7319656b4c5c0f3c42526657e96c0732322806d7824e992baa4b816a525aae98

Submit
Reports

Overview

overview

Static

static

Botnets PA...t].exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...vg.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...mm.exe

windows10-2004-x64

Botnets PA...UI.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...32.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...vc.exe

windows10-2004-x64

Botnets PA...t].exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...ti.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...ll.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...al.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...32.exe

windows10-2004-x64

Botnets PA...es.exe

windows10-2004-x64

Botnets PA...ml.exe

windows10-2004-x64

Botnets PA...ib.exe

windows10-2004-x64

Botnets PA...nk.exe

windows10-2004-x64

Botnets PA...px.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...it.exe

windows10-2004-x64

Botnets PA...ll.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Analysis

max time kernel
22s
max time network
33s
platform
windows10-2004_x64
resource
win10v2004-20230621-en
resource tags

arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
submitted
23-06-2023 22:55

Sharing

Copy URL

Twitter E-mail

Static task

static1

[id]upx blacknet

5 signatures

Behavioral task

behavioral1

Sample

Botnets PACK/Botnets PACK/Amadey Cracked/Amadey Cracked [XakFor.Net].exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral2

Sample

Botnets PACK/Botnets PACK/Amadey Cracked/xpti/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral3

Sample

Botnets PACK/Botnets PACK/Amadey Cracked/xpti/svg.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral4

Sample

Botnets PACK/Botnets PACK/Atmos BOTNET Builder/atmos_weber.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral5

Sample

Botnets PACK/Botnets PACK/Atmos BOTNET Builder/forms/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral6

Sample

Botnets PACK/Botnets PACK/Atmos BOTNET Builder/forms/comm.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral7

Sample

Botnets PACK/Botnets PACK/BetaBotBuilder Leaked by Bull/BetaBotBuilderGUI.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

5 signatures

30 seconds

Behavioral task

behavioral8

Sample

Botnets PACK/Botnets PACK/BetaBotBuilder Leaked by Bull/npnul32/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral9

Sample

Botnets PACK/Botnets PACK/BetaBotBuilder Leaked by Bull/npnul32/secur32.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

1 signatures

30 seconds

Behavioral task

behavioral10

Sample

Botnets PACK/Botnets PACK/BlackNET - Compiled/BlackNET Builder.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral11

Sample

Botnets PACK/Botnets PACK/BlackNET - Compiled/Packer/Confuser.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral12

Sample

Botnets PACK/Botnets PACK/H1N1 Loader/sqlite3/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral13

Sample

Botnets PACK/Botnets PACK/H1N1 Loader/sqlite3/NcaSvc.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral14

Sample

Botnets PACK/Botnets PACK/L0rdix Cracked [XakFor.Net]/L0rdix Cracked [XakFor.Net].exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral15

Sample

Botnets PACK/Botnets PACK/L0rdix Cracked [XakFor.Net]/en-US/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral16

Sample

Botnets PACK/Botnets PACK/L0rdix Cracked [XakFor.Net]/en-US/xpti.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral17

Sample

Botnets PACK/Botnets PACK/LiteHTTP-master/LiteDB/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral18

Sample

Botnets PACK/Botnets PACK/LiteHTTP-master/LiteDB/all.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral19

Sample

Botnets PACK/Botnets PACK/LiteHTTP-master/LiteHTTP Builder.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral20

Sample

Botnets PACK/Botnets PACK/Loki 1.8/Loki_original.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral21

Sample

Botnets PACK/Botnets PACK/Pony 1.9/PonyBuilder.exe

Resource

win10v2004-20230621-en

persistence upx

windows10-2004-x64

11 signatures

30 seconds

Behavioral task

behavioral22

Sample

Botnets PACK/Botnets PACK/Pony 1.9/masm32/bin/brcc32.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral23

Sample

Botnets PACK/Botnets PACK/Pony 1.9/masm32/bin/cvtres.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral24

Sample

Botnets PACK/Botnets PACK/Pony 1.9/masm32/bin/ml.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral25

Sample

Botnets PACK/Botnets PACK/Pony 1.9/masm32/bin/polib.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral26

Sample

Botnets PACK/Botnets PACK/Pony 1.9/masm32/bin/polink.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral27

Sample

Botnets PACK/Botnets PACK/Pony 1.9/masm32/bin/upx.exe

Resource

win10v2004-20230621-en

upx

windows10-2004-x64

1 signatures

30 seconds

Behavioral task

behavioral28

Sample

Botnets PACK/Botnets PACK/Pony 1.9/sys/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral29

Sample

Botnets PACK/Botnets PACK/Pony 1.9/sys/WPFToolkit.exe

Resource

win10v2004-20230621-en

upx

windows10-2004-x64

3 signatures

30 seconds

Behavioral task

behavioral30

Sample

Botnets PACK/Botnets PACK/Smoke Loader Original Stub/nssdbm3/CoreShell.exe

Resource

win10v2004-20230621-en

smokeloader backdoor trojan

windows10-2004-x64

5 signatures

30 seconds

Behavioral task

behavioral31

Sample

Botnets PACK/Botnets PACK/Smoke Loader Original Stub/nssdbm3/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral32

Sample

Botnets PACK/Botnets PACK/Smoke Loader Original Stub/smokeloader.exe

Resource

win10v2004-20230621-en

smokeloader backdoor persistence trojan

windows10-2004-x64

14 signatures

30 seconds

Report Analysis Logs

General

Target

Botnets PACK/Botnets PACK/LiteHTTP-master/LiteDB/all.exe
Size

170KB
MD5

8db57eec2e0cb634cbfc6f643ee1d693
SHA1

38fb68dfb148efd0b828686aea8400c5aeb62577
SHA256

79661f2f96121583b79ba44493ced3b41149500ba771bb63d4d4a6c7aba66be1
SHA512

8ac68226ac9caefcea986a51d196d928381607bcd4f1e67531a12347f54d7aa33c21d4a17843e0e5d5b531242fd781e6f8e1cebd2966861e3cd2e667b4e95728
SSDEEP

1536:L3flQG8DsiioG4E68IREQrC4zCHyjL8yFkpB8FXVTFd8NoPN:LPmG8D5G4E68cEQW4GSjL1qERca

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\Botnets PACK\Botnets PACK\LiteHTTP-master\LiteDB\all.exe
"C:\Users\Admin\AppData\Local\Temp\Botnets PACK\Botnets PACK\LiteHTTP-master\LiteDB\all.exe"
1⤵
PID:556

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/556-133-0x0000000000C10000-0x0000000000C20000-memory.dmp

Filesize
64KB

Download
memory/556-134-0x0000000000C10000-0x0000000000C20000-memory.dmp

Filesize
64KB

Download
memory/556-135-0x0000000000C10000-0x0000000000C20000-memory.dmp

Filesize
64KB

Download