7319656b4c5c0f3c42526657e96c0732322806d7824e992baa4b816a525aae98

Submit
Reports

Overview

overview

Static

static

Botnets PA...t].exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...vg.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...mm.exe

windows10-2004-x64

Botnets PA...UI.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...32.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...vc.exe

windows10-2004-x64

Botnets PA...t].exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...ti.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...ll.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...al.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...32.exe

windows10-2004-x64

Botnets PA...es.exe

windows10-2004-x64

Botnets PA...ml.exe

windows10-2004-x64

Botnets PA...ib.exe

windows10-2004-x64

Botnets PA...nk.exe

windows10-2004-x64

Botnets PA...px.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...it.exe

windows10-2004-x64

Botnets PA...ll.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Analysis

max time kernel
30s
max time network
28s
platform
windows10-2004_x64
resource
win10v2004-20230621-en
resource tags

arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
submitted
23-06-2023 22:55

Sharing

Copy URL

Twitter E-mail

Static task

static1

[id]upx blacknet

5 signatures

Behavioral task

behavioral1

Sample

Botnets PACK/Botnets PACK/Amadey Cracked/Amadey Cracked [XakFor.Net].exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral2

Sample

Botnets PACK/Botnets PACK/Amadey Cracked/xpti/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral3

Sample

Botnets PACK/Botnets PACK/Amadey Cracked/xpti/svg.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral4

Sample

Botnets PACK/Botnets PACK/Atmos BOTNET Builder/atmos_weber.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral5

Sample

Botnets PACK/Botnets PACK/Atmos BOTNET Builder/forms/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral6

Sample

Botnets PACK/Botnets PACK/Atmos BOTNET Builder/forms/comm.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral7

Sample

Botnets PACK/Botnets PACK/BetaBotBuilder Leaked by Bull/BetaBotBuilderGUI.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

5 signatures

30 seconds

Behavioral task

behavioral8

Sample

Botnets PACK/Botnets PACK/BetaBotBuilder Leaked by Bull/npnul32/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral9

Sample

Botnets PACK/Botnets PACK/BetaBotBuilder Leaked by Bull/npnul32/secur32.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

1 signatures

30 seconds

Behavioral task

behavioral10

Sample

Botnets PACK/Botnets PACK/BlackNET - Compiled/BlackNET Builder.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral11

Sample

Botnets PACK/Botnets PACK/BlackNET - Compiled/Packer/Confuser.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral12

Sample

Botnets PACK/Botnets PACK/H1N1 Loader/sqlite3/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral13

Sample

Botnets PACK/Botnets PACK/H1N1 Loader/sqlite3/NcaSvc.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral14

Sample

Botnets PACK/Botnets PACK/L0rdix Cracked [XakFor.Net]/L0rdix Cracked [XakFor.Net].exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral15

Sample

Botnets PACK/Botnets PACK/L0rdix Cracked [XakFor.Net]/en-US/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral16

Sample

Botnets PACK/Botnets PACK/L0rdix Cracked [XakFor.Net]/en-US/xpti.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral17

Sample

Botnets PACK/Botnets PACK/LiteHTTP-master/LiteDB/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral18

Sample

Botnets PACK/Botnets PACK/LiteHTTP-master/LiteDB/all.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral19

Sample

Botnets PACK/Botnets PACK/LiteHTTP-master/LiteHTTP Builder.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral20

Sample

Botnets PACK/Botnets PACK/Loki 1.8/Loki_original.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral21

Sample

Botnets PACK/Botnets PACK/Pony 1.9/PonyBuilder.exe

Resource

win10v2004-20230621-en

persistence upx

windows10-2004-x64

11 signatures

30 seconds

Behavioral task

behavioral22

Sample

Botnets PACK/Botnets PACK/Pony 1.9/masm32/bin/brcc32.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral23

Sample

Botnets PACK/Botnets PACK/Pony 1.9/masm32/bin/cvtres.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral24

Sample

Botnets PACK/Botnets PACK/Pony 1.9/masm32/bin/ml.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral25

Sample

Botnets PACK/Botnets PACK/Pony 1.9/masm32/bin/polib.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral26

Sample

Botnets PACK/Botnets PACK/Pony 1.9/masm32/bin/polink.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral27

Sample

Botnets PACK/Botnets PACK/Pony 1.9/masm32/bin/upx.exe

Resource

win10v2004-20230621-en

upx

windows10-2004-x64

1 signatures

30 seconds

Behavioral task

behavioral28

Sample

Botnets PACK/Botnets PACK/Pony 1.9/sys/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral29

Sample

Botnets PACK/Botnets PACK/Pony 1.9/sys/WPFToolkit.exe

Resource

win10v2004-20230621-en

upx

windows10-2004-x64

3 signatures

30 seconds

Behavioral task

behavioral30

Sample

Botnets PACK/Botnets PACK/Smoke Loader Original Stub/nssdbm3/CoreShell.exe

Resource

win10v2004-20230621-en

smokeloader backdoor trojan

windows10-2004-x64

5 signatures

30 seconds

Behavioral task

behavioral31

Sample

Botnets PACK/Botnets PACK/Smoke Loader Original Stub/nssdbm3/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral32

Sample

Botnets PACK/Botnets PACK/Smoke Loader Original Stub/smokeloader.exe

Resource

win10v2004-20230621-en

smokeloader backdoor persistence trojan

windows10-2004-x64

14 signatures

30 seconds

Report Analysis Logs

General

Target

Botnets PACK/Botnets PACK/H1N1 Loader/sqlite3/NcaSvc.exe
Size

25KB
MD5

fe0c5d88aae74a678e6c6aebf0c5bdf8
SHA1

88988639e083cc3a0380c1896ca86f2151779a0a
SHA256

357e6566f1d4a3d47d39919d80aa63795ba420e6336c75803dd50083d3e3e519
SHA512

0015917c7c272e71c97c7ba69ab113d9a2505cf216d0193589e38919c0e53d4a1dc734e2beae5e3630d4fa398856961efcab68291b10d163ffda314b61092f5b
SSDEEP

384:L/uZ7EhTk1KwXZEzt5uXytW6G3Ja7S84flOis8nWf0p/:mwTmZEzt5QeGZa3aOP8Wf0

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\Botnets PACK\Botnets PACK\H1N1 Loader\sqlite3\NcaSvc.exe
"C:\Users\Admin\AppData\Local\Temp\Botnets PACK\Botnets PACK\H1N1 Loader\sqlite3\NcaSvc.exe"
1⤵
PID:1056

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads