2e96258f3dd21d059f59831295d32d324a849c87bc5a2149a49c97fcf5783558

Submit
Reports

Overview

overview

Static

static

Malware.2024.12.25.7z

windows7-x64

Malware.2024.12.25.7z

windows10-2004-x64

2024-12-25...19.exe

windows7-x64

2024-12-25...19.exe

windows10-2004-x64

2024-12-25...8a.pdf

windows7-x64

2024-12-25...8a.pdf

windows10-2004-x64

2024-12-25...0d.pdf

windows7-x64

2024-12-25...0d.pdf

windows10-2004-x64

2024-12-25...96.exe

windows7-x64

2024-12-25...96.exe

windows10-2004-x64

2024-12-25...61.exe

windows7-x64

2024-12-25...61.exe

windows10-2004-x64

2024-12-25...03.pdf

windows7-x64

2024-12-25...03.pdf

windows10-2004-x64

2024-12-25...62.exe

windows7-x64

2024-12-25...62.exe

windows10-2004-x64

2024-12-25...25.exe

windows7-x64

2024-12-25...25.exe

windows10-2004-x64

2024-12-25...6b.exe

windows7-x64

2024-12-25...6b.exe

windows10-2004-x64

2024-12-25...ec.exe

windows7-x64

2024-12-25...ec.exe

windows10-2004-x64

2024-12-25...cc.exe

windows7-x64

2024-12-25...cc.exe

windows10-2004-x64

2024-12-25...3a.exe

windows7-x64

2024-12-25...3a.exe

windows10-2004-x64

2024-12-25...66.exe

windows7-x64

2024-12-25...66.exe

windows10-2004-x64

2024-12-25...97.exe

windows7-x64

2024-12-25...97.exe

windows10-2004-x64

2024-12-25...1d.pdf

windows7-x64

2024-12-25...1d.pdf

windows10-2004-x64

Analysis

max time kernel
105s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20250129-en
resource tags

arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system
submitted
31-01-2025 17:40

Sharing

Copy URL

Twitter E-mail

Static task

static1

31 signatures

Behavioral task

behavioral1

Sample

Malware.2024.12.25.7z

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

Malware.2024.12.25.7z

Resource

win10v2004-20250129-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

2024-12-25/unknown-df6ecbdc8f043bbe3a4018a4fd3734c474761e1c7505fb0917df4fb808087e19.exe

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

2024-12-25/unknown-df6ecbdc8f043bbe3a4018a4fd3734c474761e1c7505fb0917df4fb808087e19.exe

Resource

win10v2004-20250129-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

2024-12-25/unknown-e0b170a4440b174bb3d6bd6c5abb8833cd7eae6eadc74d4176c8bb8a4b38ca8a.pdf

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

2024-12-25/unknown-e0b170a4440b174bb3d6bd6c5abb8833cd7eae6eadc74d4176c8bb8a4b38ca8a.pdf

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral7

Sample

2024-12-25/unknown-e1e08ee8a9d8d42268b3537c74ec3f099dc05a1cf1fd91d3c1e54084957c570d.pdf

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

2024-12-25/unknown-e1e08ee8a9d8d42268b3537c74ec3f099dc05a1cf1fd91d3c1e54084957c570d.pdf

Resource

win10v2004-20250129-en

discovery

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral9

Sample

2024-12-25/unknown-e1ffabc651f471b8d4141420d8e171310bc91a400462062ca96f6ac202a0a896.exe

Resource

win7-20240708-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral10

Sample

2024-12-25/unknown-e1ffabc651f471b8d4141420d8e171310bc91a400462062ca96f6ac202a0a896.exe

Resource

win10v2004-20250129-en

discovery

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral11

Sample

2024-12-25/unknown-e2c57dce7eb054b47a8f96e8be747b91ad1fce0bc0de597c9d41fce2623d9361.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

2024-12-25/unknown-e2c57dce7eb054b47a8f96e8be747b91ad1fce0bc0de597c9d41fce2623d9361.exe

Resource

win10v2004-20250129-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

2024-12-25/unknown-e3dcabde5987c263aef8243cba944e442658bfcf1ad19ebbd7c78b89be0ab203.pdf

Resource

win7-20240729-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

2024-12-25/unknown-e3dcabde5987c263aef8243cba944e442658bfcf1ad19ebbd7c78b89be0ab203.pdf

Resource

win10v2004-20250129-en

discovery

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral15

Sample

2024-12-25/unknown-e49324f54cdf00a226d1779157391c9c260ddb6a5179ece3276f326052b95962.exe

Resource

win7-20240903-en

lumma stealer

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

2024-12-25/unknown-e49324f54cdf00a226d1779157391c9c260ddb6a5179ece3276f326052b95962.exe

Resource

win10v2004-20250129-en

lumma discovery stealer

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

2024-12-25/unknown-e4c4e59c66b650e0d696b6ec194d61637a688293cd5e23be9c630f7748c74125.exe

Resource

win7-20241010-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

2024-12-25/unknown-e4c4e59c66b650e0d696b6ec194d61637a688293cd5e23be9c630f7748c74125.exe

Resource

win10v2004-20250129-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

2024-12-25/unknown-e668037208d053a72e197f6b156805776bf8bd8823c0b850d7c6302e22eb726b.exe

Resource

win7-20240903-en

berbew backdoor discovery persistence

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral20

Sample

2024-12-25/unknown-e668037208d053a72e197f6b156805776bf8bd8823c0b850d7c6302e22eb726b.exe

Resource

win10v2004-20250129-en

berbew backdoor discovery persistence

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral21

Sample

2024-12-25/unknown-e8c053991c3618b30dde741da46435044fd5ae153f78c53f526f0de329fd43ec.exe

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

2024-12-25/unknown-e8c053991c3618b30dde741da46435044fd5ae153f78c53f526f0de329fd43ec.exe

Resource

win10v2004-20250129-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

2024-12-25/unknown-ea34039dbd854222e03748c548a5210e552bbfaa600ae0f24dfb55397a3136cc.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

2024-12-25/unknown-ea34039dbd854222e03748c548a5210e552bbfaa600ae0f24dfb55397a3136cc.exe

Resource

win10v2004-20250129-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

2024-12-25/unknown-ebf18c1982c1ceec0f808a2e8a8b1fc11970a2483e2c92dc121d38292141ab3a.exe

Resource

win7-20240903-en

blackmoon banker discovery trojan upx

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral26

Sample

2024-12-25/unknown-ebf18c1982c1ceec0f808a2e8a8b1fc11970a2483e2c92dc121d38292141ab3a.exe

Resource

win10v2004-20241007-en

blackmoon banker discovery trojan upx

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral27

Sample

2024-12-25/unknown-ec6a36915e9f9d331e80881a2336503416fc441a599fec36e2601e6f27229b66.exe

Resource

win7-20240729-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

2024-12-25/unknown-ec6a36915e9f9d331e80881a2336503416fc441a599fec36e2601e6f27229b66.exe

Resource

win10v2004-20250129-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral29

Sample

2024-12-25/unknown-ed34607d35c3e5e97ce126000df93ecdcc854d9e7bde1ee42e08b243df314697.exe

Resource

win7-20240903-en

defense_evasion discovery persistence privilege_escalation trojan

windows7-x64

16 signatures

150 seconds

Behavioral task

behavioral30

Sample

2024-12-25/unknown-ed34607d35c3e5e97ce126000df93ecdcc854d9e7bde1ee42e08b243df314697.exe

Resource

win10v2004-20250129-en

defense_evasion discovery persistence privilege_escalation trojan

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral31

Sample

2024-12-25/unknown-ed52a60eea60738501367935811e2f8a9ffe366ff9656cca8d4d9c78555d581d.pdf

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral32

Sample

2024-12-25/unknown-ed52a60eea60738501367935811e2f8a9ffe366ff9656cca8d4d9c78555d581d.pdf

Resource

win10v2004-20250129-en

discovery

windows10-2004-x64

7 signatures

150 seconds

Report Analysis Logs

General

Target

2024-12-25/unknown-e4c4e59c66b650e0d696b6ec194d61637a688293cd5e23be9c630f7748c74125.exe
Size

182KB
MD5

361830025896dd90a81de43e0b7f00b6
SHA1

fd7be7f6fe0c9fdc44ce4f262f4be81ff5392ff0
SHA256

e4c4e59c66b650e0d696b6ec194d61637a688293cd5e23be9c630f7748c74125
SHA512

26e3b67e304f5c2766b6e4cdbdd0f05f28ed17d5308ad0280b07497df23ef4bab0cc8dd0efe6b0193a4994efdcc58d996edb7fedb7d6331f06abad9c0a23033e
SSDEEP

3072:YE6JJJJJJJJJJJJdtLnaZ01Tuhxgty6Ccew+bUudqnHMy+wjpo6t/LLlgNWNlxUP:yJJJJJJJJJJJJBTIxgM6qw+oudqnuCpi

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\2024-12-25\unknown-e4c4e59c66b650e0d696b6ec194d61637a688293cd5e23be9c630f7748c74125.exe
"C:\Users\Admin\AppData\Local\Temp\2024-12-25\unknown-e4c4e59c66b650e0d696b6ec194d61637a688293cd5e23be9c630f7748c74125.exe"
1⤵
PID:3340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3340-0-0x00007FF956833000-0x00007FF956835000-memory.dmp

Filesize
8KB

Download
memory/3340-1-0x0000024B7C160000-0x0000024B7C192000-memory.dmp

Filesize
200KB

Download
memory/3340-2-0x00007FF956830000-0x00007FF9572F1000-memory.dmp

Filesize
10.8MB

Download
memory/3340-3-0x00007FF956830000-0x00007FF9572F1000-memory.dmp

Filesize
10.8MB

Download