ba18ff142bae31457031ca49e772b10792ad3a5bdead90cb2c1d37e2a6c2fd59

Submit
Reports

Overview

overview

Static

static

Γενικ...19.exe

windows7-x64

Γενικ...19.exe

windows10-2004-x64

Covid 19 I...ps.exe

windows7-x64

Covid 19 I...ps.exe

windows10-2004-x64

Original.document.exe

windows7-x64

Original.document.exe

windows10-2004-x64

COVID-19 W... V.exe

windows7-x64

COVID-19 W... V.exe

windows10-2004-x64

Malware-Fe...ae.jar

windows7-x64

Malware-Fe...ae.jar

windows10-2004-x64

Malware-Fe...7f.exe

windows7-x64

Malware-Fe...7f.exe

windows10-2004-x64

Malware-Fe...a5.exe

windows7-x64

Malware-Fe...a5.exe

windows10-2004-x64

Malware-Fe...02.exe

windows7-x64

Malware-Fe...02.exe

windows10-2004-x64

Malware-Fe...3a.exe

windows7-x64

Malware-Fe...3a.exe

windows10-2004-x64

Malware-Fe...ee.exe

windows7-x64

Malware-Fe...ee.exe

windows10-2004-x64

AWARENESS ...df.exe

windows7-x64

AWARENESS ...df.exe

windows10-2004-x64

Malware-Fe...987494

ubuntu-24.04-amd64

Malware-Fe...237d18

ubuntu-22.04-amd64

Malware-Fe...00.dll

windows7-x64

Malware-Fe...00.dll

windows10-2004-x64

Malware-Fe...35.dll

windows7-x64

Malware-Fe...35.dll

windows10-2004-x64

Malware-Fe...29.dll

windows7-x64

Malware-Fe...29.dll

windows10-2004-x64

Malware-Fe...2b86da

ubuntu-18.04-amd64

Malware-Fe...2b86da

debian-9-armhf

Analysis

max time kernel
130s
max time network
160s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20240611-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20240611-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
17-02-2025 17:59

Sharing

Copy URL

Twitter E-mail

Static task

static1

42 signatures

Behavioral task

behavioral1

Sample

Γενική ειδοποίηση χρονοδιαγράμματος εργασίας στο COVID-19.exe

Resource

win7-20241010-en

agenttesla collection discovery keylogger spyware stealer trojan upx

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral2

Sample

Γενική ειδοποίηση χρονοδιαγράμματος εργασίας στο COVID-19.exe

Resource

win10v2004-20250217-en

agenttesla collection discovery keylogger spyware stealer trojan upx

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral3

Sample

Covid 19 Immunity Tips.exe

Resource

win7-20240903-en

collection credential_access discovery spyware stealer

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral4

Sample

Covid 19 Immunity Tips.exe

Resource

win10v2004-20250217-en

collection credential_access discovery spyware stealer

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral5

Sample

Original.document.exe

Resource

win7-20241023-en

agenttesla collection credential_access discovery keylogger spyware stealer trojan

windows7-x64

20 signatures

150 seconds

Behavioral task

behavioral6

Sample

Original.document.exe

Resource

win10v2004-20250217-en

agenttesla collection credential_access discovery keylogger spyware stealer trojan

windows10-2004-x64

20 signatures

150 seconds

Behavioral task

behavioral7

Sample

COVID-19 WHO RECOMENDED V.exe

Resource

win7-20240903-en

agenttesla collection discovery keylogger persistence spyware stealer trojan

windows7-x64

17 signatures

150 seconds

Behavioral task

behavioral8

Sample

COVID-19 WHO RECOMENDED V.exe

Resource

win10v2004-20250217-en

agenttesla collection discovery keylogger persistence spyware stealer trojan

windows10-2004-x64

18 signatures

150 seconds

Behavioral task

behavioral9

Sample

Malware-Feed-master/2020.06.22_FBI-FLASH-MI-000124-MW/5b0ba8d58a64630cb5fcb80e72520bd2ef6f322003fa2588d4d594620e6685ae.jar

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Malware-Feed-master/2020.06.22_FBI-FLASH-MI-000124-MW/5b0ba8d58a64630cb5fcb80e72520bd2ef6f322003fa2588d4d594620e6685ae.jar

Resource

win10v2004-20250217-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Malware-Feed-master/2020.06.22_FBI-FLASH-MI-000124-MW/7b98cd3800dede6537cf78e7b61eeeda71d251dc97c70cb7c2135c6aa310ab7f.exe

Resource

win7-20240903-en

agenttesla collection credential_access discovery keylogger spyware stealer trojan

windows7-x64

20 signatures

150 seconds

Behavioral task

behavioral12

Sample

Malware-Feed-master/2020.06.22_FBI-FLASH-MI-000124-MW/7b98cd3800dede6537cf78e7b61eeeda71d251dc97c70cb7c2135c6aa310ab7f.exe

Resource

win10v2004-20250217-en

agenttesla collection credential_access discovery keylogger spyware stealer trojan

windows10-2004-x64

20 signatures

150 seconds

Behavioral task

behavioral13

Sample

Malware-Feed-master/2020.06.22_FBI-FLASH-MI-000124-MW/d150feb631d6e9050b7fb76db57504e6dcc2715fe03e45db095f50d56a9495a5.exe

Resource

win7-20240903-en

agenttesla collection discovery keylogger persistence spyware stealer trojan

windows7-x64

17 signatures

150 seconds

Behavioral task

behavioral14

Sample

Malware-Feed-master/2020.06.22_FBI-FLASH-MI-000124-MW/d150feb631d6e9050b7fb76db57504e6dcc2715fe03e45db095f50d56a9495a5.exe

Resource

win10v2004-20250217-en

agenttesla collection discovery keylogger persistence spyware stealer trojan

windows10-2004-x64

18 signatures

150 seconds

Behavioral task

behavioral15

Sample

Malware-Feed-master/2020.06.22_FBI-FLASH-MI-000124-MW/da26ba1e13ce4702bd5154789ce1a699ba206c12021d9823380febd795f5b002.exe

Resource

win7-20241010-en

lokibot collection discovery spyware stealer trojan

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral16

Sample

Malware-Feed-master/2020.06.22_FBI-FLASH-MI-000124-MW/da26ba1e13ce4702bd5154789ce1a699ba206c12021d9823380febd795f5b002.exe

Resource

win10v2004-20250217-en

lokibot collection discovery spyware stealer trojan

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral17

Sample

Malware-Feed-master/2020.06.22_FBI-FLASH-MI-000124-MW/e4e5c3a6c15beff4e17117075e2c0bd65f176d81e6885134d2b4d97c20d4773a.exe

Resource

win7-20241023-en

collection credential_access discovery spyware stealer

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral18

Sample

Malware-Feed-master/2020.06.22_FBI-FLASH-MI-000124-MW/e4e5c3a6c15beff4e17117075e2c0bd65f176d81e6885134d2b4d97c20d4773a.exe

Resource

win10v2004-20250217-en

collection credential_access discovery spyware stealer

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral19

Sample

Malware-Feed-master/2020.06.22_FBI-FLASH-MI-000124-MW/f681c1f8c12956a20c27beb9be1112374fefc7651884d7dd92010b40db1e7bee.exe

Resource

win7-20241010-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

Malware-Feed-master/2020.06.22_FBI-FLASH-MI-000124-MW/f681c1f8c12956a20c27beb9be1112374fefc7651884d7dd92010b40db1e7bee.exe

Resource

win10v2004-20250217-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

AWARENESS NOTICE ON CORONAVIRUS COVID-19 DOCUMENT_pdf.exe

Resource

win7-20241010-en

lokibot collection discovery spyware stealer trojan

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral22

Sample

AWARENESS NOTICE ON CORONAVIRUS COVID-19 DOCUMENT_pdf.exe

Resource

win10v2004-20250217-en

lokibot collection discovery spyware stealer trojan

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral23

Sample

Malware-Feed-master/2020.07.16_CISA-WELLMAIL/0c5ad1e8fe43583e279201cdb1046aea742bae59685e6da24e963a41df987494

Resource

ubuntu2404-amd64-20240523-en

ubuntu-24.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Malware-Feed-master/2020.07.16_CISA-WELLMAIL/83014ab5b3f63b0253cdab6d715f5988ac9014570fa4ab2b267c7cf9ba237d18

Resource

ubuntu2204-amd64-20240611-en

discovery

ubuntu-22.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

Malware-Feed-master/2020.07.23_FBI-FLASH-AC-000129-TT/1d973d05dee26f74ae352325da741928af4327f7a6be27cdec085a31fbea8100.dll

Resource

win7-20240903-en

discovery persistence

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

Malware-Feed-master/2020.07.23_FBI-FLASH-AC-000129-TT/1d973d05dee26f74ae352325da741928af4327f7a6be27cdec085a31fbea8100.dll

Resource

win10v2004-20250217-en

discovery persistence

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

Malware-Feed-master/2020.07.23_FBI-FLASH-AC-000129-TT/37aa87d3408dc3e211d63a3bb38c726787c47c06a19e77f6a14861a91c2dcb35.dll

Resource

win7-20240903-en

discovery persistence

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral28

Sample

Malware-Feed-master/2020.07.23_FBI-FLASH-AC-000129-TT/37aa87d3408dc3e211d63a3bb38c726787c47c06a19e77f6a14861a91c2dcb35.dll

Resource

win10v2004-20250217-en

discovery persistence

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral29

Sample

Malware-Feed-master/2020.07.23_FBI-FLASH-AC-000129-TT/a1aa0684813cfe9d7ed5c491c8ab132e5583b4fd02187fdae8aa4d934d933f29.dll

Resource

win7-20240903-en

persistence

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

Malware-Feed-master/2020.07.23_FBI-FLASH-AC-000129-TT/a1aa0684813cfe9d7ed5c491c8ab132e5583b4fd02187fdae8aa4d934d933f29.dll

Resource

win10v2004-20250217-en

persistence

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

Malware-Feed-master/2020.07.27_CISA-Legacy_Malware_Targeting_QNAP_NAS/09ab3031796bea1b8b79fcfd2b86da

Resource

ubuntu1804-amd64-20240729-en

discovery

ubuntu-18.04-amd64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

Malware-Feed-master/2020.07.27_CISA-Legacy_Malware_Targeting_QNAP_NAS/09ab3031796bea1b8b79fcfd2b86da

Resource

debian9-armhf-20240611-en

antivm discovery

debian-9-armhf

3 signatures

150 seconds

Report Analysis Logs

General

Target

Malware-Feed-master/2020.07.16_CISA-WELLMAIL/83014ab5b3f63b0253cdab6d715f5988ac9014570fa4ab2b267c7cf9ba237d18
Size

2.1MB
MD5

8777a9796565effa01b03cf1cea9d24d
SHA1

53098b025a3f469ebc3e522f7b0999011cafb943
SHA256

83014ab5b3f63b0253cdab6d715f5988ac9014570fa4ab2b267c7cf9ba237d18
SHA512

e9c2bdcd2b298456726f0fc15ecf3cbfd667a7f0196bd42ecde1058dbfe33aeccb1626a462797cdaf1f32e2515ce08f0fa2d46e34833e0ac098081d9cb89ac41
SSDEEP

49152:xtt6IZ6yPcb6MSsGN4aftKLK8Fa0Bpmy8TxQbjtHpbJ4E:xttn7Pc/Sjb5GpmyWxQVJbJ4E

Score

3^/10

discovery

Malware Config

Signatures

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/sys/net/core/somaxconn	83014ab5b3f63b0253cdab6d715f5988ac9014570fa4ab2b267c7cf9ba237d18

Processes

/tmp/Malware-Feed-master/2020.07.16_CISA-WELLMAIL/83014ab5b3f63b0253cdab6d715f5988ac9014570fa4ab2b267c7cf9ba237d18
/tmp/Malware-Feed-master/2020.07.16_CISA-WELLMAIL/83014ab5b3f63b0253cdab6d715f5988ac9014570fa4ab2b267c7cf9ba237d18
1⤵
- Reads runtime system information
PID:1566

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads