133e003cc510e3d2d0c7df70a603448605641256c88ce64a3bcabb762295d622

Login
Reports

Overview

overview

Static

static

00270d016c...bd.dll

windows10-2004-x64

00270d016c...bd.dll

windows11-ltsc_2024-x64

0225a30270...24.exe

windows10-2004-x64

0225a30270...24.exe

windows11-ltsc_2024-x64

125f75320c...3c.exe

windows10-2004-x64

125f75320c...3c.exe

windows11-ltsc_2024-x64

133e003cc5...22.elf

ubuntu-18.04-amd64

134de049f7...93.msi

windows10-2004-x64

134de049f7...93.msi

windows11-ltsc_2024-x64

148c2d55d3...57.exe

windows10-2004-x64

148c2d55d3...57.exe

windows11-ltsc_2024-x64

151e21dde7...80.msi

windows10-2004-x64

151e21dde7...80.msi

windows11-ltsc_2024-x64

158ca8d131...c7.exe

windows10-2004-x64

158ca8d131...c7.exe

windows11-ltsc_2024-x64

160dd5158f...f6.exe

windows10-2004-x64

160dd5158f...f6.exe

windows11-ltsc_2024-x64

166f41385b...f3.exe

windows10-2004-x64

166f41385b...f3.exe

windows11-ltsc_2024-x64

188b2408a0...99.exe

windows10-2004-x64

188b2408a0...99.exe

windows11-ltsc_2024-x64

195cdde8bc...d3.exe

windows10-2004-x64

195cdde8bc...d3.exe

windows11-ltsc_2024-x64

213d6a4c5a...59.exe

windows10-2004-x64

213d6a4c5a...59.exe

windows11-ltsc_2024-x64

227aff885f...0c.exe

windows10-2004-x64

227aff885f...0c.exe

windows11-ltsc_2024-x64

231bba5652...e9.exe

windows10-2004-x64

231bba5652...e9.exe

windows11-ltsc_2024-x64

244ed096d2...6d.elf

ubuntu-18.04-amd64

259f9ec106...c4.exe

windows10-2004-x64

259f9ec106...c4.exe

windows11-ltsc_2024-x64

Analysis

max time kernel
0s
max time network
130s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
11/10/2026, 17:29

Sharing

Copy URL Twitter E-mail

Static task

static1

39 signatures

Behavioral task

behavioral1

Sample

00270d016c00f9a58a8fad47aa52b95f2383e5b00a76e7281112156e828472bd.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

8 signatures

150 seconds

defense_evasion magniber privilege_escalation ransomware

Behavioral task

behavioral2

Sample

00270d016c00f9a58a8fad47aa52b95f2383e5b00a76e7281112156e828472bd.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

magniber ransomware

Behavioral task

behavioral3

Sample

0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral4

Sample

0225a30270e5361e410453d4fb0501eb759612f6048ad43591b559d835720224.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral5

Sample

125f75320c80d5b4d73c000058f26e92207d28a3d7d88551041f7a62f2a59e3c.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

backdoor discovery gandcrab ransomware

Behavioral task

behavioral6

Sample

125f75320c80d5b4d73c000058f26e92207d28a3d7d88551041f7a62f2a59e3c.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral7

Sample

133e003cc510e3d2d0c7df70a603448605641256c88ce64a3bcabb762295d622.elf

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

discovery

Behavioral task

behavioral8

Sample

134de049f7ef48728b0a126b5f440494817d577c3fbdb92792afa15ae08f1393.msi

Resource

win10v2004-20260911-en

windows10-2004-x64

27 signatures

150 seconds

defense_evasion discovery execution magniber impact persistence privilege_escalation ransomware

Behavioral task

behavioral9

Sample

134de049f7ef48728b0a126b5f440494817d577c3fbdb92792afa15ae08f1393.msi

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

20 signatures

150 seconds

defense_evasion discovery execution persistence privilege_escalation ransomware

Behavioral task

behavioral10

Sample

148c2d55d317029444578d478aeedcc834cffa4db695702adc8add568b517557.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

24 signatures

150 seconds

defense_evasion discovery evasion execution chaos impact persistence privilege_escalation ransomware spyware stealer

Behavioral task

behavioral11

Sample

148c2d55d317029444578d478aeedcc834cffa4db695702adc8add568b517557.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

16 signatures

150 seconds

defense_evasion evasion execution chaos impact persistence privilege_escalation ransomware

Behavioral task

behavioral12

Sample

151e21dde7bb3ce31c04e25638e7513f83e19cbd0a7549a574d97339c9486f80.msi

Resource

win10v2004-20260911-en

windows10-2004-x64

27 signatures

150 seconds

defense_evasion discovery execution magniber impact persistence privilege_escalation ransomware

Behavioral task

behavioral13

Sample

151e21dde7bb3ce31c04e25638e7513f83e19cbd0a7549a574d97339c9486f80.msi

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

19 signatures

150 seconds

defense_evasion discovery execution persistence privilege_escalation ransomware

Behavioral task

behavioral14

Sample

158ca8d131402f77b2efadfbfe70e1ee44764ce4551ed15f43de064d98eb16c7.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

13 signatures

150 seconds

discovery persistence ransomware spyware stealer

Behavioral task

behavioral15

Sample

158ca8d131402f77b2efadfbfe70e1ee44764ce4551ed15f43de064d98eb16c7.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

discovery persistence spyware stealer

Behavioral task

behavioral16

Sample

160dd5158fa00a537fee81df13e8bc4eb14a464806aa3bb3e252a7c435dfcff6.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

10 signatures

150 seconds

credential_access discovery azov persistence privilege_escalation ransomware spyware stealer wiper

Behavioral task

behavioral17

Sample

160dd5158fa00a537fee81df13e8bc4eb14a464806aa3bb3e252a7c435dfcff6.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

166f41385bf95bc7de1dedecd9d2288c7d185dfce0fa1848595c53a5339c95f3.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

14 signatures

150 seconds

discovery nitro persistence ransomware spyware stealer

Behavioral task

behavioral19

Sample

166f41385bf95bc7de1dedecd9d2288c7d185dfce0fa1848595c53a5339c95f3.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

discovery persistence spyware stealer

Behavioral task

behavioral20

Sample

188b2408a0b511905428f95eacc3b60f5c9db195fa8493891baf3db8a4de1e99.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

18 signatures

150 seconds

defense_evasion discovery execution legionlocker ransomware themida trojan

Behavioral task

behavioral21

Sample

188b2408a0b511905428f95eacc3b60f5c9db195fa8493891baf3db8a4de1e99.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

16 signatures

150 seconds

defense_evasion discovery execution legionlocker ransomware themida trojan

Behavioral task

behavioral22

Sample

195cdde8bc2a98f3583f9647171a5b47d9f577f4ffd5805bb3367b012f3428d3.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral23

Sample

195cdde8bc2a98f3583f9647171a5b47d9f577f4ffd5805bb3367b012f3428d3.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral24

Sample

213d6a4c5a5c0045550fa2b822434c51dfd1b6f573c1d1bf22d9eda4f7ab2259.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

11 signatures

150 seconds

credential_access discovery chupacabra ransomware spyware stealer

Behavioral task

behavioral25

Sample

213d6a4c5a5c0045550fa2b822434c51dfd1b6f573c1d1bf22d9eda4f7ab2259.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

discovery chupacabra ransomware spyware stealer

Behavioral task

behavioral26

Sample

227aff885f792fe1bcc142a13b7148482ad8c576fd75e0d92abedb0c7cdc520c.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

13 signatures

150 seconds

discovery execution nominatuscrypto persistence privilege_escalation ransomware spyware stealer

Behavioral task

behavioral27

Sample

227aff885f792fe1bcc142a13b7148482ad8c576fd75e0d92abedb0c7cdc520c.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

12 signatures

150 seconds

discovery execution nominatuscrypto persistence privilege_escalation ransomware spyware stealer

Behavioral task

behavioral28

Sample

231bba5652f6fbdbab3016362fb7925fc4e4489fff5e6a4a98c37fba5bd0cfe9.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

27 signatures

150 seconds

credential_access defense_evasion discovery evasion execution phobos impact persistence privilege_escalation ransomware spyware stealer

Behavioral task

behavioral29

Sample

231bba5652f6fbdbab3016362fb7925fc4e4489fff5e6a4a98c37fba5bd0cfe9.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

27 signatures

150 seconds

credential_access defense_evasion discovery evasion execution phobos impact persistence privilege_escalation ransomware spyware stealer

Behavioral task

behavioral30

Sample

244ed096d26ae952b472dfbfbd27c6eed8db08e02ba6b5239236ef4d5a977e6d.elf

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

2 signatures

150 seconds

discovery

Behavioral task

behavioral31

Sample

259f9ec10642442667a40bf78f03af2fc6d653443cce7062636eb750331657c4.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

259f9ec10642442667a40bf78f03af2fc6d653443cce7062636eb750331657c4.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target
133e003cc510e3d2d0c7df70a603448605641256c88ce64a3bcabb762295d622.elf
Size 1.8MB
Sample261011-v21a1ax18l
SHA256 133e003cc510e3d2d0c7df70a603448605641256c88ce64a3bcabb762295d622
MD5 89f48e5e7a5532eb34c4d22dba7c16bc
SHA1 58964b055faf9b7f72d1725786f8112f56c187bd
SHA512 f3e982d8b534ad0f9a921166d8842683f7bd5d2f7307d572f16dcce0c00129709249c2de2fecd20e538c194085c2db5fdde1ab82818eb2373f2af124f2f9077c
SSDEEP 49152:cqew+96PoBjYs5ngToDEZwTFgN+1TtI1:cqezRob
TLSH
T175954B47F5A250BDD5BAC934832E6137F6317C0D41212A6B67D4EA203F59F209F1EBA2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/self/maps	133e003cc510e3d2d0c7df70a603448605641256c88ce64a3bcabb762295d622.elf

Processes

/tmp/133e003cc510e3d2d0c7df70a603448605641256c88ce64a3bcabb762295d622.elf
/tmp/133e003cc510e3d2d0c7df70a603448605641256c88ce64a3bcabb762295d622.elf
1⤵
- Reads runtime system information
PID:1543

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads