2894c5979087388c4d4601f543f4be0a8383e0a3492f63fc104ebf99bcf83bf2

Submit
Reports

Overview

overview

Static

static

Win32.Pega...15.xls

windows10_x64

Win32.Pega...15.xls

windows10_x64

Win32.Pega...?).doc

windows10_x64

Win32.Pega...15.doc

windows10_x64

Win32.Pega...min.js

windows10_x64

Win32.Pega...min.js

windows10_x64

Win32.Pega...ain.js

windows10_x64

Win32.Pega...ble.js

windows10_x64

Win32.Pega...min.js

windows10_x64

Win32.Pega...min.js

windows10_x64

Win32.Pega...min.js

windows10_x64

Win32.Pega...x.html

windows10_x64

Win32.Pega...vg.xml

windows10_x64

Win32.Pega...min.js

windows10_x64

Win32.Pega...hp.vbs

windows10_x64

Win32.Pega...hp.vbs

windows10_x64

Win32.Pega...hp.vbs

windows10_x64

Win32.Pega...php.js

windows10_x64

Win32.Pega...ol.exe

windows10_x64

Win32.Pega...gs.bat

windows10_x64

Win32.Pega...ct.bat

windows10_x64

Win32.Pega...es.bat

windows10_x64

Win32.Pega...re.bat

windows10_x64

Win32.Pega...er.bat

windows10_x64

Win32.Pega...er.bat

windows10_x64

Win32.Pega...hp.ps1

windows10_x64

Win32.Pega...RS.BAT

windows10_x64

Win32.Pega...ck.exe

windows10_x64

Win32.Pega...pp.vbs

windows10_x64

Win32.Pega...pp.vbs

windows10_x64

Win32.Pega...pp.vbs

windows10_x64

Win32.Pega...pp.vbs

windows10_x64

Analysis

max time kernel
315s
max time network
385s
platform
windows10_x64
resource
win10v20210408
submitted
23-07-2021 09:33

Sharing

Copy URL

Twitter E-mail

Static task

static1

macro xlm

Behavioral task

behavioral1

Sample

Win32.Pegasus/cvs_banks/????????? (500) 30 06 2015.xls

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

Win32.Pegasus/cvs_banks/????????? (485) 24 08 2015.xls

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral3

Sample

Win32.Pegasus/cvs_banks/?????? ?? ?????? ?. ???????? ?? 13.02.2013 (?? ??????? ????????).doc

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral4

Sample

Win32.Pegasus/cvs_banks/?? ?????? ?? 17.11.2015.doc

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral5

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/pnotify.custom.min.js

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral6

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/messi.min.js

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral7

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/main.js

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral8

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/jquery.jeditable.js

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral9

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/jquery.form.min.js

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral10

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/jquery-ui.min.js

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral11

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/jquery-1.11.2.min.js

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral12

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/index.html

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral13

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/glyphicons-halflings-regular.svg.xml

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral14

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/bootstrap.min.js

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral15

Sample

Win32.Pegasus/Pegasus/web-adminpart/inc/mod_auth.php.vbs

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral16

Sample

Win32.Pegasus/Pegasus/web-adminpart/inc/mod_ajax_mjobs.php.vbs

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral17

Sample

Win32.Pegasus/Pegasus/web-adminpart/inc/mod_ajax_mcreds.php.vbs

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral18

Sample

Win32.Pegasus/Pegasus/web-adminpart/inc/ip2location.class.php.js

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral19

Sample

Win32.Pegasus/Pegasus/tools/signtool.exe

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral20

Sample

Win32.Pegasus/Pegasus/tools/recrypt_strings.bat

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral21

Sample

Win32.Pegasus/Pegasus/tools/rebuild_project.bat

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral22

Sample

Win32.Pegasus/Pegasus/tools/rebuild_modules.bat

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral23

Sample

Win32.Pegasus/Pegasus/tools/rebuild_core.bat

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral24

Sample

Win32.Pegasus/Pegasus/tools/prebuild_installer.bat

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral25

Sample

Win32.Pegasus/Pegasus/tools/postbuild_installer.bat

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral26

Sample

Win32.Pegasus/Pegasus/tools/make_binpack.php.ps1

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral27

Sample

Win32.Pegasus/Pegasus/tools/MAKE_INSTALLERS.BAT

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral28

Sample

Win32.Pegasus/Pegasus/tools/LZ4_pack.exe

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral29

Sample

Win32.Pegasus/Pegasus/shared/CommStructures.cpp.vbs

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral30

Sample

Win32.Pegasus/Pegasus/mod_NetworkConnectivity/transport_Generic.cpp.vbs

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral31

Sample

Win32.Pegasus/Pegasus/mod_KBRI/kbriTargetAccManager.cpp.vbs

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral32

Sample

Win32.Pegasus/Pegasus/mod_KBRI/kbriList.cpp.vbs

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Report Analysis Logs

General

Target

Win32.Pegasus/Pegasus/web-adminpart/inc/ip2location.class.php.js
Size

36KB
MD5

8d17c05765cad6093da711d69d26e3d6
SHA1

d1e7ed092a0c821c230b9b7c3230e46f22c778c8
SHA256

e1ede3f0f1147a29b0d448baf11a31073d1b6c4698a04b378c8deab7968dd568
SHA512

3857cdd06402ef586c152ff3986c7c0d395101b57843076cfaf93252daa8cd17fd27b9bd032a01d317a0505d7f261cd2167a9f7dd2b4cc449b0e0c666d41d403

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\Win32.Pegasus\Pegasus\web-adminpart\inc\ip2location.class.php.js
1⤵
PID:4044

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads