

win11-20241007-en

privateloader xmrig discovery loader miner vmprotect

windows11-21h2-x64

9 signatures

900 seconds

Behavioral task

behavioral32

Sample

Malware-1-master/sserv.exe

Resource

win11-20241007-en

troldesh defense_evasion discovery execution impact persistence ransomware spyware stealer trojan upx

windows11-21h2-x64

21 signatures

900 seconds

Report Analysis Logs

General

Target

Malware-1-master/o.exe
Size

110KB
MD5

73f0230c31eaca0f8cb20c88b4bd6599
SHA1

79d4ceaa753437e14f4baae45c4675a302f4d383
SHA256

47b306c80cf27a773d252757397fe9ec0a9571666044276166ede5b5958489ff
SHA512

afb59f13e5485e6815ac38a82b68cdf93bc2a8b01f818e88570fd8a50a6debafa2dcdb61ca4812700a0a223b44f60466333114375075b2c76e7a59c73a72bf01
SSDEEP

768:YY+RphoNSQhwS2BGmhn6MxRhUeADEe+NBgNK:XkY+pzn6shAgeqB

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	o.exe

Processes

C:\Users\Admin\AppData\Local\Temp\Malware-1-master\o.exe
"C:\Users\Admin\AppData\Local\Temp\Malware-1-master\o.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4268

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads