Overview

overview

10

Static

static

3

Reaper.zip

windows7-x64

1

Reaper.zip

windows10-2004-x64

1

Reaper/Rea...er.exe

windows7-x64

1

Reaper/Rea...er.exe

windows10-2004-x64

3

Reaper/Rea...ts.dll

windows7-x64

1

Reaper/Rea...ts.dll

windows10-2004-x64

1

Reaper/Rea...er.exe

windows7-x64

10

Reaper/Rea...er.exe

windows10-2004-x64

10

Reaper/Rea...3.0.js

windows7-x64

1

Reaper/Rea...3.0.js

windows10-2004-x64

1

Reaper/Rea...bot.js

windows7-x64

1

Reaper/Rea...bot.js

windows10-2004-x64

1

Reaper/Rea...bot.js

windows7-x64

1

Reaper/Rea...bot.js

windows10-2004-x64

1

Reaper/Rea... v2.js

windows7-x64

1

Reaper/Rea... v2.js

windows10-2004-x64

1

Reaper/Rea...y 2.js

windows7-x64

1

Reaper/Rea...y 2.js

windows10-2004-x64

1

Reaper/Rea... V3.js

windows7-x64

1

Reaper/Rea... V3.js

windows10-2004-x64

1

Reaper/Rea...or.dll

windows7-x64

1

Reaper/Rea...or.dll

windows10-2004-x64

1

Resubmissions

20-04-2024 17:13

240420-vrrwwadh2z 10

12-03-2024 21:36

240312-1f3f5adc57 10

10-03-2024 04:41

240310-fbmjwscd28 10

10-03-2024 04:40

240310-fan2bscc93 10

10-03-2024 04:38

240310-e9wd1scc82 10

09-03-2024 07:38

240309-jghpnsdh88 10

Analysis

  • max time kernel
    147s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-03-2024 04:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Reaper/Reaper/Scripts/Dex Explorer v2.js

  • Size

    632KB

  • MD5

    317fec7c823a6ba4ad613220b587a0e8

  • SHA1

    3884e8a9a9122e7912c76c919f20c1b9d274f505

  • SHA256

    5573cc6f439511c5ec73b0c88af87bce49cac37475aa32da5b75b931f632a3dc

  • SHA512

    d5adc2137051ab321197d0a2261ab991f5bf16e0271485c64b66679d863efb58191fe269fc40aa39feefd380b28d33168a6910b7ec40dedd2974e6d1d2db0bad

  • SSDEEP

    12288:fyXiPr7Gja8LsZuN6nQRXONQDKZsjOCBkVgfgLcbVgBe28Vk9Gm1OvClEjmD1Szi:fyXiPr7Gja8LsZuN6nQRXONQDKZsjOC0

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe "C:\Users\Admin\AppData\Local\Temp\Reaper\Reaper\Scripts\Dex Explorer v2.js"
    1⤵
      PID:396
    • C:\Windows\system32\rundll32.exe
      "C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe
      1⤵
        PID:3156
      • C:\Windows\System32\svchost.exe
        C:\Windows\System32\svchost.exe -k UnistackSvcGroup
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:3940

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3940-0-0x00000247B6B40000-0x00000247B6B50000-memory.dmp
        Filesize

        64KB

        Download
      • memory/3940-16-0x00000247B6C40000-0x00000247B6C50000-memory.dmp
        Filesize

        64KB

        Download
      • memory/3940-32-0x00000247BEF80000-0x00000247BEF81000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3940-34-0x00000247BEFB0000-0x00000247BEFB1000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3940-35-0x00000247BEFB0000-0x00000247BEFB1000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3940-36-0x00000247BF0C0000-0x00000247BF0C1000-memory.dmp
        Filesize

        4KB

        Download