5e5d5458b8a025c2bc9a6e7998492989732967c9a1019b11d655200adf3686c7

Submit
Reports

Overview

overview

Static

static

820e99e073...06.exe

windows7-x64

820e99e073...06.exe

windows10-2004-x64

82159a5146...bd.exe

windows7-x64

82159a5146...bd.exe

windows10-2004-x64

822a16f7ff...c0.exe

windows7-x64

822a16f7ff...c0.exe

windows10-2004-x64

8242f8a803...ff.exe

windows7-x64

8242f8a803...ff.exe

windows10-2004-x64

825b5bf780...55.exe

windows7-x64

825b5bf780...55.exe

windows10-2004-x64

825cbe9334...3e.exe

windows7-x64

825cbe9334...3e.exe

windows10-2004-x64

828b11fa8d...bb.exe

windows7-x64

828b11fa8d...bb.exe

windows10-2004-x64

82a9dfe728...ab.exe

windows7-x64

82a9dfe728...ab.exe

windows10-2004-x64

82aff6a3f0...e2.exe

windows7-x64

82aff6a3f0...e2.exe

windows10-2004-x64

82dc0c2f48...04.exe

windows7-x64

82dc0c2f48...04.exe

windows10-2004-x64

82eb00f02e...57.exe

windows7-x64

82eb00f02e...57.exe

windows10-2004-x64

82fdd73396...ed.exe

windows7-x64

82fdd73396...ed.exe

windows10-2004-x64

832a48a191...90.exe

windows7-x64

832a48a191...90.exe

windows10-2004-x64

833949a7ff...98.exe

windows7-x64

833949a7ff...98.exe

windows10-2004-x64

833aad3410...1f.exe

windows7-x64

833aad3410...1f.exe

windows10-2004-x64

834458e6ef...93.exe

windows7-x64

834458e6ef...93.exe

windows10-2004-x64

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
22/03/2025, 06:13

Sharing

Copy URL

Twitter E-mail

Static task

static1

hacked by ; wswsh.office04 hacked rat null test conexion njrat quasar xworm asyncrat dcrat stormkitty 44caliber xenorat

15 signatures

Behavioral task

behavioral1

Sample

820e99e0735f8d9d1de08e386589c506.exe

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

820e99e0735f8d9d1de08e386589c506.exe

Resource

win10v2004-20250314-en

discovery

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral3

Sample

82159a5146f475b4ae5350327fdc1abd.exe

Resource

win7-20240903-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

82159a5146f475b4ae5350327fdc1abd.exe

Resource

win10v2004-20250314-en

discovery

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral5

Sample

822a16f7ff868ecf1ac2602e4b40e7c0.exe

Resource

win7-20241010-en

njrat hacked by ; wswsh.defense_evasion discovery persistence privilege_escalation trojan

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral6

Sample

822a16f7ff868ecf1ac2602e4b40e7c0.exe

Resource

win10v2004-20250314-en

njrat defense_evasion discovery persistence privilege_escalation trojan

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral7

Sample

8242f8a80325df8bb3e826fd03cf2d8ba7595d26428d7594f15b2cec819013ff.exe

Resource

win7-20240903-en

quasar office04 spyware trojan

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral8

Sample

8242f8a80325df8bb3e826fd03cf2d8ba7595d26428d7594f15b2cec819013ff.exe

Resource

win10v2004-20250314-en

quasar office04 spyware trojan

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral9

Sample

825b5bf7809427781ab9eefb0f139255.exe

Resource

win7-20240903-en

xworm persistence rat trojan

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral10

Sample

825b5bf7809427781ab9eefb0f139255.exe

Resource

win10v2004-20250314-en

xworm persistence rat trojan

windows10-2004-x64

14 signatures

150 seconds

Behavioral task

behavioral11

Sample

825cbe9334005aa8e6a90be34a4d583e.exe

Resource

win7-20240903-en

discovery persistence

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral12

Sample

825cbe9334005aa8e6a90be34a4d583e.exe

Resource

win10v2004-20250314-en

discovery persistence

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral13

Sample

828b11fa8d8c85c08db7353be46e7ebb.exe

Resource

win7-20241010-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

828b11fa8d8c85c08db7353be46e7ebb.exe

Resource

win10v2004-20250314-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

82a9dfe7288184b982ebc2d37e82aaab.exe

Resource

win7-20240903-en

asyncrat null rat

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

82a9dfe7288184b982ebc2d37e82aaab.exe

Resource

win10v2004-20250314-en

asyncrat null rat

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

82aff6a3f0ad4533029392f48502a7e2.exe

Resource

win7-20240903-en

defense_evasion execution trojan

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral18

Sample

82aff6a3f0ad4533029392f48502a7e2.exe

Resource

win10v2004-20250314-en

defense_evasion execution trojan

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral19

Sample

82dc0c2f48327b7dad22ea176fcf9e6b8dfcd5de417b762bd41d38ca4d50e404.exe

Resource

win7-20241023-en

defense_evasion execution trojan

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral20

Sample

82dc0c2f48327b7dad22ea176fcf9e6b8dfcd5de417b762bd41d38ca4d50e404.exe

Resource

win10v2004-20250314-en

defense_evasion execution trojan

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral21

Sample

82eb00f02e7f035adb6a08912ec1b957.exe

Resource

win7-20240903-en

njrat hacked defense_evasion discovery persistence privilege_escalation trojan

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral22

Sample

82eb00f02e7f035adb6a08912ec1b957.exe

Resource

win10v2004-20250314-en

njrat defense_evasion discovery persistence privilege_escalation trojan

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral23

Sample

82fdd73396f0e932123186cd1418e8eaad1577fa9cd9293b0429fb35e05deeed.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

82fdd73396f0e932123186cd1418e8eaad1577fa9cd9293b0429fb35e05deeed.exe

Resource

win10v2004-20250314-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

832a48a191a3e98e1914659c9a2c9098e73dd164c4e84d97899a6051a6515f90.exe

Resource

win7-20240903-en

dcrat execution infostealer rat

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral26

Sample

832a48a191a3e98e1914659c9a2c9098e73dd164c4e84d97899a6051a6515f90.exe

Resource

win10v2004-20250314-en

dcrat execution infostealer rat

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral27

Sample

833949a7ffdc7975f7e894f152e0289e6d3b1131b56c9180bb9fe772780efc98.exe

Resource

win7-20250207-en

redline nou discovery infostealer spyware stealer

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral28

Sample

833949a7ffdc7975f7e894f152e0289e6d3b1131b56c9180bb9fe772780efc98.exe

Resource

win10v2004-20250314-en

redline nou discovery infostealer spyware stealer

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral29

Sample

833aad3410b30a9ec5214be9fe616e327c813883502cfa1a0b597de784106c1f.exe

Resource

win7-20241010-en

defense_evasion discovery

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral30

Sample

833aad3410b30a9ec5214be9fe616e327c813883502cfa1a0b597de784106c1f.exe

Resource

win10v2004-20250314-en

defense_evasion discovery persistence privilege_escalation

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral31

Sample

834458e6efa75273db3e9a2c5c4c3293.exe

Resource

win7-20241010-en

discovery persistence

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral32

Sample

834458e6efa75273db3e9a2c5c4c3293.exe

Resource

win10v2004-20250314-en

collection credential_access discovery persistence spyware stealer

windows10-2004-x64

19 signatures

150 seconds

Report Analysis Logs

General

Target

82fdd73396f0e932123186cd1418e8eaad1577fa9cd9293b0429fb35e05deeed.exe
Size

310KB
MD5

fda658b8af52e8d695000bb4636cafd8
SHA1

b2012c5533925bcf9e6ef9b041498f3560b3cb42
SHA256

82fdd73396f0e932123186cd1418e8eaad1577fa9cd9293b0429fb35e05deeed
SHA512

e8e6b870731cac09548cc42742290df0d468fe339a2817cbe2fa23c4ec3d47db4b236c1a8d3509a51972131a6be464e00760e0c3404ecb0acbf005dad54a9f0b
SSDEEP

6144:0NdMUDnvp1i+pLVzGe6VlWT8b9j8Cvn/Rk7IbUQ2lK:0dMUDnvXDBFGPVle8iy5

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\82fdd73396f0e932123186cd1418e8eaad1577fa9cd9293b0429fb35e05deeed.exe
"C:\Users\Admin\AppData\Local\Temp\82fdd73396f0e932123186cd1418e8eaad1577fa9cd9293b0429fb35e05deeed.exe"
1⤵
PID:2640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2640-0-0x000007FEF6363000-0x000007FEF6364000-memory.dmp

Filesize
4KB

Download
memory/2640-1-0x0000000000B00000-0x0000000000B54000-memory.dmp

Filesize
336KB

Download