cc95c0db419de3ca25709f4c1abc74ebdb72947b1d4d7e35b4ab6c36ffdee484 | Triage

Submit
Reports

Overview

overview

Static

static

quarantine...YX.exe

windows7-x64

8

quarantine...YX.exe

windows10-2004-x64

8

quarantine...dC.exe

windows7-x64

3

quarantine...dC.exe

windows10-2004-x64

7

quarantine...4U.exe

windows7-x64

7

quarantine...4U.exe

windows10-2004-x64

7

quarantine...Un.exe

windows7-x64

1

quarantine...Un.exe

windows10-2004-x64

1

quarantine...Gw.msi

windows7-x64

6

quarantine...Gw.msi

windows10-2004-x64

6

quarantine...pL.exe

windows7-x64

9

quarantine...pL.exe

windows10-2004-x64

9

quarantine...wS.exe

windows7-x64

quarantine...wS.exe

windows10-2004-x64

quarantine...au.exe

windows7-x64

quarantine...au.exe

windows10-2004-x64

quarantine...Ms.exe

windows7-x64

quarantine...Ms.exe

windows10-2004-x64

quarantine...mH.exe

windows7-x64

quarantine...mH.exe

windows10-2004-x64

quarantine...MX.exe

windows7-x64

3

quarantine...MX.exe

windows10-2004-x64

7

quarantine...Ll.exe

windows7-x64

9

quarantine...Ll.exe

windows10-2004-x64

9

quarantine...er.exe

windows7-x64

quarantine...er.exe

windows10-2004-x64

quarantine/pwldr.exe

windows7-x64

6

quarantine/pwldr.exe

windows10-2004-x64

6

quarantine...Mc.exe

windows7-x64

quarantine...Mc.exe

windows10-2004-x64

quarantine...s9.exe

windows7-x64

3

quarantine...s9.exe

windows10-2004-x64

1

Analysis

max time kernel
98s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20250217-en
resource tags

arch:x64arch:x86image:win10v2004-20250217-enlocale:en-usos:windows10-2004-x64system
submitted
25/02/2025, 22:21

Sharing

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

quarantine/0iMSdYX.exe

Resource

win7-20241023-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

quarantine/0iMSdYX.exe

Resource

win10v2004-20250217-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral3

Sample

quarantine/6NPpGdC.exe

Resource

win7-20241023-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

quarantine/6NPpGdC.exe

Resource

win10v2004-20250217-en

discovery spyware stealer

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral5

Sample

quarantine/8NsQP4U.exe

Resource

win7-20240729-en

discovery spyware stealer

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral6

Sample

quarantine/8NsQP4U.exe

Resource

win10v2004-20250217-en

discovery spyware stealer

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral7

Sample

quarantine/Cv5YtUn.exe

Resource

win7-20250207-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

quarantine/Cv5YtUn.exe

Resource

win10v2004-20250217-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

quarantine/DeX17Gw.msi

Resource

win7-20240903-en

discovery persistence privilege_escalation

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral10

Sample

quarantine/DeX17Gw.msi

Resource

win10v2004-20250217-en

discovery persistence privilege_escalation

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral11

Sample

quarantine/E3WGlpL.exe

Resource

win7-20241023-en

defense_evasion discovery spyware stealer

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral12

Sample

quarantine/E3WGlpL.exe

Resource

win10v2004-20250217-en

defense_evasion discovery spyware stealer

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral13

Sample

quarantine/JhOTKwS.exe

Resource

win7-20240903-en

xworm discovery rat spyware stealer trojan

windows7-x64

16 signatures

150 seconds

Behavioral task

behavioral14

Sample

quarantine/JhOTKwS.exe

Resource

win10v2004-20250217-en

xworm discovery rat spyware stealer trojan

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral15

Sample

quarantine/MegVlau.exe

Resource

win7-20240903-en

lumma discovery spyware stealer

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral16

Sample

quarantine/MegVlau.exe

Resource

win10v2004-20250217-en

lumma discovery spyware stealer

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral17

Sample

quarantine/Q7t2AMs.exe

Resource

win7-20240729-en

amadey systembc a4d2cd defense_evasion discovery trojan

windows7-x64

17 signatures

150 seconds

Behavioral task

behavioral18

Sample

quarantine/Q7t2AMs.exe

Resource

win10v2004-20250217-en

amadey systembc a4d2cd defense_evasion discovery trojan

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral19

Sample

quarantine/RHPLumH.exe

Resource

win7-20241010-en

xworm discovery rat trojan

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral20

Sample

quarantine/RHPLumH.exe

Resource

win10v2004-20250217-en

xworm discovery rat trojan

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral21

Sample

quarantine/Yg1HwMX.exe

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

quarantine/Yg1HwMX.exe

Resource

win10v2004-20250217-en

discovery spyware stealer

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

quarantine/bgUvqLl.exe

Resource

win7-20240903-en

defense_evasion discovery spyware stealer

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral24

Sample

quarantine/bgUvqLl.exe

Resource

win10v2004-20250217-en

defense_evasion discovery spyware stealer

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral25

Sample

quarantine/netdriver.exe

Resource

win7-20240903-en

systembc defense_evasion discovery trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral26

Sample

quarantine/netdriver.exe

Resource

win10v2004-20250217-en

systembc defense_evasion discovery trojan

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral27

Sample

quarantine/pwldr.exe

Resource

win7-20250207-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral28

Sample

quarantine/pwldr.exe

Resource

win10v2004-20250217-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

quarantine/q3na5Mc.exe

Resource

win7-20241010-en

vidar ir7am credential_access discovery spyware stealer

windows7-x64

22 signatures

150 seconds

Behavioral task

behavioral30

Sample

quarantine/q3na5Mc.exe

Resource

win10v2004-20250217-en

vidar ir7am credential_access discovery spyware stealer

windows10-2004-x64

24 signatures

150 seconds

Behavioral task

behavioral31

Sample

quarantine/rA6Gys9.exe

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

quarantine/rA6Gys9.exe

Resource

win10v2004-20250217-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

quarantine/Cv5YtUn.exe
Size

1.6MB
MD5

765bdc0f8bc0d77f7414e7a36ae45fd9
SHA1

c303968d61bfeb154a110549217d40bbdaa7439c
SHA256

aa8f8a3e268493157e62d93ab9cafb94573606fe43a80e63e3e4f2e5c9b22a5b
SHA512

5bb1267c5f4b7dc67d7da75af08ce616d5f518ea5469443ded642c2c7410256b370d1b01c355191ae9df8cb3e56ce31910ff153761787aad054148b12add5718
SSDEEP

49152:rKha/+cyVQ15lPzJkSnQOYnwOiYlBA7KVO3QTmdQQ:rPJNoBUKkemdJ

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\quarantine\Cv5YtUn.exe
"C:\Users\Admin\AppData\Local\Temp\quarantine\Cv5YtUn.exe"
1⤵
PID:2120

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy