35e26bdbdea45ece8f73ddac192c584868bc55018cd95fcf669695c0f68260d7

Submit
Reports

Overview

overview

Static

static

fa9684b8aa...f5.exe

windows7-x64

fa9684b8aa...f5.exe

windows10-2004-x64

fab34117f7...aa.exe

windows7-x64

fab34117f7...aa.exe

windows10-2004-x64

fab48bce34...b4.exe

windows7-x64

fab48bce34...b4.exe

windows10-2004-x64

fab98623ff...4d.exe

windows7-x64

fab98623ff...4d.exe

windows10-2004-x64

fac2d1b39c...1b.exe

windows7-x64

fac2d1b39c...1b.exe

windows10-2004-x64

fafdd4e185...1c.exe

windows7-x64

fafdd4e185...1c.exe

windows10-2004-x64

fb29a0de04...ad.exe

windows7-x64

fb29a0de04...ad.exe

windows10-2004-x64

fba3c6ae20...e7.exe

windows7-x64

fba3c6ae20...e7.exe

windows10-2004-x64

fba6f3a4d4...b5.exe

windows7-x64

fba6f3a4d4...b5.exe

windows10-2004-x64

fbcf00ed27...c6.exe

windows7-x64

fbcf00ed27...c6.exe

windows10-2004-x64

fbd98903f8...bc.exe

windows7-x64

fbd98903f8...bc.exe

windows10-2004-x64

fc0103e816...3d.exe

windows7-x64

fc0103e816...3d.exe

windows10-2004-x64

fc3b729bc6...f7.exe

windows7-x64

fc3b729bc6...f7.exe

windows10-2004-x64

fc6ef4e0d5...7d.exe

windows7-x64

fc6ef4e0d5...7d.exe

windows10-2004-x64

fc79307cdb...f3.exe

windows7-x64

fc79307cdb...f3.exe

windows10-2004-x64

fc89267e95...ad.exe

windows7-x64

fc89267e95...ad.exe

windows10-2004-x64

Analysis

max time kernel
121s
max time network
127s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
22/03/2025, 06:18

Sharing

Copy URL

Twitter E-mail

Static task

static1

11 signatures

Behavioral task

behavioral1

Sample

fa9684b8aa290d6ff1b647323a6d35f5.exe

Resource

win7-20240903-en

dcrat infostealer rat

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

fa9684b8aa290d6ff1b647323a6d35f5.exe

Resource

win10v2004-20250314-en

dcrat infostealer rat

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral3

Sample

fab34117f7b728cbe6b6a07d7ff129aa.exe

Resource

win7-20240903-en

defense_evasion discovery persistence privilege_escalation

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral4

Sample

fab34117f7b728cbe6b6a07d7ff129aa.exe

Resource

win10v2004-20250314-en

defense_evasion discovery persistence privilege_escalation

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral5

Sample

fab48bce3470fcdc7b77131b73cd9db4.exe

Resource

win7-20240903-en

nanocore discovery keylogger persistence spyware stealer trojan

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral6

Sample

fab48bce3470fcdc7b77131b73cd9db4.exe

Resource

win10v2004-20250314-en

nanocore discovery keylogger persistence spyware stealer trojan

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral7

Sample

fab98623ff825ef3c56bf150ac25d34d.exe

Resource

win7-20240903-en

discovery persistence

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral8

Sample

fab98623ff825ef3c56bf150ac25d34d.exe

Resource

win10v2004-20250314-en

metamorpherrat discovery persistence rat stealer trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral9

Sample

fac2d1b39cd0231d245b4d4271a32dae40a51d5ac6091f83cf645af3d83e571b.exe

Resource

win7-20250207-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

fac2d1b39cd0231d245b4d4271a32dae40a51d5ac6091f83cf645af3d83e571b.exe

Resource

win10v2004-20250314-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

fafdd4e18554dbe82fc6f522d5bbd4a32162ce3e9dc0a11ccc5b91d6767a841c.exe

Resource

win7-20250207-en

nanocore discovery keylogger persistence spyware stealer trojan

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral12

Sample

fafdd4e18554dbe82fc6f522d5bbd4a32162ce3e9dc0a11ccc5b91d6767a841c.exe

Resource

win10v2004-20250314-en

nanocore discovery keylogger persistence spyware stealer trojan

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral13

Sample

fb29a0de0487b94558425bddaebcd35bc23178df4dfd02764d210ac340aecbad.exe

Resource

win7-20240903-en

quasar spyware trojan

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

fb29a0de0487b94558425bddaebcd35bc23178df4dfd02764d210ac340aecbad.exe

Resource

win10v2004-20250314-en

quasar spyware trojan

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral15

Sample

fba3c6ae202184e540a331393c5f16e7.exe

Resource

win7-20240903-en

collection credential_access discovery persistence spyware stealer

windows7-x64

19 signatures

150 seconds

Behavioral task

behavioral16

Sample

fba3c6ae202184e540a331393c5f16e7.exe

Resource

win10v2004-20250314-en

collection credential_access discovery persistence spyware stealer

windows10-2004-x64

19 signatures

150 seconds

Behavioral task

behavioral17

Sample

fba6f3a4d4330513edec704de64fa9b5.exe

Resource

win7-20240729-en

discovery

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral18

Sample

fba6f3a4d4330513edec704de64fa9b5.exe

Resource

win10v2004-20250313-en

discovery

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral19

Sample

fbcf00ed27bac15c981d237c31af77c6.exe

Resource

win7-20250207-en

discovery execution

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral20

Sample

fbcf00ed27bac15c981d237c31af77c6.exe

Resource

win10v2004-20250314-en

discovery execution

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral21

Sample

fbd98903f85840f90b218843df6be111339b24f98ff354743d374c8a359ca6bc.exe

Resource

win7-20241010-en

defense_evasion execution spyware stealer

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral22

Sample

fbd98903f85840f90b218843df6be111339b24f98ff354743d374c8a359ca6bc.exe

Resource

win10v2004-20250314-en

defense_evasion execution spyware stealer

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral23

Sample

fc0103e816984d1e97626e76a8d18d3d.exe

Resource

win7-20240903-en

xworm execution rat trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral24

Sample

fc0103e816984d1e97626e76a8d18d3d.exe

Resource

win10v2004-20250314-en

xworm execution rat trojan

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral25

Sample

fc3b729bc6897f8c971ac81084f74f2ea976b7854afae826afefb1a34629bbf7.exe

Resource

win7-20240903-en

persistence

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral26

Sample

fc3b729bc6897f8c971ac81084f74f2ea976b7854afae826afefb1a34629bbf7.exe

Resource

win10v2004-20250314-en

persistence

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral27

Sample

fc6ef4e0d5a7d150903c47cf60fa3ea21d7f0cdf7d0eeadff0cd910bdced0e7d.exe

Resource

win7-20240903-en

dcrat infostealer rat

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

fc6ef4e0d5a7d150903c47cf60fa3ea21d7f0cdf7d0eeadff0cd910bdced0e7d.exe

Resource

win10v2004-20250314-en

dcrat infostealer rat

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

fc79307cdb028b94519033c54ade814fe381ebb17c66a81aa6624a7c6db9a5f3.exe

Resource

win7-20240903-en

nanocore defense_evasion discovery keylogger persistence spyware stealer trojan

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral30

Sample

fc79307cdb028b94519033c54ade814fe381ebb17c66a81aa6624a7c6db9a5f3.exe

Resource

win10v2004-20250314-en

nanocore defense_evasion discovery keylogger persistence spyware stealer trojan

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral31

Sample

fc89267e95fb4313863bc6e01cb80dad.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

fc89267e95fb4313863bc6e01cb80dad.exe

Resource

win10v2004-20250314-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

fc89267e95fb4313863bc6e01cb80dad.exe
Size

610KB
MD5

fc89267e95fb4313863bc6e01cb80dad
SHA1

d81543b40e2de4788777c6fdc916cb8fa713531f
SHA256

a73964de2bac548d66d8e4cc2d0375bdbd62542ac01bc39a80ae58b06ee44661
SHA512

04149a8353c1898c683e72ffda8180884499a10974d157743d7aa2c43dc526946ab953bd59c72566c8809e43eb93e7d4b684d6470145d31dd5f179724d639181
SSDEEP

6144:RCZFtPj9clDVCnKfBzU7l0df6WzfMaWH+1fbp7l8U4Ooi:RCZFpjKlDVDppPsxBi

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\fc89267e95fb4313863bc6e01cb80dad.exe
"C:\Users\Admin\AppData\Local\Temp\fc89267e95fb4313863bc6e01cb80dad.exe"
1⤵
PID:2708

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2708-0-0x000007FEF5D13000-0x000007FEF5D14000-memory.dmp

Filesize
4KB

Download
memory/2708-1-0x00000000013A0000-0x000000000143C000-memory.dmp

Filesize
624KB

Download