7319656b4c5c0f3c42526657e96c0732322806d7824e992baa4b816a525aae98

Submit
Reports

Overview

overview

Static

static

Botnets PA...t].exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...vg.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...mm.exe

windows10-2004-x64

Botnets PA...UI.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...32.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...vc.exe

windows10-2004-x64

Botnets PA...t].exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...ti.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...ll.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...al.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...32.exe

windows10-2004-x64

Botnets PA...es.exe

windows10-2004-x64

Botnets PA...ml.exe

windows10-2004-x64

Botnets PA...ib.exe

windows10-2004-x64

Botnets PA...nk.exe

windows10-2004-x64

Botnets PA...px.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...it.exe

windows10-2004-x64

Botnets PA...ll.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Botnets PA...er.exe

windows10-2004-x64

Analysis

max time kernel
32s
max time network
37s
platform
windows10-2004_x64
resource
win10v2004-20230621-en
resource tags

arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
submitted
23-06-2023 22:55

Sharing

Copy URL

Twitter E-mail

Static task

static1

[id]upx blacknet

5 signatures

Behavioral task

behavioral1

Sample

Botnets PACK/Botnets PACK/Amadey Cracked/Amadey Cracked [XakFor.Net].exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral2

Sample

Botnets PACK/Botnets PACK/Amadey Cracked/xpti/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral3

Sample

Botnets PACK/Botnets PACK/Amadey Cracked/xpti/svg.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral4

Sample

Botnets PACK/Botnets PACK/Atmos BOTNET Builder/atmos_weber.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral5

Sample

Botnets PACK/Botnets PACK/Atmos BOTNET Builder/forms/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral6

Sample

Botnets PACK/Botnets PACK/Atmos BOTNET Builder/forms/comm.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral7

Sample

Botnets PACK/Botnets PACK/BetaBotBuilder Leaked by Bull/BetaBotBuilderGUI.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

5 signatures

30 seconds

Behavioral task

behavioral8

Sample

Botnets PACK/Botnets PACK/BetaBotBuilder Leaked by Bull/npnul32/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral9

Sample

Botnets PACK/Botnets PACK/BetaBotBuilder Leaked by Bull/npnul32/secur32.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

1 signatures

30 seconds

Behavioral task

behavioral10

Sample

Botnets PACK/Botnets PACK/BlackNET - Compiled/BlackNET Builder.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral11

Sample

Botnets PACK/Botnets PACK/BlackNET - Compiled/Packer/Confuser.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral12

Sample

Botnets PACK/Botnets PACK/H1N1 Loader/sqlite3/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral13

Sample

Botnets PACK/Botnets PACK/H1N1 Loader/sqlite3/NcaSvc.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral14

Sample

Botnets PACK/Botnets PACK/L0rdix Cracked [XakFor.Net]/L0rdix Cracked [XakFor.Net].exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral15

Sample

Botnets PACK/Botnets PACK/L0rdix Cracked [XakFor.Net]/en-US/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral16

Sample

Botnets PACK/Botnets PACK/L0rdix Cracked [XakFor.Net]/en-US/xpti.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral17

Sample

Botnets PACK/Botnets PACK/LiteHTTP-master/LiteDB/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral18

Sample

Botnets PACK/Botnets PACK/LiteHTTP-master/LiteDB/all.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral19

Sample

Botnets PACK/Botnets PACK/LiteHTTP-master/LiteHTTP Builder.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral20

Sample

Botnets PACK/Botnets PACK/Loki 1.8/Loki_original.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral21

Sample

Botnets PACK/Botnets PACK/Pony 1.9/PonyBuilder.exe

Resource

win10v2004-20230621-en

persistence upx

windows10-2004-x64

11 signatures

30 seconds

Behavioral task

behavioral22

Sample

Botnets PACK/Botnets PACK/Pony 1.9/masm32/bin/brcc32.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral23

Sample

Botnets PACK/Botnets PACK/Pony 1.9/masm32/bin/cvtres.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral24

Sample

Botnets PACK/Botnets PACK/Pony 1.9/masm32/bin/ml.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral25

Sample

Botnets PACK/Botnets PACK/Pony 1.9/masm32/bin/polib.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral26

Sample

Botnets PACK/Botnets PACK/Pony 1.9/masm32/bin/polink.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral27

Sample

Botnets PACK/Botnets PACK/Pony 1.9/masm32/bin/upx.exe

Resource

win10v2004-20230621-en

upx

windows10-2004-x64

1 signatures

30 seconds

Behavioral task

behavioral28

Sample

Botnets PACK/Botnets PACK/Pony 1.9/sys/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral29

Sample

Botnets PACK/Botnets PACK/Pony 1.9/sys/WPFToolkit.exe

Resource

win10v2004-20230621-en

upx

windows10-2004-x64

3 signatures

30 seconds

Behavioral task

behavioral30

Sample

Botnets PACK/Botnets PACK/Smoke Loader Original Stub/nssdbm3/CoreShell.exe

Resource

win10v2004-20230621-en

smokeloader backdoor trojan

windows10-2004-x64

5 signatures

30 seconds

Behavioral task

behavioral31

Sample

Botnets PACK/Botnets PACK/Smoke Loader Original Stub/nssdbm3/Launcher.exe

Resource

win10v2004-20230621-en

persistence

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral32

Sample

Botnets PACK/Botnets PACK/Smoke Loader Original Stub/smokeloader.exe

Resource

win10v2004-20230621-en

smokeloader backdoor persistence trojan

windows10-2004-x64

14 signatures

30 seconds

Report Analysis Logs

General

Target

Botnets PACK/Botnets PACK/Pony 1.9/masm32/bin/ml.exe
Size

364KB
MD5

b54b173761ac671cea635672e214a8de
SHA1

ff0c1052feaefb646dffc9aff24ae467f9d97137
SHA256

0767b9b855b21265a78c090d556229ea3e894c415e557900aca3c81f52ac1425
SHA512

d4436011b282f585433d2325c27d6ee46e39b946972cf773b2cf068b038e649320a1735531ee9013f63816d19b5f89f6947e6e86f895200b1614c20f3151db68
SSDEEP

3072:zGovvi9kg0Lij83q0G6UA7GFdRb/8Bp0+BxeMYRGi5Ipv/Pl2hQx13MBO8G6bXT9:yRjbElxp1358t/2A3u/Dh3/MMd2z

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\Botnets PACK\Botnets PACK\Pony 1.9\masm32\bin\ml.exe
"C:\Users\Admin\AppData\Local\Temp\Botnets PACK\Botnets PACK\Pony 1.9\masm32\bin\ml.exe"
1⤵
PID:2448

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads