4f3c0de5a08e918050382a42c6109fda68cc8167664065ebd98c73d761fde3f3

Submit
Reports

Overview

overview

Static

static

PRE-ADVISE...49.exe

windows7-x64

PRE-ADVISE...49.exe

windows10-2004-x64

New P.O.exe

windows7-x64

New P.O.exe

windows10-2004-x64

174d337dc9...e8.exe

windows7-x64

174d337dc9...e8.exe

windows10-2004-x64

1acc6fd285...05.elf

debian-12-armhf

JDtnp2mcrQvXDeo.exe

windows7-x64

JDtnp2mcrQvXDeo.exe

windows10-2004-x64

73c5c4b126...f0.exe

windows7-x64

73c5c4b126...f0.exe

windows10-2004-x64

PR-ZWL 07...O).exe

windows7-x64

PR-ZWL 07...O).exe

windows10-2004-x64

SOA pdf.exe

windows7-x64

SOA pdf.exe

windows10-2004-x64

8c56b0f77a...4a.exe

windows7-x64

8c56b0f77a...4a.exe

windows10-2004-x64

a7756cd5c5...c1.elf

debian-12-armhf

ac6ea6239a...de.exe

windows7-x64

ac6ea6239a...de.exe

windows10-2004-x64

c55761decb...27.elf

ubuntu-22.04-amd64

c79a98c3a1...73.exe

windows7-x64

c79a98c3a1...73.exe

windows10-2004-x64

d30f8c9b89...30.doc

windows7-x64

d30f8c9b89...30.doc

windows10-2004-x64

d38f510bc1...26.exe

windows7-x64

d38f510bc1...26.exe

windows10-2004-x64

d623c0b8d9...cf.bat

windows7-x64

d623c0b8d9...cf.bat

windows10-2004-x64

RFQ-2402-3572.exe

windows7-x64

RFQ-2402-3572.exe

windows10-2004-x64

INV&PL.exe

windows7-x64

Analysis

max time network
154s
platform
debian-12_armhf
resource
debian12-armhf-20240418-en
resource tags

arch:armhfimage:debian12-armhf-20240418-enkernel:6.1.0-17-armmp-lpaelocale:en-usos:debian-12-armhfsystem
submitted
20-06-2024 02:17

Sharing

Copy URL

Twitter E-mail

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

PRE-ADVISE PO 45202549.exe

Resource

win7-20240611-en

agenttesla keylogger persistence spyware stealer trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

PRE-ADVISE PO 45202549.exe

Resource

win10v2004-20240226-en

agenttesla keylogger persistence spyware stealer trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral3

Sample

New P.O.exe

Resource

win7-20240220-en

agenttesla keylogger persistence spyware stealer trojan

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral4

Sample

New P.O.exe

Resource

win10v2004-20240508-en

agenttesla keylogger persistence spyware stealer trojan

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral5

Sample

174d337dc96f1d28833631db40dfb53ed28878b50ade6698a423b222b3ff78e8.exe

Resource

win7-20240508-en

agenttesla keylogger persistence spyware stealer trojan

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral6

Sample

174d337dc96f1d28833631db40dfb53ed28878b50ade6698a423b222b3ff78e8.exe

Resource

win10v2004-20240611-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral7

Sample

1acc6fd2850bf39084454669685e98ad49bfab90fcafe1e91f49caf4af182405.elf

Resource

debian12-armhf-20240418-en

discovery

debian-12-armhf

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

JDtnp2mcrQvXDeo.exe

Resource

win7-20240221-en

formbook cr12 rat spyware stealer trojan

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral9

Sample

JDtnp2mcrQvXDeo.exe

Resource

win10v2004-20240611-en

formbook cr12 rat spyware stealer trojan

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral10

Sample

73c5c4b12646631dbf1e8adf10b52b8635b34d02d753d3fe829bd41210f547f0.exe

Resource

win7-20231129-en

agenttesla keylogger persistence spyware stealer trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral11

Sample

73c5c4b12646631dbf1e8adf10b52b8635b34d02d753d3fe829bd41210f547f0.exe

Resource

win10v2004-20240508-en

agenttesla keylogger persistence spyware stealer trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral12

Sample

PR-ZWL 07364G49574(Revised PO).exe

Resource

win7-20240508-en

discovery execution

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral13

Sample

PR-ZWL 07364G49574(Revised PO).exe

Resource

win10v2004-20240611-en

discovery execution

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral14

Sample

SOA pdf.exe

Resource

win7-20240508-en

agenttesla execution keylogger persistence spyware stealer trojan

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral15

Sample

SOA pdf.exe

Resource

win10v2004-20240611-en

agenttesla execution keylogger persistence spyware stealer trojan

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral16

Sample

8c56b0f77abb15a25ffdd9e0700475d339c640c4f40094a8bc97223d850c1f4a.exe

Resource

win7-20240419-en

agenttesla keylogger spyware stealer trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral17

Sample

8c56b0f77abb15a25ffdd9e0700475d339c640c4f40094a8bc97223d850c1f4a.exe

Resource

win10v2004-20240508-en

agenttesla keylogger spyware stealer trojan

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral18

Sample

a7756cd5c50f47896fe717bf2ae620f8f3b451e84a70f983c6d79c4f7ad63dc1.elf

Resource

debian12-armhf-20240221-en

debian-12-armhf

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

ac6ea6239a4b82d24b823f1a50ab207652024f33726730d4d7b791fcb2fec7de.exe

Resource

win7-20240611-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

ac6ea6239a4b82d24b823f1a50ab207652024f33726730d4d7b791fcb2fec7de.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

c55761decbe72089e99909a2906c693b159c4b31564d8b795f8821b2683dba27.elf

Resource

ubuntu2204-amd64-20240611-en

ubuntu-22.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

c79a98c3a11afabf39a52a12cb7d1ee6cf4f9df5c7bc54aa969296f50b75aa73.exe

Resource

win7-20240221-en

execution

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral23

Sample

c79a98c3a11afabf39a52a12cb7d1ee6cf4f9df5c7bc54aa969296f50b75aa73.exe

Resource

win10v2004-20240508-en

execution

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral24

Sample

d30f8c9b89f3bd4630fdfb8b9c5390e7e828846cc99d1ba179a2bee7886e6830.doc

Resource

win7-20240220-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral25

Sample

d30f8c9b89f3bd4630fdfb8b9c5390e7e828846cc99d1ba179a2bee7886e6830.doc

Resource

win10v2004-20240508-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

d38f510bc1a2f2e389f22e0a8609f531472d1b367111f74de9109b49c91cbe26.exe

Resource

win7-20240508-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

d38f510bc1a2f2e389f22e0a8609f531472d1b367111f74de9109b49c91cbe26.exe

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

d623c0b8d9d662362b6347c6862217221e660082ef0a9bff77a83a6efffda4cf.bat

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

d623c0b8d9d662362b6347c6862217221e660082ef0a9bff77a83a6efffda4cf.bat

Resource

win10v2004-20240611-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

RFQ-2402-3572.exe

Resource

win7-20240419-en

agenttesla keylogger persistence spyware stealer trojan

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral31

Sample

RFQ-2402-3572.exe

Resource

win10v2004-20240508-en

agenttesla keylogger persistence spyware stealer trojan

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral32

Sample

INV&PL.exe

Resource

win7-20231129-en

execution

windows7-x64

8 signatures

150 seconds

Report Analysis Logs

General

Target

1acc6fd2850bf39084454669685e98ad49bfab90fcafe1e91f49caf4af182405.elf
Size

187KB
MD5

5a57c37935e84a37aaa682cf4c991222
SHA1

171bf1e48e28d1c332711861dffaeabd0f014bce
SHA256

1acc6fd2850bf39084454669685e98ad49bfab90fcafe1e91f49caf4af182405
SHA512

2dac831ad836920cc5e82099934db14af33189a0d807abb8b7a094a6a3857fe92c3415d76537f0ef9b326a3adfc94bc30ab288093f4307afc2f3680b32b39ba7
SSDEEP

3072:mWSFzOpsT6FbGqEVyYaySFjiHNjgsxSuRgh86Mcmo+M/RegKmYRA:mW8iplbGLgYaySFjiHN0sRq867v+M/RX

Score

9^/10

discovery

Malware Config

Signatures

Contacts a large (74734) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046

Processes

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads