64c665b2dbdaca4a20aaef96d625091757008c88b49d71070e4eefcd45d986d8 | Triage

Submit
Reports

Overview

overview

Static

static

High Prior...õ.exe

windows10-2004-x64

High Prior...10.exe

windows10-2004-x64

High Priority/31.exe

windows10-2004-x64

High Prior...18.exe

windows10-2004-x64

7

High Prior...-2.exe

windows10-2004-x64

High Prior...le.exe

windows10-2004-x64

3

High Prior...er.exe

windows10-2004-x64

8

High Prior...nt.exe

windows10-2004-x64

High Prior...01.exe

windows10-2004-x64

High Prior...le.exe

windows10-2004-x64

7

High Prior...od.exe

windows10-2004-x64

High Prior...p5.exe

windows10-2004-x64

cobaltstri...de.exe

windows10-2004-x64

default.exe

windows10-2004-x64

file.exe

windows10-2004-x64

5

mouse_2.exe

windows10-2004-x64

oof.exe

windows10-2004-x64

1

Resubmissions

10-05-2024 17:13

240510-vrrk4sgd7t 10

10-05-2024 17:09

240510-vphv7abd29 10

Analysis

max time kernel
140s
max time network
130s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
10-05-2024 17:09

Sharing

Static task

static1

upx stealer system 305419896 modiloader xworm revengerat cobaltstrike zeppelin

12 signatures

Behavioral task

behavioral1

Sample

High Priority/)}ì~)J0ø‰º!Ã²@x&ÚâØaßHÍôõ.exe

Resource

win10v2004-20240508-en

betabot modiloader backdoor botnet evasion persistence trojan

windows10-2004-x64

21 signatures

150 seconds

Behavioral task

behavioral2

Sample

High Priority/2019-09-02_22-41-10.exe

Resource

win10v2004-20240426-en

smokeloader backdoor trojan

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral3

Sample

High Priority/31.exe

Resource

win10v2004-20240426-en

agenttesla danabot formbook gozi 86920224 i0qi w9z agilenet banker botnet cryptone defense_evasion discovery execution impact keylogger packer ransomware rat rezer0 rm3 spyware stealer trojan

windows10-2004-x64

25 signatures

150 seconds

Behavioral task

behavioral4

Sample

High Priority/5da0116af495e6d8af7241da9b8281d918b9ff9a98a3deab4cca1aec1e456c18.exe

Resource

win10v2004-20240508-en

discovery persistence upx

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral5

Sample

High Priority/Client-2.exe

Resource

win10v2004-20240508-en

hakbit evasion execution ransomware spyware stealer

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral6

Sample

High Priority/ComparevalidatorIgamerefreshable.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

High Priority/OnlineInstaller.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral8

Sample

High Priority/XClient.exe

Resource

win10v2004-20240426-en

xworm execution persistence rat trojan

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral9

Sample

High Priority/criticalupdate01.exe

Resource

win10v2004-20240426-en

fantom evasion ransomware

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral10

Sample

High Priority/file.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral11

Sample

High Priority/good.exe

Resource

win10v2004-20240226-en

phorphiex evasion loader persistence trojan upx worm

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral12

Sample

High Priority/temp5.exe

Resource

win10v2004-20240426-en

azorult rms xmrig aspackv2 discovery evasion execution infostealer miner persistence rat trojan upx

windows10-2004-x64

51 signatures

150 seconds

Behavioral task

behavioral13

Sample

cobaltstrike_shellcode.exe

Resource

win10v2004-20240508-en

cobaltstrike 305419896 backdoor trojan

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

default.exe

Resource

win10v2004-20240508-en

zeppelin persistence ransomware

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral15

Sample

file.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

mouse_2.exe

Resource

win10v2004-20240426-en

masslogger zgrat collection rat rezer0 spyware stealer

windows10-2004-x64

19 signatures

150 seconds

Behavioral task

behavioral17

Sample

oof.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

oof.exe
Size

662KB
MD5

0760d43d4adebe20fa0b5e5a7bca1714
SHA1

a0a9dae5e9be39bca31021dd9cf565fcdefb8474
SHA256

8f9067f2bd4a374539a40fddb8915600c9fd6ba3e5db20cbddcb3c5f22d9da44
SHA512

7e60c2726711bb8e822375f93cfb9ced7d172f3f0ae07041cbeea8c4cdb45488d1de90ee77dfef52aa86722a5dcbe521d1affeace3aec8811e851f693d74ef77
SSDEEP

12288:9TEUsvsVEcwaFNaxr7IwFnm1p7BmC10sHo0AhHL:9oBvRcxuxrksqRNI0i

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\oof.exe
"C:\Users\Admin\AppData\Local\Temp\oof.exe"
1⤵
PID:4712

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4624,i,1999448010053300448,1112699187621658374,262144 --variations-seed-version --mojo-platform-channel-handle=3404 /prefetch:8
1⤵
PID:552

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4712-0-0x0000000002200000-0x0000000002201000-memory.dmp

Filesize
4KB

Download
memory/4712-1-0x0000000000400000-0x00000000004AC000-memory.dmp

Filesize
688KB

Download
memory/4712-3-0x0000000002200000-0x0000000002201000-memory.dmp

Filesize
4KB

Download

© 2018-2024

Terms | Privacy