b4fc5b365d6ccb4dc726a82c8b3f1c39ce16bf848c779706569c938d1a6855a8

Submit
Reports

Overview

overview

Static

static

malware-sa...04.exe

windows7-x64

malware-sa...04.exe

windows10-2004-x64

malware-sa...nt.doc

windows7-x64

malware-sa...nt.doc

windows10-2004-x64

malware-sa...oc.xls

windows7-x64

malware-sa...oc.xls

windows10-2004-x64

malware-sa...l.docm

windows7-x64

malware-sa...l.docm

windows10-2004-x64

malware-sa...nt.exe

windows7-x64

malware-sa...nt.exe

windows10-2004-x64

malware-sa...on.exe

windows7-x64

malware-sa...on.exe

windows10-2004-x64

malware-sa...el.exe

windows7-x64

malware-sa...el.exe

windows10-2004-x64

malware-sa...ab.exe

windows7-x64

malware-sa...ab.exe

windows10-2004-x64

malware-sa...nt.exe

windows7-x64

malware-sa...nt.exe

windows10-2004-x64

malware-sa...nt.exe

windows7-x64

malware-sa...nt.exe

windows10-2004-x64

malware-sa...FI.exe

windows7-x64

malware-sa...FI.exe

windows10-2004-x64

malware-sa...nt.exe

windows7-x64

malware-sa...nt.exe

windows10-2004-x64

malware-sa...LL.dll

windows7-x64

malware-sa...LL.dll

windows10-2004-x64

malware-sa...ar.bin

macos-10.15-amd64

malware-sa...an.exe

windows7-x64

malware-sa...an.exe

windows10-2004-x64

malware-sa...64.dll

windows7-x64

malware-sa...64.dll

windows10-2004-x64

malware-sa...28.exe

windows7-x64

Analysis

max time kernel
65s
max time network
122s
platform
macos-10.15_amd64
resource
macos-20241106-en
resource tags

arch:amd64arch:i386image:macos-20241106-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
17/02/2025, 21:45

Sharing

Copy URL

Twitter E-mail

Static task

static1

16 signatures

Behavioral task

behavioral1

Sample

malware-sample-library-master/APT28 FancyBear/APT28,NATOPAPER,SOFACY2004.exe

Resource

win7-20240903-en

discovery persistence

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

malware-sample-library-master/APT28 FancyBear/APT28,NATOPAPER,SOFACY2004.exe

Resource

win10v2004-20250217-en

discovery persistence

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral3

Sample

malware-sample-library-master/APT28 FancyBear/APT28DecoyDocument.doc

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral4

Sample

malware-sample-library-master/APT28 FancyBear/APT28DecoyDocument.doc

Resource

win10v2004-20250217-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

malware-sample-library-master/APT28 FancyBear/APT28DropperExcelDoc.xls

Resource

win7-20250207-en

defense_evasion discovery

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral6

Sample

malware-sample-library-master/APT28 FancyBear/APT28DropperExcelDoc.xls

Resource

win10v2004-20250217-en

defense_evasion discovery

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral7

Sample

malware-sample-library-master/APT28 FancyBear/APT28Hospital.docm

Resource

win7-20241010-en

discovery persistence

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral8

Sample

malware-sample-library-master/APT28 FancyBear/APT28Hospital.docm

Resource

win10v2004-20250217-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral9

Sample

malware-sample-library-master/APT28 FancyBear/APT28Implant.exe

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

malware-sample-library-master/APT28 FancyBear/APT28Implant.exe

Resource

win10v2004-20250217-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

malware-sample-library-master/APT28 FancyBear/APT28wmsApplication.exe

Resource

win7-20240729-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

malware-sample-library-master/APT28 FancyBear/APT28wmsApplication.exe

Resource

win10v2004-20250217-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

malware-sample-library-master/APT28 FancyBear/Backdoor.XTunnel.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

malware-sample-library-master/APT28 FancyBear/Backdoor.XTunnel.exe

Resource

win10v2004-20250217-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

malware-sample-library-master/APT28 FancyBear/FancyBearZekapab.exe

Resource

win7-20250207-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

malware-sample-library-master/APT28 FancyBear/FancyBearZekapab.exe

Resource

win10v2004-20250217-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

malware-sample-library-master/APT28 FancyBear/FancyBearZekapabImplant.exe

Resource

win7-20240903-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

malware-sample-library-master/APT28 FancyBear/FancyBearZekapabImplant.exe

Resource

win10v2004-20250217-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

malware-sample-library-master/APT28 FancyBear/FancyImplant.exe

Resource

win7-20241023-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

malware-sample-library-master/APT28 FancyBear/FancyImplant.exe

Resource

win10v2004-20250217-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

malware-sample-library-master/APT28 FancyBear/LoJaxInfo_EFI.exe

Resource

win7-20241010-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

malware-sample-library-master/APT28 FancyBear/LoJaxInfo_EFI.exe

Resource

win10v2004-20250217-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

malware-sample-library-master/APT28 FancyBear/LoJaxSmallAgent.exe

Resource

win7-20240729-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

malware-sample-library-master/APT28 FancyBear/LoJaxSmallAgent.exe

Resource

win10v2004-20250217-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral25

Sample

malware-sample-library-master/APT28 FancyBear/LoJaxSmall_AgentDLL.dll

Resource

win7-20250207-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral26

Sample

malware-sample-library-master/APT28 FancyBear/LoJaxSmall_AgentDLL.dll

Resource

win10v2004-20250217-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral27

Sample

malware-sample-library-master/APT28 FancyBear/MacOSKomplexFancyBear.bin

Resource

macos-20241106-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

malware-sample-library-master/APT28 FancyBear/X-AgentTrojan.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

malware-sample-library-master/APT28 FancyBear/X-AgentTrojan.exe

Resource

win10v2004-20250217-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

malware-sample-library-master/APT28 FancyBear/Xagent64.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

malware-sample-library-master/APT28 FancyBear/Xagent64.dll

Resource

win10v2004-20250217-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

malware-sample-library-master/APT28 FancyBear/ZekaAPT28.exe

Resource

win7-20240903-en

discovery upx

windows7-x64

2 signatures

150 seconds

Report Analysis Logs

General

Target

malware-sample-library-master/APT28 FancyBear/MacOSKomplexFancyBear.bin
Size

131KB
MD5

4400ec9c4732a32149ca58e7c5806178
SHA1

d9bcd2f745acca38c403dd9131b3d2cdf23c2b3c
SHA256

96a19a90caa41406b632a2046f3a39b5579fbf730aca2357f84bf23f2cbc1fd3
SHA512

fadb351bf1d11c977b62e2b5143ed4afe59cb36918dfc5f259150875992b9e21285e05f3c541b1e6afddb572aa6538a1db0fac984540a3be50dd20982a20606b
SSDEEP

1536:mmuG6zRg+/Hfx0X2zTCDsQvGVSzNPMihlv72zVXB6Yjzral1Y:zujRHfxm2zTCgQOg00vKzVXB6YjzK1Y

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/malware-sample-library-master/APT28 FancyBear/MacOSKomplexFancyBear.bin\""
1⤵
PID:488

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/malware-sample-library-master/APT28 FancyBear/MacOSKomplexFancyBear.bin\""
1⤵
PID:488

/usr/bin/sudo
sudo /bin/zsh -c "/Users/run/malware-sample-library-master/APT28 FancyBear/MacOSKomplexFancyBear.bin"
1⤵
PID:488
- /bin/zsh
  /bin/zsh -c "/Users/run/malware-sample-library-master/APT28 FancyBear/MacOSKomplexFancyBear.bin"
  2⤵
  PID:489
- /Users/run/malware-sample-library-master/APT28
  /Users/run/malware-sample-library-master/APT28 FancyBear/MacOSKomplexFancyBear.bin
  2⤵
  PID:489

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads