7b481ab4b15c7de35525d2f8be1568fa57b032add571c66f476dba9bea41d5f1

Submit
Reports

Overview

overview

Static

static

PvZ_Toolki....3.zip

windows7-x64

PvZ_Toolki....3.zip

windows10-2004-x64

PvZ_Toolki....3.exe

windows7-x64

PvZ_Toolki....3.exe

windows10-2004-x64

PvZ_Toolki...xe.asc

windows7-x64

PvZ_Toolki...xe.asc

windows10-2004-x64

PvZ_Toolki...e.hash

windows7-x64

PvZ_Toolki...e.hash

windows10-2004-x64

PvZ_Toolki...h).exe

windows7-x64

PvZ_Toolki...h).exe

windows10-2004-x64

PvZ_Toolki...xe.asc

windows7-x64

PvZ_Toolki...xe.asc

windows10-2004-x64

PvZ_Toolki...e.hash

windows7-x64

PvZ_Toolki...e.hash

windows10-2004-x64

PvZ_Toolki...ds.yml

windows7-x64

PvZ_Toolki...ds.yml

windows10-2004-x64

PvZ_Toolki...up.yml

windows7-x64

PvZ_Toolki...up.yml

windows10-2004-x64

PvZ_Toolki...sh.png

windows7-x64

PvZ_Toolki...sh.png

windows10-2004-x64

PvZ_Toolki...pt.url

windows7-x64

PvZ_Toolki...pt.url

windows10-2004-x64

PvZ_Toolki...X1.der

windows7-x64

PvZ_Toolki...X1.der

windows10-2004-x64

PvZ_Toolki...X2.der

windows7-x64

PvZ_Toolki...X2.der

windows10-2004-x64

PvZ_Toolki...s).url

windows7-x64

PvZ_Toolki...s).url

windows10-2004-x64

PvZ_Toolki...t).url

windows7-x64

PvZ_Toolki...t).url

windows10-2004-x64

PvZ_Toolki...s).url

windows7-x64

PvZ_Toolki...s).url

windows10-2004-x64

Analysis

max time kernel
122s
max time network
132s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19-02-2024 16:01

Sharing

Copy URL

Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

PvZ_Toolkit_v1.20.3.zip

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

PvZ_Toolkit_v1.20.3.zip

Resource

win10v2004-20231222-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

PvZ_Toolkit_v1.20.3/PvZ_Toolkit_v1.20.3.exe

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

PvZ_Toolkit_v1.20.3/PvZ_Toolkit_v1.20.3.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

PvZ_Toolkit_v1.20.3/PvZ_Toolkit_v1.20.3.exe.asc

Resource

win7-20231215-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral6

Sample

PvZ_Toolkit_v1.20.3/PvZ_Toolkit_v1.20.3.exe.asc

Resource

win10v2004-20231222-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

PvZ_Toolkit_v1.20.3/PvZ_Toolkit_v1.20.3.exe.hash

Resource

win7-20240215-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral8

Sample

PvZ_Toolkit_v1.20.3/PvZ_Toolkit_v1.20.3.exe.hash

Resource

win10v2004-20231222-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

PvZ_Toolkit_v1.20.3/PvZ_Toolkit_v1.20.3_(English).exe

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

PvZ_Toolkit_v1.20.3/PvZ_Toolkit_v1.20.3_(English).exe

Resource

win10v2004-20231222-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

PvZ_Toolkit_v1.20.3/PvZ_Toolkit_v1.20.3_(English).exe.asc

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

PvZ_Toolkit_v1.20.3/PvZ_Toolkit_v1.20.3_(English).exe.asc

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

PvZ_Toolkit_v1.20.3/PvZ_Toolkit_v1.20.3_(English).exe.hash

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

PvZ_Toolkit_v1.20.3/PvZ_Toolkit_v1.20.3_(English).exe.hash

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

PvZ_Toolkit_v1.20.3/builds.yml

Resource

win7-20231215-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral16

Sample

PvZ_Toolkit_v1.20.3/builds.yml

Resource

win10v2004-20231215-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

PvZ_Toolkit_v1.20.3/lineup.yml

Resource

win7-20231215-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral18

Sample

PvZ_Toolkit_v1.20.3/lineup.yml

Resource

win10v2004-20231215-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

PvZ_Toolkit_v1.20.3/splash.png

Resource

win7-20231215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

PvZ_Toolkit_v1.20.3/splash.png

Resource

win10v2004-20231222-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

PvZ_Toolkit_v1.20.3/植僵工具箱网站/HTTPS 根证书/Chain of Trust - Let's Encrypt.url

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

PvZ_Toolkit_v1.20.3/植僵工具箱网站/HTTPS 根证书/Chain of Trust - Let's Encrypt.url

Resource

win10v2004-20231222-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

PvZ_Toolkit_v1.20.3/植僵工具箱网站/HTTPS 根证书/ISRG Root X1.der

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

PvZ_Toolkit_v1.20.3/植僵工具箱网站/HTTPS 根证书/ISRG Root X1.der

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

PvZ_Toolkit_v1.20.3/植僵工具箱网站/HTTPS 根证书/ISRG Root X2.der

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

PvZ_Toolkit_v1.20.3/植僵工具箱网站/HTTPS 根证书/ISRG Root X2.der

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

PvZ_Toolkit_v1.20.3/植僵工具箱网站/下载游戏 (Plants vs. Zombies).url

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

PvZ_Toolkit_v1.20.3/植僵工具箱网站/下载游戏 (Plants vs. Zombies).url

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

PvZ_Toolkit_v1.20.3/植僵工具箱网站/帮助文档 (Help Document).url

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

PvZ_Toolkit_v1.20.3/植僵工具箱网站/帮助文档 (Help Document).url

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

PvZ_Toolkit_v1.20.3/植僵工具箱网站/阵型列表 (Endless Builds).url

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

PvZ_Toolkit_v1.20.3/植僵工具箱网站/阵型列表 (Endless Builds).url

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

PvZ_Toolkit_v1.20.3/植僵工具箱网站/下载游戏 (Plants vs. Zombies).url
Size

60B
MD5

fba69962bb49199d677de9fcc0eefd76
SHA1

2087c762794faa9b5c82fb7efbde8246c2d4c991
SHA256

a6a053d268f5d6a6d036587273aa443def001aabaafdf8ea4b052d128d455f52
SHA512

07899afa6c9dc0e66ead6fca119b673dc279687b186a61e91cfbb049c8947313f89e153da2ff9c89aa4b93d5412be9cf30f7e52e828c9b6dbb6b48d03290234b

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\System32\rundll32.exe
"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL "C:\Users\Admin\AppData\Local\Temp\PvZ_Toolkit_v1.20.3\植僵工具箱网站\下载游戏 (Plants vs. Zombies).url"
1⤵
PID:1948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1948-0-0x00000000001C0000-0x00000000001C1000-memory.dmp

Filesize
4KB

Download