37cfc128f60c2c2ede7ffb2db6b9873480e53ecac6184334a2308df477b65be6 | Triage

Submit
Reports

Overview

overview

Static

static

3

xSpoofer-R....0.rar

windows10-2004-x64

7

xSpoofer-R...ys.txt

windows10-2004-x64

1

xSpoofer-R...N8rnm5

windows10-2004-x64

1

xSpoofer-R...or.bat

windows10-2004-x64

9

xSpoofer-R...er.bat

windows10-2004-x64

1

xSpoofer-R...os.bat

windows10-2004-x64

1

xSpoofer-R...23.zip

windows10-2004-x64

1

install_all.bat

windows10-2004-x64

7

vcredist2005_x64.exe

windows10-2004-x64

7

vcredist2005_x86.exe

windows10-2004-x64

7

vcredist2008_x64.exe

windows10-2004-x64

7

vcredist2008_x86.exe

windows10-2004-x64

7

vcredist2010_x64.exe

windows10-2004-x64

7

vcredist2010_x86.exe

windows10-2004-x64

7

vcredist2012_x64.exe

windows10-2004-x64

7

vcredist2012_x86.exe

windows10-2004-x64

7

vcredist2013_x64.exe

windows10-2004-x64

7

vcredist2013_x86.exe

windows10-2004-x64

7

vcredist20...64.exe

windows10-2004-x64

7

vcredist20...86.exe

windows10-2004-x64

7

xSpoofer-R...��.txt

windows10-2004-x64

1

xSpoofer-R...up.exe

windows10-2004-x64

7

xSpoofer-R...up.exe

windows10-2004-x64

7

xSpoofer-R...an.bat

windows10-2004-x64

1

xSpoofer-R...ew.exe

windows10-2004-x64

Analysis

max time kernel
142s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
01-04-2024 10:38

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

xSpoofer-ReleaseNew2.0.rar

Resource

win10v2004-20240226-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

xSpoofer-ReleaseNew2.0/keys.txt

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

xSpoofer-ReleaseNew2.0/rjN8rnm5

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

xSpoofer-ReleaseNew2.0/tools/Fix - Windows 11/1.FixError.bat

Resource

win10v2004-20240226-en

evasion ransomware

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral5

Sample

xSpoofer-ReleaseNew2.0/tools/Fix - Windows 11/2.FixDriver.bat

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

xSpoofer-ReleaseNew2.0/tools/Fix - Windows 11/3.FixBios.bat

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

xSpoofer-ReleaseNew2.0/tools/Visual C++/Visual-C-Runtimes-All-in-One-May-2023.zip

Resource

win10v2004-20240319-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

install_all.bat

Resource

win10v2004-20240226-en

discovery persistence

windows10-2004-x64

20 signatures

150 seconds

Behavioral task

behavioral9

Sample

vcredist2005_x64.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral10

Sample

vcredist2005_x86.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral11

Sample

vcredist2008_x64.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

vcredist2008_x86.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

vcredist2010_x64.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

vcredist2010_x86.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral15

Sample

vcredist2012_x64.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

vcredist2012_x86.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

vcredist2013_x64.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

vcredist2013_x86.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

vcredist2015_2017_2019_2022_x64.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

vcredist2015_2017_2019_2022_x86.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

xSpoofer-ReleaseNew2.0/tools/Visual C++/วิธีติดตั้ง.txt

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

xSpoofer-ReleaseNew2.0/tools/dxwebsetup.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral23

Sample

xSpoofer-ReleaseNew2.0/tools/revosetup.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

xSpoofer-ReleaseNew2.0/tools/xspoofer-clean.bat

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

xSpoofer-ReleaseNew2.0/xSpoofer-new.exe

Resource

win10v2004-20240226-en

xworm evasion rat themida trojan

windows10-2004-x64

18 signatures

150 seconds

Report Analysis Logs

General

Target

xSpoofer-ReleaseNew2.0/tools/xspoofer-clean.bat
Size

563B
MD5

5dac7208934eb5dc67e2ea51c2506528
SHA1

ccc5a26f2a0454cfbb7496faa232116446194394
SHA256

edaf0685c779d332d78cc3a836aa01808eb84aa99252a5b123055a2a4f13a6f3
SHA512

10aa0df67f323ecb06c074ef15932195de1dddf7ed4c4a87b93024e836e99db99d46c6777690092ee756d320f9bc38164f2bbbed03f0b389f39a42ae76a420bf

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\xSpoofer-ReleaseNew2.0\tools\xspoofer-clean.bat"
1⤵
PID:1956

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy