d261cc4cc40165817ae64ca19140e5c574f36d97c703165256e92e1df02becd0 | Triage

Submit
Reports

Overview

overview

Static

static

7

Executable...ce.url

windows10-2004-x64

1

Executable...rd.url

windows10-2004-x64

1

Executable...on.url

windows10-2004-x64

1

Executable...um.url

windows10-2004-x64

1

Executable...ub.url

windows10-2004-x64

1

Executable...te.url

windows10-2004-x64

1

Executable...e).url

windows10-2004-x64

1

Executable...ub.url

windows10-2004-x64

1

Executable...er.cmd

windows10-2004-x64

Executable...TI.cmd

windows10-2004-x64

1

Executable...vc.cmd

windows10-2004-x64

Executable...ev.cmd

windows10-2004-x64

Executable...er.exe

windows10-2004-x64

3

Executable...ce.exe

windows10-2004-x64

7

Executable...P1.cmd

windows10-2004-x64

1

Executable...P2.cmd

windows10-2004-x64

1

Executable...RS.cmd

windows10-2004-x64

1

Executable...OP.cmd

windows10-2004-x64

1

Executable...NP.ps1

windows10-2004-x64

1

Executables/EDGE.cmd

windows10-2004-x64

1

Executable...ZE.cmd

windows10-2004-x64

6

Executable...PT.ps1

windows10-2004-x64

1

Executables/ONED.cmd

windows10-2004-x64

1

Executables/PFP.cmd

windows10-2004-x64

1

Executables/POWER.cmd

windows10-2004-x64

1

Executable...NU.cmd

windows10-2004-x64

4

Executable...TH.cmd

windows10-2004-x64

1

Executable...ER.cmd

windows10-2004-x64

4

Executable...00.png

windows10-2004-x64

3

Executable...rk.png

windows10-2004-x64

3

Executable...ht.png

windows10-2004-x64

3

playbook.xml

windows10-2004-x64

1

Resubmissions

25-04-2023 20:18

230425-y3j7yscg23 10

Analysis

max time kernel
503s
max time network
506s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
25-04-2023 20:18

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Executables/Atlas/4. Troubleshooting/Visual C++ Redistributables/Visual C++ Redistributables AIO Source.url

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral2

Sample

Executables/Atlas/Atlas Discord.url

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral3

Sample

Executables/Atlas/Atlas Documentation.url

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral4

Sample

Executables/Atlas/Atlas Forum.url

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral5

Sample

Executables/Atlas/Atlas GitHub.url

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral6

Sample

Executables/Atlas/Atlas Website.url

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral7

Sample

Executables/AtlasModules/Acknowledgements/Atlas Utilities (filepicker & multichoice).url

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral8

Sample

Executables/AtlasModules/Acknowledgements/setSvc GitHub.url

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral9

Sample

Executables/AtlasModules/Scripts/Auto-Cleaner.cmd

Resource

win10v2004-20230220-en

windows10-2004-x64

6 signatures

600 seconds

Behavioral task

behavioral10

Sample

Executables/AtlasModules/Scripts/RunAsTI.cmd

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral11

Sample

Executables/AtlasModules/Scripts/setSvc.cmd

Resource

win10v2004-20230220-en

windows10-2004-x64

6 signatures

600 seconds

Behavioral task

behavioral12

Sample

Executables/AtlasModules/Scripts/toggleDev.cmd

Resource

win10v2004-20230220-en

windows10-2004-x64

6 signatures

600 seconds

Behavioral task

behavioral13

Sample

Executables/AtlasModules/Tools/filepicker.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

4 signatures

600 seconds

Behavioral task

behavioral14

Sample

Executables/AtlasModules/Tools/multichoice.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

600 seconds

Behavioral task

behavioral15

Sample

Executables/BACKUP1.cmd

Resource

win10v2004-20230221-en

windows10-2004-x64

1 signatures

600 seconds

Behavioral task

behavioral16

Sample

Executables/BACKUP2.cmd

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

600 seconds

Behavioral task

behavioral17

Sample

Executables/CONVERTUSERS.cmd

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral18

Sample

Executables/COPYDESKTOP.cmd

Resource

win10v2004-20230220-en

windows10-2004-x64

2 signatures

600 seconds

Behavioral task

behavioral19

Sample

Executables/DISABLEPNP.ps1

Resource

win10v2004-20230220-en

windows10-2004-x64

2 signatures

600 seconds

Behavioral task

behavioral20

Sample

Executables/EDGE.cmd

Resource

win10v2004-20230221-en

windows10-2004-x64

1 signatures

600 seconds

Behavioral task

behavioral21

Sample

Executables/FINALIZE.cmd

Resource

win10v2004-20230220-en

windows10-2004-x64

8 signatures

600 seconds

Behavioral task

behavioral22

Sample

Executables/MITIGATIONPROMPT.ps1

Resource

win10v2004-20230221-en

windows10-2004-x64

2 signatures

600 seconds

Behavioral task

behavioral23

Sample

Executables/ONED.cmd

Resource

win10v2004-20230221-en

windows10-2004-x64

4 signatures

600 seconds

Behavioral task

behavioral24

Sample

Executables/PFP.cmd

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral25

Sample

Executables/POWER.cmd

Resource

win10v2004-20230220-en

windows10-2004-x64

4 signatures

600 seconds

Behavioral task

behavioral26

Sample

Executables/STARTMENU.cmd

Resource

win10v2004-20230220-en

windows10-2004-x64

7 signatures

600 seconds

Behavioral task

behavioral27

Sample

Executables/UPDHEALTH.cmd

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

600 seconds

Behavioral task

behavioral28

Sample

Executables/WALLPAPER.cmd

Resource

win10v2004-20230220-en

windows10-2004-x64

4 signatures

600 seconds

Behavioral task

behavioral29

Sample

Executables/Web/Screen/img100.png

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

600 seconds

Behavioral task

behavioral30

Sample

Executables/Web/Wallpaper/Windows/atlas-dark.png

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

600 seconds

Behavioral task

behavioral31

Sample

Executables/Web/Wallpaper/Windows/atlas-light.png

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

600 seconds

Behavioral task

behavioral32

Sample

playbook.xml

Resource

win10v2004-20230220-en

windows10-2004-x64

5 signatures

600 seconds

Report Analysis Logs

General

Target

Executables/AtlasModules/Acknowledgements/Atlas Utilities (filepicker & multichoice).url
Size

67B
MD5

6c8f74a0ceecebbe88f912972e9ec3b8
SHA1

01eb0a79d2d11c4150b6fc4c3a54c551b317428f
SHA256

350253efe415d7dcfd6dd556e95da3020f64a7f7ba48cf8c8459ddd6b046433d
SHA512

fa3ed873d0280fda303e8bc009fed954f8987907a16bbb52f8d768a27f05c54b124a418298a6a2458712653b3ec88df1174ed25284348c42778ab011328e6eab

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\System32\rundll32.exe
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL "C:\Users\Admin\AppData\Local\Temp\Executables\AtlasModules\Acknowledgements\Atlas Utilities (filepicker & multichoice).url"
1⤵
PID:952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy