4f3c0de5a08e918050382a42c6109fda68cc8167664065ebd98c73d761fde3f3

Submit
Reports

Overview

overview

Static

static

PRE-ADVISE...49.exe

windows7-x64

PRE-ADVISE...49.exe

windows10-2004-x64

New P.O.exe

windows7-x64

New P.O.exe

windows10-2004-x64

174d337dc9...e8.exe

windows7-x64

174d337dc9...e8.exe

windows10-2004-x64

1acc6fd285...05.elf

debian-12-armhf

JDtnp2mcrQvXDeo.exe

windows7-x64

JDtnp2mcrQvXDeo.exe

windows10-2004-x64

73c5c4b126...f0.exe

windows7-x64

73c5c4b126...f0.exe

windows10-2004-x64

PR-ZWL 07...O).exe

windows7-x64

PR-ZWL 07...O).exe

windows10-2004-x64

SOA pdf.exe

windows7-x64

SOA pdf.exe

windows10-2004-x64

8c56b0f77a...4a.exe

windows7-x64

8c56b0f77a...4a.exe

windows10-2004-x64

a7756cd5c5...c1.elf

debian-12-armhf

ac6ea6239a...de.exe

windows7-x64

ac6ea6239a...de.exe

windows10-2004-x64

c55761decb...27.elf

ubuntu-22.04-amd64

c79a98c3a1...73.exe

windows7-x64

c79a98c3a1...73.exe

windows10-2004-x64

d30f8c9b89...30.doc

windows7-x64

d30f8c9b89...30.doc

windows10-2004-x64

d38f510bc1...26.exe

windows7-x64

d38f510bc1...26.exe

windows10-2004-x64

d623c0b8d9...cf.bat

windows7-x64

d623c0b8d9...cf.bat

windows10-2004-x64

RFQ-2402-3572.exe

windows7-x64

RFQ-2402-3572.exe

windows10-2004-x64

INV&PL.exe

windows7-x64

Analysis

max time kernel
141s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
20-06-2024 02:17

Sharing

Copy URL

Twitter E-mail

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

PRE-ADVISE PO 45202549.exe

Resource

win7-20240611-en

agenttesla keylogger persistence spyware stealer trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

PRE-ADVISE PO 45202549.exe

Resource

win10v2004-20240226-en

agenttesla keylogger persistence spyware stealer trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral3

Sample

New P.O.exe

Resource

win7-20240220-en

agenttesla keylogger persistence spyware stealer trojan

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral4

Sample

New P.O.exe

Resource

win10v2004-20240508-en

agenttesla keylogger persistence spyware stealer trojan

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral5

Sample

174d337dc96f1d28833631db40dfb53ed28878b50ade6698a423b222b3ff78e8.exe

Resource

win7-20240508-en

agenttesla keylogger persistence spyware stealer trojan

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral6

Sample

174d337dc96f1d28833631db40dfb53ed28878b50ade6698a423b222b3ff78e8.exe

Resource

win10v2004-20240611-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral7

Sample

1acc6fd2850bf39084454669685e98ad49bfab90fcafe1e91f49caf4af182405.elf

Resource

debian12-armhf-20240418-en

discovery

debian-12-armhf

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

JDtnp2mcrQvXDeo.exe

Resource

win7-20240221-en

formbook cr12 rat spyware stealer trojan

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral9

Sample

JDtnp2mcrQvXDeo.exe

Resource

win10v2004-20240611-en

formbook cr12 rat spyware stealer trojan

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral10

Sample

73c5c4b12646631dbf1e8adf10b52b8635b34d02d753d3fe829bd41210f547f0.exe

Resource

win7-20231129-en

agenttesla keylogger persistence spyware stealer trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral11

Sample

73c5c4b12646631dbf1e8adf10b52b8635b34d02d753d3fe829bd41210f547f0.exe

Resource

win10v2004-20240508-en

agenttesla keylogger persistence spyware stealer trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral12

Sample

PR-ZWL 07364G49574(Revised PO).exe

Resource

win7-20240508-en

discovery execution

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral13

Sample

PR-ZWL 07364G49574(Revised PO).exe

Resource

win10v2004-20240611-en

discovery execution

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral14

Sample

SOA pdf.exe

Resource

win7-20240508-en

agenttesla execution keylogger persistence spyware stealer trojan

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral15

Sample

SOA pdf.exe

Resource

win10v2004-20240611-en

agenttesla execution keylogger persistence spyware stealer trojan

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral16

Sample

8c56b0f77abb15a25ffdd9e0700475d339c640c4f40094a8bc97223d850c1f4a.exe

Resource

win7-20240419-en

agenttesla keylogger spyware stealer trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral17

Sample

8c56b0f77abb15a25ffdd9e0700475d339c640c4f40094a8bc97223d850c1f4a.exe

Resource

win10v2004-20240508-en

agenttesla keylogger spyware stealer trojan

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral18

Sample

a7756cd5c50f47896fe717bf2ae620f8f3b451e84a70f983c6d79c4f7ad63dc1.elf

Resource

debian12-armhf-20240221-en

debian-12-armhf

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

ac6ea6239a4b82d24b823f1a50ab207652024f33726730d4d7b791fcb2fec7de.exe

Resource

win7-20240611-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

ac6ea6239a4b82d24b823f1a50ab207652024f33726730d4d7b791fcb2fec7de.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

c55761decbe72089e99909a2906c693b159c4b31564d8b795f8821b2683dba27.elf

Resource

ubuntu2204-amd64-20240611-en

ubuntu-22.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

c79a98c3a11afabf39a52a12cb7d1ee6cf4f9df5c7bc54aa969296f50b75aa73.exe

Resource

win7-20240221-en

execution

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral23

Sample

c79a98c3a11afabf39a52a12cb7d1ee6cf4f9df5c7bc54aa969296f50b75aa73.exe

Resource

win10v2004-20240508-en

execution

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral24

Sample

d30f8c9b89f3bd4630fdfb8b9c5390e7e828846cc99d1ba179a2bee7886e6830.doc

Resource

win7-20240220-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral25

Sample

d30f8c9b89f3bd4630fdfb8b9c5390e7e828846cc99d1ba179a2bee7886e6830.doc

Resource

win10v2004-20240508-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

d38f510bc1a2f2e389f22e0a8609f531472d1b367111f74de9109b49c91cbe26.exe

Resource

win7-20240508-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

d38f510bc1a2f2e389f22e0a8609f531472d1b367111f74de9109b49c91cbe26.exe

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

d623c0b8d9d662362b6347c6862217221e660082ef0a9bff77a83a6efffda4cf.bat

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

d623c0b8d9d662362b6347c6862217221e660082ef0a9bff77a83a6efffda4cf.bat

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

RFQ-2402-3572.exe

Resource

win7-20240419-en

agenttesla keylogger persistence spyware stealer trojan

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral31

Sample

RFQ-2402-3572.exe

Resource

win10v2004-20240508-en

agenttesla keylogger persistence spyware stealer trojan

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral32

Sample

INV&PL.exe

Resource

win7-20231129-en

execution

windows7-x64

8 signatures

150 seconds

Report Analysis Logs

General

Target

d38f510bc1a2f2e389f22e0a8609f531472d1b367111f74de9109b49c91cbe26.exe
Size

1.7MB
MD5

95cbc37d7c73ed0bf29074713701ce8a
SHA1

da6ad1007e94f69772eee09473dab8b4eb2db14e
SHA256

d38f510bc1a2f2e389f22e0a8609f531472d1b367111f74de9109b49c91cbe26
SHA512

a084c74bc1716356dad090a4aba0beee0aa4e098161a191781c48abb4db1c52f6f2167f9e48d60381f5b89822ea17ae62b9a7c755900842c897fad8b9897db81
SSDEEP

49152:1Djlabwz9+HjAr6EwEVulQgsXd4WfLW+ZrZznY4:Zqw7rmEVulQgYxDPZzY4

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\d38f510bc1a2f2e389f22e0a8609f531472d1b367111f74de9109b49c91cbe26.exe
"C:\Users\Admin\AppData\Local\Temp\d38f510bc1a2f2e389f22e0a8609f531472d1b367111f74de9109b49c91cbe26.exe"
1⤵
PID:3412

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads