Overview
overview
7Static
static
7tenga mi rey.zip
windows7-x64
1tenga mi rey.zip
windows10-2004-x64
1tenga mi r...rk.apk
android-9-x86
tenga mi r...rk.apk
android-10-x64
x-0.png
windows7-x64
3x-0.png
windows10-2004-x64
3x-0000-bat...t.rpyc
windows7-x64
3x-0000-bat...t.rpyc
windows10-2004-x64
3x-0001-bat...r.rpyc
windows7-x64
3x-0001-bat...r.rpyc
windows10-2004-x64
3x-0001-que...s.rpyc
windows7-x64
3x-0001-que...s.rpyc
windows10-2004-x64
3x-0002-bat...t.rpyc
windows7-x64
3x-0002-bat...t.rpyc
windows10-2004-x64
3x-0002-que...r.rpyc
windows7-x64
3x-0002-que...r.rpyc
windows10-2004-x64
3x-0003-bat...t.rpyc
windows7-x64
3x-0003-bat...t.rpyc
windows10-2004-x64
3x-0003-que...a.rpyc
windows7-x64
3x-0003-que...a.rpyc
windows10-2004-x64
3x-0004-bat...e.rpyc
windows7-x64
3x-0004-bat...e.rpyc
windows10-2004-x64
3x-0005-bat...r.rpyc
windows7-x64
3x-0005-bat...r.rpyc
windows10-2004-x64
3x-0006-bat...r.rpyc
windows7-x64
3x-0006-bat...r.rpyc
windows10-2004-x64
3x-0007-mis...s.rpyc
windows7-x64
3x-0007-mis...s.rpyc
windows10-2004-x64
3x-000atl.rpyc
windows7-x64
3x-000atl.rpyc
windows10-2004-x64
3x-000namespaces.rpyc
windows7-x64
3x-000namespaces.rpyc
windows10-2004-x64
3Analysis
-
max time kernel
125s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
11/07/2023, 02:43
Static task
static1
Behavioral task
behavioral1
Sample
tenga mi rey.zip
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
tenga mi rey.zip
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
tenga mi rey/amitypark.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral4
Sample
tenga mi rey/amitypark.apk
Resource
android-x64-20230621-en
Behavioral task
behavioral5
Sample
x-0.png
Resource
win7-20230703-en
Behavioral task
behavioral6
Sample
x-0.png
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
x-0000-battleclass-combatant.rpyc
Resource
win7-20230703-en
Behavioral task
behavioral8
Sample
x-0000-battleclass-combatant.rpyc
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
x-0001-battleclass-player.rpyc
Resource
win7-20230703-en
Behavioral task
behavioral10
Sample
x-0001-battleclass-player.rpyc
Resource
win10v2004-20230703-en
Behavioral task
behavioral11
Sample
x-0001-quest_class.rpyc
Resource
win7-20230703-en
Behavioral task
behavioral12
Sample
x-0001-quest_class.rpyc
Resource
win10v2004-20230703-en
Behavioral task
behavioral13
Sample
x-0002-battleclass-effect.rpyc
Resource
win7-20230703-en
Behavioral task
behavioral14
Sample
x-0002-battleclass-effect.rpyc
Resource
win10v2004-20230703-en
Behavioral task
behavioral15
Sample
x-0002-quest_manager.rpyc
Resource
win7-20230703-en
Behavioral task
behavioral16
Sample
x-0002-quest_manager.rpyc
Resource
win10v2004-20230703-en
Behavioral task
behavioral17
Sample
x-0003-battleclass-sustainedeffect.rpyc
Resource
win7-20230703-en
Behavioral task
behavioral18
Sample
x-0003-battleclass-sustainedeffect.rpyc
Resource
win10v2004-20230703-en
Behavioral task
behavioral19
Sample
x-0003-quest_data.rpyc
Resource
win7-20230703-en
Behavioral task
behavioral20
Sample
x-0003-quest_data.rpyc
Resource
win10v2004-20230703-en
Behavioral task
behavioral21
Sample
x-0004-battleclass-passive.rpyc
Resource
win7-20230703-en
Behavioral task
behavioral22
Sample
x-0004-battleclass-passive.rpyc
Resource
win10v2004-20230703-en
Behavioral task
behavioral23
Sample
x-0005-battleclass-power.rpyc
Resource
win7-20230703-en
Behavioral task
behavioral24
Sample
x-0005-battleclass-power.rpyc
Resource
win10v2004-20230703-en
Behavioral task
behavioral25
Sample
x-0006-battleclass-manager.rpyc
Resource
win7-20230703-en
Behavioral task
behavioral26
Sample
x-0006-battleclass-manager.rpyc
Resource
win10v2004-20230703-en
Behavioral task
behavioral27
Sample
x-0007-misc-functions.rpyc
Resource
win7-20230703-en
Behavioral task
behavioral28
Sample
x-0007-misc-functions.rpyc
Resource
win10v2004-20230703-en
Behavioral task
behavioral29
Sample
x-000atl.rpyc
Resource
win7-20230703-en
Behavioral task
behavioral30
Sample
x-000atl.rpyc
Resource
win10v2004-20230703-en
Behavioral task
behavioral31
Sample
x-000namespaces.rpyc
Resource
win7-20230703-en
Behavioral task
behavioral32
Sample
x-000namespaces.rpyc
Resource
win10v2004-20230703-en
General
-
Target
x-0002-battleclass-effect.rpyc
-
Size
1KB
-
MD5
f0c36f7fd7dcbe86257924f03102b70a
-
SHA1
00534b1da34c70d1c950585ff2bb265a09e13a52
-
SHA256
63c2751696a44fccf88e02657966c297c674c2378d21248e69be766f4990ea09
-
SHA512
991076e8e30a0279e584120b738e5714312fa9b2d1a4bd514e81233d5378abc2691eae0f511c35a7a424639f6a7212847deef76e427372251b101a88afbebd8e
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3195054982-4292022746-1467505928-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-3195054982-4292022746-1467505928-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4676 OpenWith.exe