843d5892ae16569f2b69899a9b344c4d8a36d441591006c9075c497a3bf7af20

Submit
Reports

Overview

overview

Static

static

tmp/.org.c...f.puff

windows7-x64

tmp/.org.c...f.puff

windows10-2004-x64

tmp/.org.c...5.puff

windows7-x64

tmp/.org.c...5.puff

windows10-2004-x64

tmp/latte-...d.lock

windows7-x64

tmp/latte-...d.lock

windows10-2004-x64

tmp/latted...colors

windows7-x64

tmp/latted...colors

windows10-2004-x64

tmp/latted...colors

windows7-x64

tmp/latted...colors

windows10-2004-x64

tmp/new.schema

windows7-x64

tmp/new.schema

windows10-2004-x64

tmp/old.schema

windows7-x64

tmp/old.schema

windows10-2004-x64

tmp/packag...pdates

windows7-x64

tmp/packag...pdates

windows10-2004-x64

tmp/pip/_v...rt.pem

windows7-x64

tmp/pip/_v...rt.pem

windows10-2004-x64

tmp/v8-com...s.blob

windows7-x64

tmp/v8-com...s.blob

windows10-2004-x64

tmp/v8-com...js.map

windows7-x64

tmp/v8-com...js.map

windows10-2004-x64

tmp/v8-com...s.blob

windows7-x64

tmp/v8-com...s.blob

windows10-2004-x64

tmp/v8-com...js.map

windows7-x64

tmp/v8-com...js.map

windows10-2004-x64

tmp/v8-com...s.blob

windows7-x64

tmp/v8-com...s.blob

windows10-2004-x64

tmp/v8-com...js.map

windows7-x64

tmp/v8-com...js.map

windows10-2004-x64

tmp/xauth_CDXAAy

windows7-x64

tmp/xauth_CDXAAy

windows10-2004-x64

Analysis

max time kernel
122s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
29-08-2023 18:41

Sharing

Copy URL

Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

tmp/.org.chromium.Chromium.CIiP1D/4be5c8194aa6b4dce9271bdda525d0d8ba9b60b9fbee2b6ab9d7191bcf40deef.puff

Resource

win7-20230824-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

tmp/.org.chromium.Chromium.CIiP1D/4be5c8194aa6b4dce9271bdda525d0d8ba9b60b9fbee2b6ab9d7191bcf40deef.puff

Resource

win10v2004-20230703-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

tmp/.org.chromium.Chromium.YAQUpl/afdc25a3e878826efbf18a52aec0c7f46d621ad17c28722054bc30d1607e1215.puff

Resource

win7-20230712-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral4

Sample

tmp/.org.chromium.Chromium.YAQUpl/afdc25a3e878826efbf18a52aec0c7f46d621ad17c28722054bc30d1607e1215.puff

Resource

win10v2004-20230703-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

tmp/latte-dock.mrkd.lock

Resource

win7-20230712-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral6

Sample

tmp/latte-dock.mrkd.lock

Resource

win10v2004-20230703-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

tmp/lattedock-mvHtAR/default.colors

Resource

win7-20230824-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral8

Sample

tmp/lattedock-mvHtAR/default.colors

Resource

win10v2004-20230703-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

tmp/lattedock-mvHtAR/reversed.colors

Resource

win7-20230712-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral10

Sample

tmp/lattedock-mvHtAR/reversed.colors

Resource

win10v2004-20230703-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

tmp/new.schema

Resource

win7-20230712-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral12

Sample

tmp/new.schema

Resource

win10v2004-20230703-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

tmp/old.schema

Resource

win7-20230712-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

tmp/old.schema

Resource

win10v2004-20230824-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

tmp/packagekit-alpm-updates

Resource

win7-20230712-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

tmp/packagekit-alpm-updates

Resource

win10v2004-20230703-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

tmp/pip/_vendor/certifi/cacert.pem

Resource

win7-20230712-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral18

Sample

tmp/pip/_vendor/certifi/cacert.pem

Resource

win10v2004-20230703-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

tmp/v8-compile-cache-1000/11.3.244.8-node.10/zShomezSmrkdzS.cachezSnodezScorepackzSyarnzS1.22.19zSbinzSyarn.js.blob

Resource

win7-20230712-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral20

Sample

tmp/v8-compile-cache-1000/11.3.244.8-node.10/zShomezSmrkdzS.cachezSnodezScorepackzSyarnzS1.22.19zSbinzSyarn.js.blob

Resource

win10v2004-20230703-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

tmp/v8-compile-cache-1000/11.3.244.8-node.10/zShomezSmrkdzS.cachezSnodezScorepackzSyarnzS1.22.19zSbinzSyarn.js.map

Resource

win7-20230712-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral22

Sample

tmp/v8-compile-cache-1000/11.3.244.8-node.10/zShomezSmrkdzS.cachezSnodezScorepackzSyarnzS1.22.19zSbinzSyarn.js.map

Resource

win10v2004-20230703-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

tmp/v8-compile-cache-1000/11.3.244.8-node.10/zSusrzSlibzSnode_moduleszScorepackzSdistzSpnpm.js.blob

Resource

win7-20230824-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral24

Sample

tmp/v8-compile-cache-1000/11.3.244.8-node.10/zSusrzSlibzSnode_moduleszScorepackzSdistzSpnpm.js.blob

Resource

win10v2004-20230703-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

tmp/v8-compile-cache-1000/11.3.244.8-node.10/zSusrzSlibzSnode_moduleszScorepackzSdistzSpnpm.js.map

Resource

win7-20230712-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral26

Sample

tmp/v8-compile-cache-1000/11.3.244.8-node.10/zSusrzSlibzSnode_moduleszScorepackzSdistzSpnpm.js.map

Resource

win10v2004-20230703-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

tmp/v8-compile-cache-1000/11.3.244.8-node.10/zSusrzSlibzSnode_moduleszScorepackzSdistzSyarn.js.blob

Resource

win7-20230712-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral28

Sample

tmp/v8-compile-cache-1000/11.3.244.8-node.10/zSusrzSlibzSnode_moduleszScorepackzSdistzSyarn.js.blob

Resource

win10v2004-20230703-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

tmp/v8-compile-cache-1000/11.3.244.8-node.10/zSusrzSlibzSnode_moduleszScorepackzSdistzSyarn.js.map

Resource

win7-20230712-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral30

Sample

tmp/v8-compile-cache-1000/11.3.244.8-node.10/zSusrzSlibzSnode_moduleszScorepackzSdistzSyarn.js.map

Resource

win10v2004-20230824-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

tmp/xauth_CDXAAy

Resource

win7-20230712-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

tmp/xauth_CDXAAy

Resource

win10v2004-20230703-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

tmp/packagekit-alpm-updates
Size

1B
MD5

cfcd208495d565ef66e7dff9f98764da
SHA1

b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
SHA256

5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
SHA512

31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\tmp\packagekit-alpm-updates
1⤵
PID:1724

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads