13998cf5ce3fc1b1fb20635ef2c1e476c880d72eec7afb7e8ec74808928700da

Submit
Reports

Overview

overview

Static

static

a6b7e1f8d9...13.exe

windows7-x64

a6b7e1f8d9...13.exe

windows10-2004-x64

a6d91e550d...6e.exe

windows7-x64

a6d91e550d...6e.exe

windows10-2004-x64

a72cdbd8e2...ad.exe

windows7-x64

a72cdbd8e2...ad.exe

windows10-2004-x64

a731427f52...04.exe

windows7-x64

a731427f52...04.exe

windows10-2004-x64

a73951d873...67.exe

windows7-x64

a73951d873...67.exe

windows10-2004-x64

a74be4d5e7...73.exe

windows7-x64

a74be4d5e7...73.exe

windows10-2004-x64

a77ff4e4dd...87.exe

windows7-x64

a77ff4e4dd...87.exe

windows10-2004-x64

a799e456ff...88.exe

windows7-x64

a799e456ff...88.exe

windows10-2004-x64

a7c49036eb...95.exe

windows7-x64

a7c49036eb...95.exe

windows10-2004-x64

a7d8553ba6...a8.exe

windows7-x64

a7d8553ba6...a8.exe

windows10-2004-x64

a7e953c880...28.exe

windows7-x64

a7e953c880...28.exe

windows10-2004-x64

a7ead69ceb...a3.exe

windows7-x64

a7ead69ceb...a3.exe

windows10-2004-x64

a7ec6d64b2...db.exe

windows7-x64

a7ec6d64b2...db.exe

windows10-2004-x64

a7fd5ae1f0...f8.exe

windows7-x64

a7fd5ae1f0...f8.exe

windows10-2004-x64

a884e586e0...e0.exe

windows7-x64

a884e586e0...e0.exe

windows10-2004-x64

a8b0399c70...33.exe

windows7-x64

a8b0399c70...33.exe

windows10-2004-x64

Analysis

max time kernel
103s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20250314-en
resource tags

arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
submitted
22/03/2025, 06:15

Sharing

Copy URL

Twitter E-mail

Static task

static1

8 signatures

Behavioral task

behavioral1

Sample

a6b7e1f8d965ec053cbb870a443d5513.exe

Resource

win7-20241010-en

njrat hacked defense_evasion discovery persistence privilege_escalation trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

a6b7e1f8d965ec053cbb870a443d5513.exe

Resource

win10v2004-20250314-en

njrat defense_evasion discovery persistence privilege_escalation trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral3

Sample

a6d91e550d33f9f64c5e292e47013b055f721bbc1865d3bfa5d89fe7f840586e.exe

Resource

win7-20241023-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral4

Sample

a6d91e550d33f9f64c5e292e47013b055f721bbc1865d3bfa5d89fe7f840586e.exe

Resource

win10v2004-20250314-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral5

Sample

a72cdbd8e2e58d49bac3da8f517b97ee8262cc6d54e21eadfacbf1df504a26ad.exe

Resource

win7-20250207-en

xworm persistence rat trojan

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral6

Sample

a72cdbd8e2e58d49bac3da8f517b97ee8262cc6d54e21eadfacbf1df504a26ad.exe

Resource

win10v2004-20250314-en

xworm persistence rat trojan

windows10-2004-x64

14 signatures

150 seconds

Behavioral task

behavioral7

Sample

a731427f52bd2af065c7544d7f9ea804.exe

Resource

win7-20240903-en

discovery

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral8

Sample

a731427f52bd2af065c7544d7f9ea804.exe

Resource

win10v2004-20250314-en

discovery

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral9

Sample

a73951d8730beba8a769c882801bd767.exe

Resource

win7-20241023-en

dcrat execution infostealer rat

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral10

Sample

a73951d8730beba8a769c882801bd767.exe

Resource

win10v2004-20250314-en

dcrat execution infostealer rat

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral11

Sample

a74be4d5e7b154091b38338a6ac94973.exe

Resource

win7-20240903-en

collection credential_access discovery persistence spyware stealer

windows7-x64

19 signatures

150 seconds

Behavioral task

behavioral12

Sample

a74be4d5e7b154091b38338a6ac94973.exe

Resource

win10v2004-20250314-en

collection credential_access discovery persistence spyware stealer

windows10-2004-x64

19 signatures

150 seconds

Behavioral task

behavioral13

Sample

a77ff4e4dd651e4c89e2297a2a321987.exe

Resource

win7-20240903-en

dcrat infostealer rat

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral14

Sample

a77ff4e4dd651e4c89e2297a2a321987.exe

Resource

win10v2004-20250314-en

dcrat infostealer rat

windows10-2004-x64

14 signatures

150 seconds

Behavioral task

behavioral15

Sample

a799e456ff773d61953389e7fb322b88.exe

Resource

win7-20241010-en

xred backdoor collection discovery execution macro persistence spyware stealer

windows7-x64

23 signatures

150 seconds

Behavioral task

behavioral16

Sample

a799e456ff773d61953389e7fb322b88.exe

Resource

win10v2004-20250314-en

xred backdoor collection discovery execution macro persistence spyware stealer

windows10-2004-x64

25 signatures

150 seconds

Behavioral task

behavioral17

Sample

a7c49036ebf4784cc999d947c3350d466e1d4776671e2ce6bfa37c00013baf95.exe

Resource

win7-20240903-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

a7c49036ebf4784cc999d947c3350d466e1d4776671e2ce6bfa37c00013baf95.exe

Resource

win10v2004-20250314-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

a7d8553ba6cb9193a197904239af5d2e7bc4c7015dce62660400968e54d94ba8.exe

Resource

win7-20240903-en

discovery execution spyware stealer

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral20

Sample

a7d8553ba6cb9193a197904239af5d2e7bc4c7015dce62660400968e54d94ba8.exe

Resource

win10v2004-20250314-en

discovery execution spyware stealer

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral21

Sample

a7e953c8807b21e5a5db9757e01e27e8018901c36cd81ef12cbda5712ad1c528.exe

Resource

win7-20240903-en

xworm rat trojan

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral22

Sample

a7e953c8807b21e5a5db9757e01e27e8018901c36cd81ef12cbda5712ad1c528.exe

Resource

win10v2004-20250314-en

xworm rat trojan

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral23

Sample

a7ead69cebb4805f528bc566a9b4eea3.exe

Resource

win7-20250207-en

defense_evasion discovery

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral24

Sample

a7ead69cebb4805f528bc566a9b4eea3.exe

Resource

win10v2004-20250314-en

defense_evasion discovery

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral25

Sample

a7ec6d64b26a76d441ffbded59fdbfa4d8e54782f5d03cc03e436d444de883db.exe

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

a7ec6d64b26a76d441ffbded59fdbfa4d8e54782f5d03cc03e436d444de883db.exe

Resource

win10v2004-20250314-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

a7fd5ae1f0d16e9069ca216d2f21ccf8.exe

Resource

win7-20240903-en

dcrat defense_evasion execution infostealer rat trojan

windows7-x64

18 signatures

150 seconds

Behavioral task

behavioral28

Sample

a7fd5ae1f0d16e9069ca216d2f21ccf8.exe

Resource

win10v2004-20250314-en

dcrat defense_evasion execution infostealer rat trojan

windows10-2004-x64

20 signatures

150 seconds

Behavioral task

behavioral29

Sample

a884e586e04d1b213ef1db19e0226a0503109862aa3072c6ace8660c6a3f46e0.exe

Resource

win7-20240729-en

defense_evasion execution trojan

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral30

Sample

a884e586e04d1b213ef1db19e0226a0503109862aa3072c6ace8660c6a3f46e0.exe

Resource

win10v2004-20250314-en

defense_evasion execution trojan

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral31

Sample

a8b0399c704553c85dfd0ab584536333.exe

Resource

win7-20240903-en

defense_evasion execution trojan

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral32

Sample

a8b0399c704553c85dfd0ab584536333.exe

Resource

win10v2004-20250314-en

defense_evasion execution trojan

windows10-2004-x64

17 signatures

150 seconds

Report Analysis Logs

General

Target

a7ec6d64b26a76d441ffbded59fdbfa4d8e54782f5d03cc03e436d444de883db.exe
Size

381KB
MD5

24b29f0a383fafd25288ef3d020eafd6
SHA1

32af6aab8f84ae121e978df37bff8c3380be2336
SHA256

a7ec6d64b26a76d441ffbded59fdbfa4d8e54782f5d03cc03e436d444de883db
SHA512

f5aa7c54a07e77f43020e0d0055e332ac4b62153870da351e14dc59caa924ec43648145044f4a75f4203f44acb585f921690b14f643f21e1266b78b212476f11
SSDEEP

6144:4I4pbvEMUJe6VlWT8b9f9Vm/b1PnjKb6P4jfqA:4IRHJPVle8C5PPo

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\a7ec6d64b26a76d441ffbded59fdbfa4d8e54782f5d03cc03e436d444de883db.exe
"C:\Users\Admin\AppData\Local\Temp\a7ec6d64b26a76d441ffbded59fdbfa4d8e54782f5d03cc03e436d444de883db.exe"
1⤵
PID:5196

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5196-1-0x0000000000300000-0x0000000000366000-memory.dmp

Filesize
408KB

Download
memory/5196-0-0x00007FFA6A0F3000-0x00007FFA6A0F5000-memory.dmp

Filesize
8KB

Download