4e5cebe1908e12e8a4ed1198fb01fb87871dbe54847855b11b3540dbc47bbe88

Login
Reports

Overview

overview

Static

static

cone.exe.zip

windows10-2004-x64

cone.exe.zip

windows11-21h2-x64

2to1ep.exe

windows10-2004-x64

2to1ep.exe

windows11-21h2-x64

main.pyc

windows10-2004-x64

main.pyc

windows11-21h2-x64

4363463463...63.exe

windows10-2004-x64

4363463463...63.exe

windows11-21h2-x64

Synaptics.exe

windows10-2004-x64

Synaptics.exe

windows11-21h2-x64

TsarBomba.exe

windows10-2004-x64

TsarBomba.exe

windows11-21h2-x64

cobaltstri...de.exe

windows10-2004-x64

cobaltstri...de.exe

windows11-21h2-x64

ed01ebfbc9...aa.exe

windows10-2004-x64

ed01ebfbc9...aa.exe

windows11-21h2-x64

random.exe

windows10-2004-x64

random.exe

windows11-21h2-x64

Resubmissions

26/10/2026, 02:22

24/10/2026, 06:44

23/10/2026, 16:14

18/10/2026, 12:47

13/10/2026, 20:22

05/10/2026, 17:33

05/10/2026, 08:27

04/10/2026, 19:30

27/09/2026, 14:21

15/09/2026, 11:13

Analysis

max time kernel
898s
max time network
432s
platform
windows10-2004_x64
resource
win10v2004-20251016-en
resource tags

arch:x64arch:x86image:win10v2004-20251016-enlocale:en-usos:windows10-2004-x64system
submitted
06/12/2025, 00:25

Sharing

Copy URL Twitter E-mail

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

cone.exe.zip

Resource

win10v2004-20251016-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral2

Sample

cone.exe.zip

Resource

win11-20251015-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral3

Sample

2to1ep.exe

Resource

win10v2004-20251016-en

windows10-2004-x64

99 signatures

900 seconds

backdoor bootkit office04 vvc defense_evasion discovery downloader execution bdaejec maskgram_stealer metasploit quasar runningrat stealc svcstealer vidar xworm installer persistence privilege_escalation ransomware rat spyware stealer themida trojan upx

Behavioral task

behavioral4

Sample

2to1ep.exe

Resource

win11-20251015-en

windows11-21h2-x64

118 signatures

900 seconds

adware backdoor bootkit botnet office04 vvc collection defense_evasion discovery downloader execution bdaejec donutloader maskgram_stealer metasploit nanocore quasar runningrat stealc svcstealer xworm zloader installer keylogger loader persistence privilege_escalation ransomware rat spyware stealer themida trojan upx

Behavioral task

behavioral5

Sample

main.pyc

Resource

win10v2004-20251016-en

windows10-2004-x64

3 signatures

900 seconds

Behavioral task

behavioral6

Sample

main.pyc

Resource

win11-20251015-en

windows11-21h2-x64

3 signatures

900 seconds

Behavioral task

behavioral7

Sample

4363463463464363463463463.exe

Resource

win10v2004-20251016-en

windows10-2004-x64

85 signatures

900 seconds

backdoor bootkit logsdillercloud office04 svhost collection defense_evasion discovery execution ligolo quasar stealc stealerium xworm installer persistence privilege_escalation pyinstaller rat spyware stealer themida trojan upx

Behavioral task

behavioral8

Sample

4363463463464363463463463.exe

Resource

win11-20251015-en

windows11-21h2-x64

80 signatures

900 seconds

rat 5 (epic verison)collection defense_evasion discovery execution blankgrabber deerstealer mimikatz quasar snakekeylogger vipkeylogger xworm installer keylogger persistence privilege_escalation pyinstaller rat spyware stealer trojan upx

Behavioral task

behavioral9

Sample

Synaptics.exe

Resource

win10v2004-20251016-en

windows10-2004-x64

27 signatures

900 seconds

backdoor paydaytry crypter defense_evasion discovery execution darktortilla killmbr metasploit neshta remcos xred installer loader persistence rat spyware trojan upx wiper

Behavioral task

behavioral10

Sample

Synaptics.exe

Resource

win11-20251015-en

windows11-21h2-x64

121 signatures

900 seconds

backdoor office04 rat 5 (epic verison)collection credential_access defense_evasion discovery execution 44caliber gcleaner hive lockbit mimikatz quasar redline rhadamanthys sheetrat sliver stealerium systembc troldesh wannacry xred xworm impact infostealer installer loader persistence privilege_escalation pyinstaller ransomware rat spyware stealer themida trojan upx worm

Behavioral task

behavioral11

Sample

TsarBomba.exe

Resource

win10v2004-20251016-en

windows10-2004-x64

91 signatures

900 seconds

aspackv2 backdoor 158fdd2a4f5abb978509580715e5353f 987654321 cheat defense_evasion discovery execution ades_stealer chaos cobaltstrike dcrat discordrat dragonforce gcleaner gh0strat jlocker lockbit masslogger modiloader onlylogger redline rokrat sectoprat umbral vidar vipkeylogger xorist xworm impact infostealer installer keylogger loader persistence ransomware rat revoked_codesign rootkit spyware stealer trojan

Behavioral task

behavioral12

Sample

TsarBomba.exe

Resource

win11-20251015-en

windows11-21h2-x64

82 signatures

900 seconds

aspackv2 backdoor 158fdd2a4f5abb978509580715e5353f 987654321 cheat defense_evasion discovery execution ades_stealer chaos cobaltstrike dcrat discordrat dragonforce gh0strat jlocker lockbit masslogger modiloader redline rokrat sectoprat umbral vidar vipkeylogger xorist xworm impact infostealer installer keylogger persistence ransomware rat revoked_codesign rootkit spyware stealer trojan

Behavioral task

behavioral13

Sample

cobaltstrike_shellcode.exe

Resource

win10v2004-20251016-en

windows10-2004-x64

3 signatures

900 seconds

backdoor 1359593325 discovery cobaltstrike trojan

Behavioral task

behavioral14

Sample

cobaltstrike_shellcode.exe

Resource

win11-20251015-en

windows11-21h2-x64

3 signatures

900 seconds

backdoor 1359593325 discovery cobaltstrike trojan

Behavioral task

behavioral15

Sample

ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe

Resource

win10v2004-20251016-en

windows10-2004-x64

20 signatures

900 seconds

defense_evasion discovery execution wannacry impact persistence ransomware spyware stealer worm

Behavioral task

behavioral16

Sample

ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe

Resource

win11-20251015-en

windows11-21h2-x64

20 signatures

900 seconds

defense_evasion discovery execution wannacry impact persistence ransomware spyware stealer worm

Behavioral task

behavioral17

Sample

random.exe

Resource

win10v2004-20251016-en

windows10-2004-x64

77 signatures

900 seconds

f9783d1cf35f1722ac2571f33e328b36 fbf543 fc155c5bf8a148a93a2ba17de68393f0n rif0lm defense_evasion discovery execution amadey deerstealer fuery maskgram_stealer vidar xmrig installer miner persistence privilege_escalation spyware stealer themida trojan upx

Behavioral task

behavioral18

Sample

random.exe

Resource

win11-20251015-en

windows11-21h2-x64

71 signatures

900 seconds

a34dcea7a727279caca81bba5a4f8531 fbf543 fc155c5bf8a148a93a2ba17de68393f0n rif0lm defense_evasion discovery execution amadey deerstealer fuery maskgram_stealer vidar xmrig installer miner persistence spyware stealer themida trojan upx

Report Analysis Logs

General

Target
cone.exe.zip
Size 43.9MB
Sample251206-aq5fcsbt4e
SHA256 4e5cebe1908e12e8a4ed1198fb01fb87871dbe54847855b11b3540dbc47bbe88
MD5 5e4a348e89afb91e6ae698f3104f7b47
SHA1 1ea7e4faa29e2803f50165f63815003fe22b8cbd
SHA512 a4282f90cff85a5802c551c770b2e849ef745bbde8c707d6878c841102d98bdcfe86c014df2acf34fb4471713d990265d0eaaf129dd560898785b8e7ebc53666
SSDEEP 786432:aGUqxoNIwFhSVPEgA5PjIXom0Fk/JK2a8Zq9HdQFaybEdhPm3dutgEXzu94Pa2SJ:aDySIOSVA7IJQk/JK2amQkTwdhPt1S2e
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\cone.exe.zip
1⤵
PID:4288

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads