2894c5979087388c4d4601f543f4be0a8383e0a3492f63fc104ebf99bcf83bf2

Submit
Reports

Overview

overview

Static

static

Win32.Pega...15.xls

windows10_x64

Win32.Pega...15.xls

windows10_x64

Win32.Pega...?).doc

windows10_x64

Win32.Pega...15.doc

windows10_x64

Win32.Pega...min.js

windows10_x64

Win32.Pega...min.js

windows10_x64

Win32.Pega...ain.js

windows10_x64

Win32.Pega...ble.js

windows10_x64

Win32.Pega...min.js

windows10_x64

Win32.Pega...min.js

windows10_x64

Win32.Pega...min.js

windows10_x64

Win32.Pega...x.html

windows10_x64

Win32.Pega...vg.xml

windows10_x64

Win32.Pega...min.js

windows10_x64

Win32.Pega...hp.vbs

windows10_x64

Win32.Pega...hp.vbs

windows10_x64

Win32.Pega...hp.vbs

windows10_x64

Win32.Pega...php.js

windows10_x64

Win32.Pega...ol.exe

windows10_x64

Win32.Pega...gs.bat

windows10_x64

Win32.Pega...ct.bat

windows10_x64

Win32.Pega...es.bat

windows10_x64

Win32.Pega...re.bat

windows10_x64

Win32.Pega...er.bat

windows10_x64

Win32.Pega...er.bat

windows10_x64

Win32.Pega...hp.ps1

windows10_x64

Win32.Pega...RS.BAT

windows10_x64

Win32.Pega...ck.exe

windows10_x64

Win32.Pega...pp.vbs

windows10_x64

Win32.Pega...pp.vbs

windows10_x64

Win32.Pega...pp.vbs

windows10_x64

Win32.Pega...pp.vbs

windows10_x64

Analysis

max time kernel
328s
max time network
1020s
platform
windows10_x64
resource
win10v20210410
submitted
23-07-2021 09:33

Sharing

Copy URL

Twitter E-mail

Static task

static1

macro xlm

Behavioral task

behavioral1

Sample

Win32.Pegasus/cvs_banks/????????? (500) 30 06 2015.xls

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

Win32.Pegasus/cvs_banks/????????? (485) 24 08 2015.xls

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral3

Sample

Win32.Pegasus/cvs_banks/?????? ?? ?????? ?. ???????? ?? 13.02.2013 (?? ??????? ????????).doc

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral4

Sample

Win32.Pegasus/cvs_banks/?? ?????? ?? 17.11.2015.doc

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral5

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/pnotify.custom.min.js

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral6

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/messi.min.js

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral7

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/main.js

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral8

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/jquery.jeditable.js

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral9

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/jquery.form.min.js

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral10

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/jquery-ui.min.js

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral11

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/jquery-1.11.2.min.js

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral12

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/index.html

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral13

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/glyphicons-halflings-regular.svg.xml

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral14

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/bootstrap.min.js

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral15

Sample

Win32.Pegasus/Pegasus/web-adminpart/inc/mod_auth.php.vbs

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral16

Sample

Win32.Pegasus/Pegasus/web-adminpart/inc/mod_ajax_mjobs.php.vbs

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral17

Sample

Win32.Pegasus/Pegasus/web-adminpart/inc/mod_ajax_mcreds.php.vbs

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral18

Sample

Win32.Pegasus/Pegasus/web-adminpart/inc/ip2location.class.php.js

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral19

Sample

Win32.Pegasus/Pegasus/tools/signtool.exe

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral20

Sample

Win32.Pegasus/Pegasus/tools/recrypt_strings.bat

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral21

Sample

Win32.Pegasus/Pegasus/tools/rebuild_project.bat

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral22

Sample

Win32.Pegasus/Pegasus/tools/rebuild_modules.bat

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral23

Sample

Win32.Pegasus/Pegasus/tools/rebuild_core.bat

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral24

Sample

Win32.Pegasus/Pegasus/tools/prebuild_installer.bat

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral25

Sample

Win32.Pegasus/Pegasus/tools/postbuild_installer.bat

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral26

Sample

Win32.Pegasus/Pegasus/tools/make_binpack.php.ps1

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral27

Sample

Win32.Pegasus/Pegasus/tools/MAKE_INSTALLERS.BAT

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral28

Sample

Win32.Pegasus/Pegasus/tools/LZ4_pack.exe

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral29

Sample

Win32.Pegasus/Pegasus/shared/CommStructures.cpp.vbs

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral30

Sample

Win32.Pegasus/Pegasus/mod_NetworkConnectivity/transport_Generic.cpp.vbs

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral31

Sample

Win32.Pegasus/Pegasus/mod_KBRI/kbriTargetAccManager.cpp.vbs

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral32

Sample

Win32.Pegasus/Pegasus/mod_KBRI/kbriList.cpp.vbs

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Report Analysis Logs

General

Target

Win32.Pegasus/Pegasus/web-adminpart/inc/mod_ajax_mcreds.php.vbs
Size

1KB
MD5

d9c6cd0653a33f6628b664daffa23ef6
SHA1

d402f19fe9a419c30fbd08830b837de1c6b063ce
SHA256

cb0c988d8d692941025afe53e1bfce435427b191293c88fe7ec14c775d42d33f
SHA512

8c1b38125d5b79dac8bd1a2681f1288bcbb3ba79b2918d05dcea05d36616859713b185e904f1b0308523185c645e3a26e44dab8cacc55f316b2a51573c154147

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Win32.Pegasus\Pegasus\web-adminpart\inc\mod_ajax_mcreds.php.vbs"
1⤵
PID:3876

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads