Overview
overview
7Static
static
1COD Encout...ar.bat
windows7-x64
7COD Encout...ar.bat
windows10-2004-x64
1COD Encout...up.exe
windows7-x64
7COD Encout...up.exe
windows10-2004-x64
7COD Encout...ll.bat
windows7-x64
7COD Encout...ll.bat
windows10-2004-x64
7COD Encout...64.exe
windows7-x64
7COD Encout...64.exe
windows10-2004-x64
7COD Encout...86.exe
windows7-x64
7COD Encout...86.exe
windows10-2004-x64
7COD Encout...64.exe
windows7-x64
7COD Encout...64.exe
windows10-2004-x64
7COD Encout...86.exe
windows7-x64
7COD Encout...86.exe
windows10-2004-x64
7COD Encout...64.exe
windows7-x64
7COD Encout...64.exe
windows10-2004-x64
7COD Encout...86.exe
windows7-x64
7COD Encout...86.exe
windows10-2004-x64
7COD Encout...64.exe
windows7-x64
7COD Encout...64.exe
windows10-2004-x64
7COD Encout...86.exe
windows7-x64
7COD Encout...86.exe
windows10-2004-x64
7COD Encout...64.exe
windows7-x64
7COD Encout...64.exe
windows10-2004-x64
7COD Encout...86.exe
windows7-x64
7COD Encout...86.exe
windows10-2004-x64
7COD Encout...64.exe
windows7-x64
7COD Encout...64.exe
windows10-2004-x64
7COD Encout...86.exe
windows7-x64
7COD Encout...86.exe
windows10-2004-x64
7COD Encout...pl.exe
windows7-x64
1COD Encout...pl.exe
windows10-2004-x64
1Analysis
-
max time kernel
120s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
07-03-2024 22:29
Static task
static1
Behavioral task
behavioral1
Sample
COD Encoutered error/COD Encoutered error/Clear.bat
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
COD Encoutered error/COD Encoutered error/Clear.bat
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
COD Encoutered error/COD Encoutered error/Dx 12/dxwebsetup.exe
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
COD Encoutered error/COD Encoutered error/Dx 12/dxwebsetup.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
COD Encoutered error/COD Encoutered error/Visual Retributions!/install_all.bat
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
COD Encoutered error/COD Encoutered error/Visual Retributions!/install_all.bat
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
COD Encoutered error/COD Encoutered error/Visual Retributions!/vcredist2005_x64.exe
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
COD Encoutered error/COD Encoutered error/Visual Retributions!/vcredist2005_x64.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
COD Encoutered error/COD Encoutered error/Visual Retributions!/vcredist2005_x86.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
COD Encoutered error/COD Encoutered error/Visual Retributions!/vcredist2005_x86.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
COD Encoutered error/COD Encoutered error/Visual Retributions!/vcredist2008_x64.exe
Resource
win7-20240215-en
Behavioral task
behavioral12
Sample
COD Encoutered error/COD Encoutered error/Visual Retributions!/vcredist2008_x64.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
COD Encoutered error/COD Encoutered error/Visual Retributions!/vcredist2008_x86.exe
Resource
win7-20240220-en
Behavioral task
behavioral14
Sample
COD Encoutered error/COD Encoutered error/Visual Retributions!/vcredist2008_x86.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
COD Encoutered error/COD Encoutered error/Visual Retributions!/vcredist2010_x64.exe
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
COD Encoutered error/COD Encoutered error/Visual Retributions!/vcredist2010_x64.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
COD Encoutered error/COD Encoutered error/Visual Retributions!/vcredist2010_x86.exe
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
COD Encoutered error/COD Encoutered error/Visual Retributions!/vcredist2010_x86.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
COD Encoutered error/COD Encoutered error/Visual Retributions!/vcredist2012_x64.exe
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
COD Encoutered error/COD Encoutered error/Visual Retributions!/vcredist2012_x64.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
COD Encoutered error/COD Encoutered error/Visual Retributions!/vcredist2012_x86.exe
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
COD Encoutered error/COD Encoutered error/Visual Retributions!/vcredist2012_x86.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
COD Encoutered error/COD Encoutered error/Visual Retributions!/vcredist2013_x64.exe
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
COD Encoutered error/COD Encoutered error/Visual Retributions!/vcredist2013_x64.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
COD Encoutered error/COD Encoutered error/Visual Retributions!/vcredist2013_x86.exe
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
COD Encoutered error/COD Encoutered error/Visual Retributions!/vcredist2013_x86.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
COD Encoutered error/COD Encoutered error/Visual Retributions!/vcredist2015_2017_2019_x64.exe
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
COD Encoutered error/COD Encoutered error/Visual Retributions!/vcredist2015_2017_2019_x64.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
COD Encoutered error/COD Encoutered error/Visual Retributions!/vcredist2015_2017_2019_x86.exe
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
COD Encoutered error/COD Encoutered error/Visual Retributions!/vcredist2015_2017_2019_x86.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
COD Encoutered error/COD Encoutered error/dxcpl.exe
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
COD Encoutered error/COD Encoutered error/dxcpl.exe
Resource
win10v2004-20240226-en
General
-
Target
COD Encoutered error/COD Encoutered error/Clear.bat
-
Size
1KB
-
MD5
4bc8a0f0f0a1d7a9b886eaf7062b1f9b
-
SHA1
b39b85c8dd009e0f902b0508d68df04da831b52a
-
SHA256
0fa041ac611b581a0d66f8b81e590decb2a28c1682a6e975fdb0b0db20d72a07
-
SHA512
8f96ef74fec62b62505e31e0a6046cf864e401d7e964b515b60148062d1fad6b139f7ff8df5159b1e0fff18df0f6f022896cc2ec035d6cdedcdb6ae5ce913a3c
Malware Config
Signatures
-
Deletes itself 1 IoCs
Processes:
cmd.exepid process 2848 cmd.exe -
Drops file in Windows directory 1 IoCs
Processes:
cmd.exedescription ioc process File opened for modification C:\Windows\Prefetch\READYB~1\READYB~1.ETL cmd.exe