000996e02592d6f5216a77464baff2591739b5cb35a8ad930a5424c9099c7e11

Submit
Reports

Overview

overview

Static

static

0ce8e2125c...fa.exe

windows7-x64

0ce8e2125c...fa.exe

windows10-2004-x64

0d08fd5994...a1.exe

windows7-x64

0d08fd5994...a1.exe

windows10-2004-x64

0d39a7ade0...a9.exe

windows7-x64

0d39a7ade0...a9.exe

windows10-2004-x64

0d7cbc8822...d3.exe

windows7-x64

0d7cbc8822...d3.exe

windows10-2004-x64

0da351d641...30.exe

windows7-x64

0da351d641...30.exe

windows10-2004-x64

0dcb9d68dd...81.exe

windows7-x64

0dcb9d68dd...81.exe

windows10-2004-x64

0de35a9720...08.exe

windows7-x64

0de35a9720...08.exe

windows10-2004-x64

0df2367bf9...81.exe

windows7-x64

0df2367bf9...81.exe

windows10-2004-x64

0df7144ed5...52.exe

windows7-x64

0df7144ed5...52.exe

windows10-2004-x64

0df97b99ca...e3.exe

windows7-x64

0df97b99ca...e3.exe

windows10-2004-x64

0e48a47f40...30.exe

windows7-x64

0e48a47f40...30.exe

windows10-2004-x64

0e820aad5e...54.exe

windows7-x64

0e820aad5e...54.exe

windows10-2004-x64

0ea0e36c70...d3.exe

windows7-x64

0ea0e36c70...d3.exe

windows10-2004-x64

0eb27c6385...3a.exe

windows7-x64

0eb27c6385...3a.exe

windows10-2004-x64

0ee8580c3e...ef.exe

windows7-x64

0ee8580c3e...ef.exe

windows10-2004-x64

0eed307263...f5.exe

windows7-x64

0eed307263...f5.exe

windows10-2004-x64

Analysis

max time kernel
118s
max time network
124s
platform
windows7_x64
resource
win7-20241023-en
resource tags

arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
submitted
22/03/2025, 06:33

Sharing

Copy URL

Twitter E-mail

Static task

static1

rat https://uloz.to/lime hacked dcrat xworm vulturi njrat

8 signatures

Behavioral task

behavioral1

Sample

0ce8e2125cf9b2549eeb18b14754aa2158878fc9eabcde0f54d75556492048fa.exe

Resource

win7-20240903-en

discovery persistence privilege_escalation spyware stealer

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

0ce8e2125cf9b2549eeb18b14754aa2158878fc9eabcde0f54d75556492048fa.exe

Resource

win10v2004-20250314-en

credential_access discovery persistence privilege_escalation spyware stealer

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral3

Sample

0d08fd5994f0570ef78ba20f575849b2e9c9eb01aeb29c0cd7b5c534552870a1.exe

Resource

win7-20240903-en

dcrat execution infostealer rat

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral4

Sample

0d08fd5994f0570ef78ba20f575849b2e9c9eb01aeb29c0cd7b5c534552870a1.exe

Resource

win10v2004-20250313-en

dcrat execution infostealer rat

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral5

Sample

0d39a7ade0eaa19a185fc11508caeba9.exe

Resource

win7-20240903-en

dcrat infostealer persistence rat

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral6

Sample

0d39a7ade0eaa19a185fc11508caeba9.exe

Resource

win10v2004-20250314-en

dcrat infostealer persistence rat

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral7

Sample

0d7cbc882298f639d31191a03ec81bd3.exe

Resource

win7-20241010-en

defense_evasion execution trojan

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral8

Sample

0d7cbc882298f639d31191a03ec81bd3.exe

Resource

win10v2004-20250314-en

defense_evasion execution trojan

windows10-2004-x64

18 signatures

150 seconds

Behavioral task

behavioral9

Sample

0da351d641066e6d8ebb95e8bcb6e030.exe

Resource

win7-20240729-en

nanocore defense_evasion discovery keylogger persistence spyware stealer trojan

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral10

Sample

0da351d641066e6d8ebb95e8bcb6e030.exe

Resource

win10v2004-20250314-en

nanocore defense_evasion discovery keylogger persistence spyware stealer trojan

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral11

Sample

0dcb9d68dd68eefabbec3c03cc3e8381.exe

Resource

win7-20240903-en

xworm execution persistence rat trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral12

Sample

0dcb9d68dd68eefabbec3c03cc3e8381.exe

Resource

win10v2004-20250314-en

xworm execution persistence rat trojan

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral13

Sample

0de35a97204bf9ccbe98450bbae38fe0e7c92d608328b2e600bf5484b0a3b908.exe

Resource

win7-20240903-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

0de35a97204bf9ccbe98450bbae38fe0e7c92d608328b2e600bf5484b0a3b908.exe

Resource

win10v2004-20250314-en

discovery

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral15

Sample

0df2367bf99523e1510e59310538d736cd3b125dcf0d76a09644fe7c65402f81.exe

Resource

win7-20240903-en

nanocore defense_evasion discovery keylogger persistence spyware stealer trojan

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral16

Sample

0df2367bf99523e1510e59310538d736cd3b125dcf0d76a09644fe7c65402f81.exe

Resource

win10v2004-20250314-en

discovery persistence

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral17

Sample

0df7144ed5104422c08fe0b6de1e2452.exe

Resource

win7-20241010-en

redline reallog discovery execution infostealer spyware stealer

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral18

Sample

0df7144ed5104422c08fe0b6de1e2452.exe

Resource

win10v2004-20250314-en

redline reallog discovery execution infostealer spyware stealer

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral19

Sample

0df97b99ca90dd92e313196ed212ed8bb7931ed5ff381a3dbce0e0479f820ae3.exe

Resource

win7-20241023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

0df97b99ca90dd92e313196ed212ed8bb7931ed5ff381a3dbce0e0479f820ae3.exe

Resource

win10v2004-20250313-en

discovery

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral21

Sample

0e48a47f400685a0d5ded8ad220d8f30.exe

Resource

win7-20240903-en

dcrat defense_evasion execution infostealer rat trojan

windows7-x64

18 signatures

150 seconds

Behavioral task

behavioral22

Sample

0e48a47f400685a0d5ded8ad220d8f30.exe

Resource

win10v2004-20250314-en

dcrat defense_evasion execution infostealer rat trojan

windows10-2004-x64

20 signatures

150 seconds

Behavioral task

behavioral23

Sample

0e820aad5e8af67e2f996c9261b1b8c500e26eab8fd99d9ec67dfecceb43aa54.exe

Resource

win7-20250207-en

vulturi stealer

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral24

Sample

0e820aad5e8af67e2f996c9261b1b8c500e26eab8fd99d9ec67dfecceb43aa54.exe

Resource

win10v2004-20250314-en

vulturi stealer

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

0ea0e36c7047f7b2bf48101f2d9f62467b4bbf3749386f53ed607061ad0f0ed3.exe

Resource

win7-20241010-en

dcrat infostealer rat

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

0ea0e36c7047f7b2bf48101f2d9f62467b4bbf3749386f53ed607061ad0f0ed3.exe

Resource

win10v2004-20250314-en

dcrat infostealer rat

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

0eb27c638574f831cab876ce13b9043a.exe

Resource

win7-20240903-en

njrat https://uloz.to/defense_evasion discovery persistence privilege_escalation trojan

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral28

Sample

0eb27c638574f831cab876ce13b9043a.exe

Resource

win10v2004-20250314-en

njrat defense_evasion discovery persistence privilege_escalation trojan

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral29

Sample

0ee8580c3e8ccbefcf4d8b060189dd2dadfdb559b420c4a732270d7303fae6ef.exe

Resource

win7-20240903-en

dcrat execution infostealer rat

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral30

Sample

0ee8580c3e8ccbefcf4d8b060189dd2dadfdb559b420c4a732270d7303fae6ef.exe

Resource

win10v2004-20250314-en

dcrat execution infostealer rat

windows10-2004-x64

14 signatures

150 seconds

Behavioral task

behavioral31

Sample

0eed30726330520f68b4bec97e71989bc143e8755d0b918d2add30a15ce848f5.exe

Resource

win7-20240903-en

collection credential_access discovery persistence spyware stealer

windows7-x64

19 signatures

150 seconds

Behavioral task

behavioral32

Sample

0eed30726330520f68b4bec97e71989bc143e8755d0b918d2add30a15ce848f5.exe

Resource

win10v2004-20250314-en

collection credential_access discovery persistence spyware stealer

windows10-2004-x64

19 signatures

150 seconds

Report Analysis Logs

General

Target

0df97b99ca90dd92e313196ed212ed8bb7931ed5ff381a3dbce0e0479f820ae3.exe
Size

32KB
MD5

24ac76c507c08cf66d5cd099a4f7a4d8
SHA1

55a327b3070cacb24f40ce9345da31ac7f130517
SHA256

0df97b99ca90dd92e313196ed212ed8bb7931ed5ff381a3dbce0e0479f820ae3
SHA512

61b897e211b50c1e7d225abd53af1f438052bdd5dead0549193a516f53025a1026ba1bb90b2d2f965a9a69b0efe848616cb9258c01a4ba536ba4f8c49f3efc81
SSDEEP

384:DTOnlqWJCo8BKsVv6GlWdWthCwClnc9ni2WOvYGcFHr+85/RfDH4e5mpaQEh5eEj:WnCBBKs0GcUUlcVBWOvYvbL/0Ebllcw

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\0df97b99ca90dd92e313196ed212ed8bb7931ed5ff381a3dbce0e0479f820ae3.exe
"C:\Users\Admin\AppData\Local\Temp\0df97b99ca90dd92e313196ed212ed8bb7931ed5ff381a3dbce0e0479f820ae3.exe"
1⤵
PID:2800

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads