Overview

overview

9

Static

static

7

a/A.class

windows10-1703-x64

3

a/B.class

windows10-1703-x64

3

a/C.class

windows10-1703-x64

3

a/D.class

windows10-1703-x64

3

a/E.class

windows10-1703-x64

3

a/F.class

windows10-1703-x64

3

a/G.class

windows10-1703-x64

3

a/H.class

windows10-1703-x64

3

a/I.class

windows10-1703-x64

3

a/J.class

windows10-1703-x64

3

a/K.class

windows10-1703-x64

3

a/L.class

windows10-1703-x64

3

a/M.class

windows10-1703-x64

3

a/N.class

windows10-1703-x64

3

a/O.class

windows10-1703-x64

3

a/P.class

windows10-1703-x64

3

a/Q.class

windows10-1703-x64

3

a/R.class

windows10-1703-x64

3

a/S.class

windows10-1703-x64

3

a/T.class

windows10-1703-x64

3

a/U.class

windows10-1703-x64

3

a/V.class

windows10-1703-x64

3

a/W.class

windows10-1703-x64

3

a/X.class

windows10-1703-x64

3

a/Y.class

windows10-1703-x64

3

vape lite/...er.exe

windows10-1703-x64

1

vape lite/...oo.dll

windows10-1703-x64

1

vape lite/...te.exe

windows10-1703-x64

9

vape lite/...ver.py

windows10-1703-x64

3

vape lite/...ll.bat

windows10-1703-x64

1

vape lite/...un.bat

windows10-1703-x64

1

vape lite/server.py

windows10-1703-x64

3

Analysis

  • max time kernel
    140s
  • max time network
    148s
  • platform
    windows10-1703_x64
  • resource
    win10-20230220-en
  • resource tags

    arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
  • submitted
    31-03-2023 16:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    vape lite/Vape Lite/Kangaroo Patcher.exe

  • Size

    11KB

  • MD5

    bf28450278273ab1c3ebdd4c98bc9222

  • SHA1

    4eb8db0a3816a4d6a627a4fa9367b46c787968fe

  • SHA256

    2a22fe56bc686e4e518318fdd4634f76b6d230baa4b820b4978bda236e4fd500

  • SHA512

    6c888383fa7816eb0d904f914e6525827c43f0ef068ab55300ea2506d24722ec06fbdabbbb5de0452322fc0697d9089981ba08e75e9d5bf67d1a91b16650b573

  • SSDEEP

    192:XRdsxj+V2qTo8OvXcHGMbMJo05GMje3Q5tfWlQskD:XRdsxj42quX0NbMJRNa32su

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\vape lite\Vape Lite\Kangaroo Patcher.exe
    "C:\Users\Admin\AppData\Local\Temp\vape lite\Vape Lite\Kangaroo Patcher.exe"
    1⤵
      PID:2152
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:3092

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads