Overview
overview
10Static
static
3SecuriteIn...26.exe
windows10-2004-x64
10SecuriteIn...26.exe
windows11-21h2-x64
10$TEMP/Dominant.xlm
windows10-2004-x64
1$TEMP/Dominant.xlm
windows11-21h2-x64
1$TEMP/Sql.xlm
windows10-2004-x64
1$TEMP/Sql.xlm
windows11-21h2-x64
1$TEMP/Visitor.xlm
windows10-2004-x64
1$TEMP/Visitor.xlm
windows11-21h2-x64
1CurrentlyC...nt.xlm
windows10-2004-x64
1CurrentlyC...nt.xlm
windows11-21h2-x64
1CurrentlyC...al.xlm
windows10-2004-x64
1CurrentlyC...al.xlm
windows11-21h2-x64
1CurrentlyC...Bd.xlm
windows10-2004-x64
1CurrentlyC...Bd.xlm
windows11-21h2-x64
1CurrentlyC...an.xlm
windows10-2004-x64
1CurrentlyC...an.xlm
windows11-21h2-x64
1CurrentlyC...re.xlm
windows10-2004-x64
1CurrentlyC...re.xlm
windows11-21h2-x64
1CurrentlyC...es.xlm
windows10-2004-x64
1CurrentlyC...es.xlm
windows11-21h2-x64
1CurrentlyC...er.xlm
windows10-2004-x64
1CurrentlyC...er.xlm
windows11-21h2-x64
1CurrentlyC...in.xlm
windows10-2004-x64
1CurrentlyC...in.xlm
windows11-21h2-x64
1CurrentlyC...Im.xlm
windows10-2004-x64
1CurrentlyC...Im.xlm
windows11-21h2-x64
1CurrentlyC...en.xlm
windows10-2004-x64
1CurrentlyC...en.xlm
windows11-21h2-x64
1CurrentlyC...rs.xlm
windows10-2004-x64
1CurrentlyC...rs.xlm
windows11-21h2-x64
1CurrentlyC...sn.xlm
windows10-2004-x64
1CurrentlyC...sn.xlm
windows11-21h2-x64
1Analysis
-
max time kernel
0s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system -
submitted
20/04/2025, 13:32
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.MulDrop30.46617.18825.26126.exe
Resource
win10v2004-20250410-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.MulDrop30.46617.18825.26126.exe
Resource
win11-20250410-en
Behavioral task
behavioral3
Sample
$TEMP/Dominant.xlm
Resource
win10v2004-20250410-en
Behavioral task
behavioral4
Sample
$TEMP/Dominant.xlm
Resource
win11-20250410-en
Behavioral task
behavioral5
Sample
$TEMP/Sql.xlm
Resource
win10v2004-20250313-en
Behavioral task
behavioral6
Sample
$TEMP/Sql.xlm
Resource
win11-20250410-en
Behavioral task
behavioral7
Sample
$TEMP/Visitor.xlm
Resource
win10v2004-20250314-en
Behavioral task
behavioral8
Sample
$TEMP/Visitor.xlm
Resource
win11-20250410-en
Behavioral task
behavioral9
Sample
CurrentlyCabinets/Amendment.xlm
Resource
win10v2004-20250314-en
Behavioral task
behavioral10
Sample
CurrentlyCabinets/Amendment.xlm
Resource
win11-20250410-en
Behavioral task
behavioral11
Sample
CurrentlyCabinets/Arrival.xlm
Resource
win10v2004-20250410-en
Behavioral task
behavioral12
Sample
CurrentlyCabinets/Arrival.xlm
Resource
win11-20250411-en
Behavioral task
behavioral13
Sample
CurrentlyCabinets/Bd.xlm
Resource
win10v2004-20250314-en
Behavioral task
behavioral14
Sample
CurrentlyCabinets/Bd.xlm
Resource
win11-20250410-en
Behavioral task
behavioral15
Sample
CurrentlyCabinets/Began.xlm
Resource
win10v2004-20250314-en
Behavioral task
behavioral16
Sample
CurrentlyCabinets/Began.xlm
Resource
win11-20250411-en
Behavioral task
behavioral17
Sample
CurrentlyCabinets/Centre.xlm
Resource
win10v2004-20250410-en
Behavioral task
behavioral18
Sample
CurrentlyCabinets/Centre.xlm
Resource
win11-20250410-en
Behavioral task
behavioral19
Sample
CurrentlyCabinets/Creatures.xlm
Resource
win10v2004-20250410-en
Behavioral task
behavioral20
Sample
CurrentlyCabinets/Creatures.xlm
Resource
win11-20250410-en
Behavioral task
behavioral21
Sample
CurrentlyCabinets/Discover.xlm
Resource
win10v2004-20250314-en
Behavioral task
behavioral22
Sample
CurrentlyCabinets/Discover.xlm
Resource
win11-20250410-en
Behavioral task
behavioral23
Sample
CurrentlyCabinets/Domain.xlm
Resource
win10v2004-20250410-en
Behavioral task
behavioral24
Sample
CurrentlyCabinets/Domain.xlm
Resource
win11-20250410-en
Behavioral task
behavioral25
Sample
CurrentlyCabinets/Im.xlm
Resource
win10v2004-20250314-en
Behavioral task
behavioral26
Sample
CurrentlyCabinets/Im.xlm
Resource
win11-20250410-en
Behavioral task
behavioral27
Sample
CurrentlyCabinets/Listen.xlm
Resource
win10v2004-20250314-en
Behavioral task
behavioral28
Sample
CurrentlyCabinets/Listen.xlm
Resource
win11-20250410-en
Behavioral task
behavioral29
Sample
CurrentlyCabinets/Moderators.xlm
Resource
win10v2004-20250410-en
Behavioral task
behavioral30
Sample
CurrentlyCabinets/Moderators.xlm
Resource
win11-20250410-en
Behavioral task
behavioral31
Sample
CurrentlyCabinets/Msn.xlm
Resource
win10v2004-20250313-en
Behavioral task
behavioral32
Sample
CurrentlyCabinets/Msn.xlm
Resource
win11-20250410-en
General
-
Target
CurrentlyCabinets/Im.xlm
-
Size
51KB
-
MD5
50bb0da553db2c393f8b4728879c7f44
-
SHA1
76e7b3f76db3e9a01c86616b48fbc2f710ed7ce1
-
SHA256
39b5653503c6caea22828846f89da180542adbdb7b8c1e0e396f32e779eda390
-
SHA512
5bde5fd2ea83d5969ccf17362d86d2074af0e890320d10572dff35774f3596b6e908007a53a268fe09e98d26362b022ed41582a814157e87d2a0325eadf2ff80
-
SSDEEP
1536:irYTt6z5M2ZSfD7hxKQ01XyZAGES/KejINEI6NbOmhb:ZTQz5BZs7hxKQiXhr6Nbrt
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 6084 EXCEL.EXE