805c5709be7589073f6c90410ba05d8d4240ba487fe7c8febf2de9ba214a489e

Submit
Reports

Overview

overview

Static

static

94975fe621...cd.exe

windows7-x64

94975fe621...cd.exe

windows10-2004-x64

94c020786b...1d.exe

windows7-x64

94c020786b...1d.exe

windows10-2004-x64

94c7c87a82...20.exe

windows7-x64

94c7c87a82...20.exe

windows10-2004-x64

94dd618932...a1.exe

windows7-x64

94dd618932...a1.exe

windows10-2004-x64

94e2ada20e...f6.exe

windows7-x64

94e2ada20e...f6.exe

windows10-2004-x64

952e0a7f82...33.exe

windows7-x64

952e0a7f82...33.exe

windows10-2004-x64

953e99960b...40.exe

windows7-x64

953e99960b...40.exe

windows10-2004-x64

9576cc7c1d...3f.exe

windows7-x64

9576cc7c1d...3f.exe

windows10-2004-x64

959c2d37a1...19.exe

windows7-x64

959c2d37a1...19.exe

windows10-2004-x64

95cc71e95c...eb.exe

windows7-x64

95cc71e95c...eb.exe

windows10-2004-x64

95fc2287fc...2c.exe

windows7-x64

95fc2287fc...2c.exe

windows10-2004-x64

960c033d30...04.exe

windows7-x64

960c033d30...04.exe

windows10-2004-x64

96591b5749...ff.exe

windows7-x64

96591b5749...ff.exe

windows10-2004-x64

9695505ced...e7.exe

windows7-x64

9695505ced...e7.exe

windows10-2004-x64

96959cb142...76.exe

windows7-x64

96959cb142...76.exe

windows10-2004-x64

96985d97b0...da.exe

windows7-x64

96985d97b0...da.exe

windows10-2004-x64

Analysis

max time kernel
102s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20250314-en
resource tags

arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
submitted
22/03/2025, 06:14

Sharing

Copy URL

Twitter E-mail

Static task

static1

8 signatures

Behavioral task

behavioral1

Sample

94975fe621437bc551de379ca5db04f88554915fa00e95a8595116a5e91d35cd.exe

Resource

win7-20240903-en

collection credential_access discovery persistence spyware stealer

windows7-x64

19 signatures

150 seconds

Behavioral task

behavioral2

Sample

94975fe621437bc551de379ca5db04f88554915fa00e95a8595116a5e91d35cd.exe

Resource

win10v2004-20250314-en

collection credential_access discovery persistence spyware stealer

windows10-2004-x64

19 signatures

150 seconds

Behavioral task

behavioral3

Sample

94c020786bf74ea45e95666a68b1d21d.exe

Resource

win7-20240903-en

collection credential_access discovery persistence spyware stealer

windows7-x64

19 signatures

150 seconds

Behavioral task

behavioral4

Sample

94c020786bf74ea45e95666a68b1d21d.exe

Resource

win10v2004-20250314-en

collection credential_access discovery persistence spyware stealer

windows10-2004-x64

19 signatures

150 seconds

Behavioral task

behavioral5

Sample

94c7c87a82c5b86f793f2553cc5a6c20.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

94c7c87a82c5b86f793f2553cc5a6c20.exe

Resource

win10v2004-20250314-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

94dd6189328a24ea86b9726e0ff01aba18c8b2d13cdd59dcdedf9ae19b9700a1.exe

Resource

win7-20240903-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

94dd6189328a24ea86b9726e0ff01aba18c8b2d13cdd59dcdedf9ae19b9700a1.exe

Resource

win10v2004-20250314-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

94e2ada20e21670b71abcc87c81ea0f6.exe

Resource

win7-20240903-en

remcos host discovery persistence rat

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral10

Sample

94e2ada20e21670b71abcc87c81ea0f6.exe

Resource

win10v2004-20250314-en

discovery persistence

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral11

Sample

952e0a7f82d06cd737223c4fe0c0d133.exe

Resource

win7-20240729-en

discovery persistence

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral12

Sample

952e0a7f82d06cd737223c4fe0c0d133.exe

Resource

win10v2004-20250314-en

discovery persistence

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral13

Sample

953e99960b6bb27c1953eb4c62949b32b63482f7f5613bf53ae7751bb9678140.exe

Resource

win7-20240903-en

remcos host discovery persistence rat spyware stealer

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral14

Sample

953e99960b6bb27c1953eb4c62949b32b63482f7f5613bf53ae7751bb9678140.exe

Resource

win10v2004-20250314-en

remcos host discovery persistence rat spyware stealer

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral15

Sample

9576cc7c1d016017905b260b127b983f.exe

Resource

win7-20250207-en

defense_evasion execution trojan

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral16

Sample

9576cc7c1d016017905b260b127b983f.exe

Resource

win10v2004-20250314-en

defense_evasion execution trojan

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral17

Sample

959c2d37a1e94337957c5323aab9bf19.exe

Resource

win7-20240903-en

metamorpherrat discovery persistence rat stealer trojan

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral18

Sample

959c2d37a1e94337957c5323aab9bf19.exe

Resource

win10v2004-20250314-en

metamorpherrat discovery persistence rat stealer trojan

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral19

Sample

95cc71e95ccf96ee404de6261589d09ec40cc8e5536356806e23b2b8ba21fdeb.exe

Resource

win7-20240903-en

umbral stealer

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral20

Sample

95cc71e95ccf96ee404de6261589d09ec40cc8e5536356806e23b2b8ba21fdeb.exe

Resource

win10v2004-20250314-en

umbral stealer

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral21

Sample

95fc2287fc4fea75666b56cfd668d72c.exe

Resource

win7-20240903-en

xred backdoor collection discovery execution macro persistence spyware stealer

windows7-x64

23 signatures

150 seconds

Behavioral task

behavioral22

Sample

95fc2287fc4fea75666b56cfd668d72c.exe

Resource

win10v2004-20250314-en

xred backdoor collection discovery execution macro persistence spyware stealer

windows10-2004-x64

25 signatures

150 seconds

Behavioral task

behavioral23

Sample

960c033d3033f9058766fe5f229e94401874404c1df50c73856346dc7141a104.exe

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

960c033d3033f9058766fe5f229e94401874404c1df50c73856346dc7141a104.exe

Resource

win10v2004-20250314-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

96591b574924a1846cfccfedd4cfd584f84e920dc06b5ce05a581a8a067c79ff.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

96591b574924a1846cfccfedd4cfd584f84e920dc06b5ce05a581a8a067c79ff.exe

Resource

win10v2004-20250314-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

9695505ced3961f59e27022cd01b53f6a05fd1dc98c77f3f4d4b1c16aa72b8e7.exe

Resource

win7-20241023-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

9695505ced3961f59e27022cd01b53f6a05fd1dc98c77f3f4d4b1c16aa72b8e7.exe

Resource

win10v2004-20250313-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

96959cb1423fd801a2e3d718868a3776.exe

Resource

win7-20241010-en

metamorpherrat discovery persistence rat stealer trojan

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral30

Sample

96959cb1423fd801a2e3d718868a3776.exe

Resource

win10v2004-20250314-en

metamorpherrat discovery persistence rat stealer trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral31

Sample

96985d97b017d4c59db75bdbab49f82d464e90407987be456b1b0ba7f1b748da.exe

Resource

win7-20241010-en

persistence privilege_escalation

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral32

Sample

96985d97b017d4c59db75bdbab49f82d464e90407987be456b1b0ba7f1b748da.exe

Resource

win10v2004-20250314-en

persistence privilege_escalation

windows10-2004-x64

8 signatures

150 seconds

Report Analysis Logs

General

Target

96591b574924a1846cfccfedd4cfd584f84e920dc06b5ce05a581a8a067c79ff.exe
Size

563KB
MD5

d7302b3ada27634117855bf070469296
SHA1

7cc8efa13fdbbbf43ab2bc52bfff8c0d0fea4d43
SHA256

96591b574924a1846cfccfedd4cfd584f84e920dc06b5ce05a581a8a067c79ff
SHA512

ea2e014cbcbabb219988a1ffe0495d0df6e5e6675786e2e79180abb3c4cfe9c3acf1dfb9219a82fd4a019ccf98fd718d4b225158ea212c4c92de5642ec9e84fd
SSDEEP

6144:uNHtA5qe9h6DSdvse6VlWT8b9PpQ+yr6gNHVgSj0srV7bw4vpuWDQz:u3+kWvsPVle8RpQ/JWSQ6XQz

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\96591b574924a1846cfccfedd4cfd584f84e920dc06b5ce05a581a8a067c79ff.exe
"C:\Users\Admin\AppData\Local\Temp\96591b574924a1846cfccfedd4cfd584f84e920dc06b5ce05a581a8a067c79ff.exe"
1⤵
PID:2248

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2248-0-0x00007FFB95413000-0x00007FFB95415000-memory.dmp

Filesize
8KB

Download
memory/2248-1-0x0000000000460000-0x00000000004F2000-memory.dmp

Filesize
584KB

Download