Overview
overview
10Static
static
10capa-testf...mes.py
windows10-2004-x64
3capa-testf...mes.py
windows10-2004-x64
3capa-testf...c1.exe
windows10-2004-x64
10capa-testf...e2.exe
windows10-2004-x64
3capa-testf...da.exe
windows10-2004-x64
10capa-testf...b5.exe
windows10-2004-x64
6capa-testf...04.exe
windows10-2004-x64
3capa-testf...fe.dll
windows10-2004-x64
1capa-testf...b.dll_
windows10-2004-x64
3capa-testf...8.elf_
windows10-2004-x64
3capa-testf...95.exe
windows10-2004-x64
3capa-testf...5c.exe
windows10-2004-x64
8capa-testf...40.dll
windows10-2004-x64
1capa-testf...6b.exe
windows10-2004-x64
3capa-testf...78.dll
windows10-2004-x64
1capa-testf...cb.exe
windows10-2004-x64
8capa-testf...eb.exe
windows10-2004-x64
7capa-testf...13.exe
windows10-2004-x64
3capa-testf...e6.exe
windows10-2004-x64
3capa-testf...83.dll
windows10-2004-x64
3capa-testf...11.exe
windows10-2004-x64
10capa-testf...78.exe
windows10-2004-x64
1capa-testf...77.exe
windows10-2004-x64
1capa-testf...e3.exe
windows10-2004-x64
7capa-testf...64.exe
windows10-2004-x64
7capa-testf...06.exe
windows10-2004-x64
1capa-testf...be.exe
windows10-2004-x64
1capa-testf...a6.dll
windows10-2004-x64
1capa-testf...0b.exe
windows10-2004-x64
1capa-testf...8.elf_
windows10-2004-x64
3capa-testf...06.dll
windows10-2004-x64
10capa-testf...51.exe
windows10-2004-x64
1Resubmissions
14/08/2026, 18:11
260814-wsq7eayzcv14/08/2026, 18:11
260814-wsqkwayzcs06/08/2026, 04:02
260806-el3s7aff5806/08/2026, 03:16
260806-dsrh3asdja28/07/2026, 14:04
260728-rdfpxayajh1028/07/2026, 13:53
260728-q66alayxav1028/07/2026, 12:55
260728-p5zkzsxyay1023/07/2026, 15:06
260723-sg2l8a1frg26/06/2026, 14:20
260626-rnlznscy7l1025/06/2026, 14:59
260625-scvywacx3vAnalysis
- max time kernel
598s - max time network
400s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
25/06/2026, 14:57
Static task
static1
Behavioral task
behavioral1
Sample
capa-testfiles-master/.github/check_runtimes.py
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
capa-testfiles-master/.github/check_sample_filenames.py
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
capa-testfiles-master/009c2377b67997b0da1579f4bbc822c1.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
capa-testfiles-master/02179f3ba93663074740b5c0d283bae2.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
capa-testfiles-master/021f49678cd633dc8cf99c61b3af3dda.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
capa-testfiles-master/034b7231a49387604e81a5a5d2fe7e08f6982c418a28b719d2faace3c312ebb5.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
capa-testfiles-master/039a6336d0802a2255669e6867a5679c7eb83313dbc61fb1c7232147379bd304.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
capa-testfiles-master/03b236b23b1ec37c663527c1f53af3fe.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
capa-testfiles-master/03bb32d43885e83bc56c0b2bcad6f0c5ea40402763b7057056c654990022471b.dll_
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
capa-testfiles-master/055da8e6ccfe5a9380231ea04b850e18.elf_
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
capa-testfiles-master/0596c4ea5aa8def47f22c85d75aaca95.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
capa-testfiles-master/068a76d4823419b376d418cf03215d5c.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
capa-testfiles-master/071f2d1c4c2201ee95ffe2aa965000f5f615a11a12d345e33b9fb060e5597740.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
capa-testfiles-master/0731679c5f99e8ee65d8b29a3cabfc6b.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
capa-testfiles-master/0761142efbda6c4b1e801223de723578.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
capa-testfiles-master/0796f1c1ea0a142fc1eb7109a44c86cb.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
capa-testfiles-master/07f7846bbcda782e5639292ad93907eb.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
capa-testfiles-master/0831bb382211a67c57a392955138808526aa15e55531091841706aae2cb89613.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
capa-testfiles-master/0953cc3b77ed2974b09e3a00708f88de931d681e2d0cb64afbaf714610beabe6.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
capa-testfiles-master/09bf850be5da44a1c3629a1f62813a83.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
capa-testfiles-master/0a0882b8da225406cc838991b5f67d11.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
capa-testfiles-master/0a30182ff3a6b67beb0f2cda9d0de678.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
capa-testfiles-master/0a942aca9589d10f7b8f127870ca35cdd90d25c0b3449abe0434ffeb9f93f277.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
capa-testfiles-master/0cd2b334aede270b14868db28211cde3.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
capa-testfiles-master/0ce3bfa972ced61884ae7c1d77c7d4c45e17c7d767e669610cf2ef72b636b464.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
capa-testfiles-master/0da87fccbf7687a6c7ab38087dea8b8f32c2b1fb6546101485b7167d18d9c406.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
capa-testfiles-master/0db010298586f17ee7e46f390d5724be.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
capa-testfiles-master/0f33c2fec223823f84a732ceb1ad94ed2645e896095144850cf1443aeda67da6.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
capa-testfiles-master/0fd8330e00aa48676d6d0c4f36e9a80b.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
capa-testfiles-master/1038a23daad86042c66bfe6c9d052d27048de9653bde5750dc0f240c792d9ac8.elf_
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
capa-testfiles-master/10cd7afd580ee9c222b0a87ff241d306.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
capa-testfiles-master/10ebcf8c20403457a08762200015b151.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
General
- Target capa-testfiles-master/0796f1c1ea0a142fc1eb7109a44c86cb.exe
- Size 44KB
- Sample260625-sbpepsc15l
- SHA256 3400a7df9ec3dc8283d5ac7accb6935691e93feda066cc46c6c04d67f7f87b2b
- MD5 0796f1c1ea0a142fc1eb7109a44c86cb
- SHA1 335743acfd91055a2c98ef0400a3c414464aa004
- SHA512 70512b01975a393e21f94f99fa17e2c4df13732bd53591d9c9f4a9160a04ba524736684e0c4ab181c9c93c542da4e1d2306968af98d9f645402382c7f96c850c
- SSDEEP 768:PfFe0W7ohwU17d2yro3+1bex7KcDhIlOlftsuiJ7G7Nm3SvXpXe4q:Pt47oSq7dT71beBKIYKVsuRNX
- TLSH T1B0237C42BE95F832CA2201F2693AE996DA7B65301B4475F7FB40DC482C796D0EC3A317
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Tries to connect to .bazar domain 64 IoCs
Attempts to lookup or connect to a .bazar domain, used by BazarBackdoor, Trickbot, and potentially others.
flow ioc 184 portgame.bazar 219 portgame.bazar 241 portgame.bazar 17 portgame.bazar 48 portgame.bazar 105 portgame.bazar 131 portgame.bazar 230 portgame.bazar 248 portgame.bazar 250 portgame.bazar 252 portgame.bazar 25 portgame.bazar 36 portgame.bazar 55 portgame.bazar 72 portgame.bazar 118 portgame.bazar 126 portgame.bazar 35 portgame.bazar 93 portgame.bazar 114 portgame.bazar 138 portgame.bazar 151 portgame.bazar 186 portgame.bazar 198 portgame.bazar 211 portgame.bazar 60 portgame.bazar 63 portgame.bazar 109 portgame.bazar 120 portgame.bazar 139 portgame.bazar 144 portgame.bazar 212 portgame.bazar 223 portgame.bazar 15 portgame.bazar 21 portgame.bazar 22 portgame.bazar 129 portgame.bazar 148 portgame.bazar 215 portgame.bazar 220 portgame.bazar 226 portgame.bazar 127 portgame.bazar 136 portgame.bazar 140 portgame.bazar 157 portgame.bazar 197 portgame.bazar 201 portgame.bazar 204 portgame.bazar 218 portgame.bazar 19 portgame.bazar 39 portgame.bazar 56 portgame.bazar 59 portgame.bazar 99 portgame.bazar 106 portgame.bazar 149 portgame.bazar 150 portgame.bazar 13 portgame.bazar 49 portgame.bazar 61 portgame.bazar 98 portgame.bazar 124 portgame.bazar 134 portgame.bazar 152 portgame.bazar - Unexpected DNS network traffic destination 64 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description flow ioc pid Process Destination IP 44 147.135.185.78 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 67 192.52.166.110 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 87 193.183.98.66 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 100 158.69.239.167 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 140 185.117.154.144 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 228 185.208.208.141 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 19 163.53.248.170 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 48 104.238.186.189 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 108 82.141.39.32 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 14 185.121.177.177 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 15 169.239.202.202 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 30 82.141.39.32 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 59 89.18.27.167 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 196 104.37.195.178 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 199 46.28.207.199 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 222 139.59.23.241 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 237 139.99.96.146 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 92 198.251.90.143 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 93 5.132.191.104 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 123 92.222.97.145 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 141 176.126.70.119 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 144 185.164.136.225 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 148 96.47.228.108 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 195 158.69.239.167 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 230 146.185.176.36 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 45 92.222.97.145 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 58 89.35.39.64 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 186 87.98.175.85 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 224 94.177.171.127 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 236 176.126.70.119 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 10 51.254.25.115 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 75 162.248.241.94 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 101 104.37.195.178 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 129 94.177.171.127 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 241 63.231.92.27 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 22 158.69.239.167 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 49 139.59.23.241 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 107 51.254.25.115 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 116 45.71.112.70 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 143 217.12.210.54 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 200 31.171.251.118 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 234 91.217.137.37 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 40 87.98.175.85 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 52 45.63.124.65 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 68 63.231.92.27 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 99 142.4.205.47 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 102 192.99.85.244 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 115 172.104.136.243 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 130 45.63.124.65 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 187 185.121.177.177 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 17 5.132.191.104 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 53 212.24.98.54 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 56 82.196.9.45 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 128 193.183.98.66 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 147 66.70.211.246 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 157 69.164.196.21 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 190 5.132.191.104 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 191 111.67.20.8 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 20 142.4.204.111 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 61 91.217.137.37 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 89 87.98.175.85 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 98 142.4.204.111 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 114 139.59.208.246 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe Destination IP 120 51.255.48.78 940 0796f1c1ea0a142fc1eb7109a44c86cb.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 0796f1c1ea0a142fc1eb7109a44c86cb.exe