8ed91c8de844e9e8e083719b6a931516902773a7d7f7d5fccb9874180c9a886c

Submit
Reports

Overview

overview

Static

static

0d63eafe7f...99.exe

windows7-x64

0d63eafe7f...99.exe

windows10-2004-x64

$PLUGINSDI...ge.dll

windows7-x64

$PLUGINSDI...ge.dll

windows10-2004-x64

$PLUGINSDI...gs.dll

windows7-x64

$PLUGINSDI...gs.dll

windows10-2004-x64

1921502319...4.xlam

windows7-x64

1921502319...4.xlam

windows10-2004-x64

27133b9541...e9.vbs

windows7-x64

27133b9541...e9.vbs

windows10-2004-x64

304278cfa0...1c.xls

windows7-x64

304278cfa0...1c.xls

windows10-2004-x64

365771facf...77.exe

windows7-x64

365771facf...77.exe

windows10-2004-x64

397900307d...0c.lnk

windows7-x64

397900307d...0c.lnk

windows10-2004-x64

3d390249d9...ab.lnk

windows7-x64

3d390249d9...ab.lnk

windows10-2004-x64

40e5adc952...73.xls

windows7-x64

40e5adc952...73.xls

windows10-2004-x64

746afcd799...69.xls

windows7-x64

746afcd799...69.xls

windows10-2004-x64

85af8304fd...9f.jar

windows7-x64

85af8304fd...9f.jar

windows10-2004-x64

984646a5a7...41.vbs

windows7-x64

984646a5a7...41.vbs

windows10-2004-x64

9c33e83331...ce.exe

windows7-x64

9c33e83331...ce.exe

windows10-2004-x64

9f07c02b13...b4.lnk

windows7-x64

9f07c02b13...b4.lnk

windows10-2004-x64

c0baec4eb2...f.xlam

windows7-x64

c0baec4eb2...f.xlam

windows10-2004-x64

Resubmissions

21-06-2024 17:47

240621-wdak4syenc 10

17-06-2024 01:02

240617-bd377swhrc 10

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
17-06-2024 01:02

Sharing

Copy URL

Twitter E-mail

Static task

static1

6 signatures

Behavioral task

behavioral1

Sample

0d63eafe7f4eebd3b782dd262da6fa3e562c420e0ecfff540ee1a9c5a76b0f99.exe

Resource

win7-20240508-en

execution

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

0d63eafe7f4eebd3b782dd262da6fa3e562c420e0ecfff540ee1a9c5a76b0f99.exe

Resource

win10v2004-20240508-en

execution

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/BgImage.dll

Resource

win7-20240611-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/BgImage.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win7-20240220-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

19215023198d9ebe4a626113cc6c001bd4d250ebea69aa25afd483aefd4c0984.xlam

Resource

win7-20240221-en

agenttesla keylogger spyware stealer trojan

windows7-x64

20 signatures

150 seconds

Behavioral task

behavioral8

Sample

19215023198d9ebe4a626113cc6c001bd4d250ebea69aa25afd483aefd4c0984.xlam

Resource

win10v2004-20240508-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral9

Sample

27133b9541228c135784f7c6c3bb9425975d7e7880ae278fea040b0ffcb8eee9.vbs

Resource

win7-20240611-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

27133b9541228c135784f7c6c3bb9425975d7e7880ae278fea040b0ffcb8eee9.vbs

Resource

win10v2004-20240508-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

304278cfa0f9f2e81a48c4f23bcb97920b6263c07484b9a0793c2d1b8c65171c.xls

Resource

win7-20231129-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral12

Sample

304278cfa0f9f2e81a48c4f23bcb97920b6263c07484b9a0793c2d1b8c65171c.xls

Resource

win10v2004-20240508-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral13

Sample

365771facf4476f03189fbace015a962f6fd021650f4ebd61acd0c675bc85b77.exe

Resource

win7-20240611-en

xworm rat trojan

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

365771facf4476f03189fbace015a962f6fd021650f4ebd61acd0c675bc85b77.exe

Resource

win10v2004-20240611-en

xworm rat trojan

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral15

Sample

397900307dd4900066b97d9cdbf0e4cdaf145572b84293e1e08c2a15e7963a0c.lnk

Resource

win7-20240508-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

397900307dd4900066b97d9cdbf0e4cdaf145572b84293e1e08c2a15e7963a0c.lnk

Resource

win10v2004-20240611-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

3d390249d9ba45f8e6198dde8319ee8ccd5b9b23921472095ed453544ca537ab.lnk

Resource

win7-20240508-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

3d390249d9ba45f8e6198dde8319ee8ccd5b9b23921472095ed453544ca537ab.lnk

Resource

win10v2004-20240611-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

40e5adc952e8c472e083a539cd67ac339132f2e41a2c99dd3083dd720c041673.xls

Resource

win7-20240221-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral20

Sample

40e5adc952e8c472e083a539cd67ac339132f2e41a2c99dd3083dd720c041673.xls

Resource

win10v2004-20240611-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

746afcd79967881e5a7a21ff847a60c9ef6f1c2dbd796b4ad0c16bc85009d069.xls

Resource

win7-20240508-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral22

Sample

746afcd79967881e5a7a21ff847a60c9ef6f1c2dbd796b4ad0c16bc85009d069.xls

Resource

win10v2004-20240508-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral23

Sample

85af8304fde85bfbd5323012e0f79fab0045a85943454c7757dece03686b049f.jar

Resource

win7-20240220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

85af8304fde85bfbd5323012e0f79fab0045a85943454c7757dece03686b049f.jar

Resource

win10v2004-20240508-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral25

Sample

984646a5a7686265df256e88616dc046b8daa6fbc1807ae67d2933caf0e6af41.vbs

Resource

win7-20240611-en

execution

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral26

Sample

984646a5a7686265df256e88616dc046b8daa6fbc1807ae67d2933caf0e6af41.vbs

Resource

win10v2004-20240226-en

execution

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral27

Sample

9c33e83331c4e2e954f355f453bd32add84016d45e6434d568fb56b690de26ce.exe

Resource

win7-20240611-en

xworm rat trojan

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral28

Sample

9c33e83331c4e2e954f355f453bd32add84016d45e6434d568fb56b690de26ce.exe

Resource

win10v2004-20240508-en

xworm rat trojan

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral29

Sample

9f07c02b13a50bb84630841a7a9876c9ced2ab66d406c54f4673c88e7cd70bb4.lnk

Resource

win7-20240508-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

9f07c02b13a50bb84630841a7a9876c9ced2ab66d406c54f4673c88e7cd70bb4.lnk

Resource

win10v2004-20240611-en

execution

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral31

Sample

c0baec4eb2deb38c2f86c250a7aae50a417652429439bb5ecce82e8bac6892ef.xlam

Resource

win7-20240221-en

agenttesla keylogger spyware stealer trojan

windows7-x64

20 signatures

150 seconds

Behavioral task

behavioral32

Sample

c0baec4eb2deb38c2f86c250a7aae50a417652429439bb5ecce82e8bac6892ef.xlam

Resource

win10v2004-20240611-en

windows10-2004-x64

7 signatures

150 seconds

Report Analysis Logs

General

Target

85af8304fde85bfbd5323012e0f79fab0045a85943454c7757dece03686b049f.jar
Size

448KB
MD5

5f44aa92cda88f8b88f783f5ce2df636
SHA1

f791bc786571bfb36e94ed6a293fa22304a5df78
SHA256

85af8304fde85bfbd5323012e0f79fab0045a85943454c7757dece03686b049f
SHA512

446a86271230343e77530136293ff29467d4166f0b812fc6cc99f53a516e492b21f0fe48fdb033f78db8e7a1620c32c00264d995f948f023ea608cdc2ccb5559
SSDEEP

12288:c75igiDyZEO28Cabb5Je8wUYFkGnwce4U:8EyWO28CaRJVwdFk2Yh

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\java.exe
java -jar C:\Users\Admin\AppData\Local\Temp\85af8304fde85bfbd5323012e0f79fab0045a85943454c7757dece03686b049f.jar
1⤵
PID:2276

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2276-2-0x00000000026F0000-0x0000000002960000-memory.dmp

Filesize
2.4MB

Download
memory/2276-11-0x0000000000140000-0x0000000000141000-memory.dmp

Filesize
4KB

Download
memory/2276-12-0x00000000026F0000-0x0000000002960000-memory.dmp

Filesize
2.4MB

Download