37cfc128f60c2c2ede7ffb2db6b9873480e53ecac6184334a2308df477b65be6 | Triage

Submit
Reports

Overview

overview

Static

static

3

xSpoofer-R....0.rar

windows10-2004-x64

7

xSpoofer-R...ys.txt

windows10-2004-x64

1

xSpoofer-R...N8rnm5

windows10-2004-x64

1

xSpoofer-R...or.bat

windows10-2004-x64

9

xSpoofer-R...er.bat

windows10-2004-x64

1

xSpoofer-R...os.bat

windows10-2004-x64

1

xSpoofer-R...23.zip

windows10-2004-x64

1

install_all.bat

windows10-2004-x64

7

vcredist2005_x64.exe

windows10-2004-x64

7

vcredist2005_x86.exe

windows10-2004-x64

7

vcredist2008_x64.exe

windows10-2004-x64

7

vcredist2008_x86.exe

windows10-2004-x64

7

vcredist2010_x64.exe

windows10-2004-x64

7

vcredist2010_x86.exe

windows10-2004-x64

7

vcredist2012_x64.exe

windows10-2004-x64

7

vcredist2012_x86.exe

windows10-2004-x64

7

vcredist2013_x64.exe

windows10-2004-x64

7

vcredist2013_x86.exe

windows10-2004-x64

7

vcredist20...64.exe

windows10-2004-x64

7

vcredist20...86.exe

windows10-2004-x64

7

xSpoofer-R...��.txt

windows10-2004-x64

1

xSpoofer-R...up.exe

windows10-2004-x64

7

xSpoofer-R...up.exe

windows10-2004-x64

7

xSpoofer-R...an.bat

windows10-2004-x64

1

xSpoofer-R...ew.exe

windows10-2004-x64

Analysis

max time kernel
92s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
01-04-2024 10:38

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

xSpoofer-ReleaseNew2.0.rar

Resource

win10v2004-20240226-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

xSpoofer-ReleaseNew2.0/keys.txt

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

xSpoofer-ReleaseNew2.0/rjN8rnm5

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

xSpoofer-ReleaseNew2.0/tools/Fix - Windows 11/1.FixError.bat

Resource

win10v2004-20240226-en

evasion ransomware

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral5

Sample

xSpoofer-ReleaseNew2.0/tools/Fix - Windows 11/2.FixDriver.bat

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

xSpoofer-ReleaseNew2.0/tools/Fix - Windows 11/3.FixBios.bat

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

xSpoofer-ReleaseNew2.0/tools/Visual C++/Visual-C-Runtimes-All-in-One-May-2023.zip

Resource

win10v2004-20240319-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

install_all.bat

Resource

win10v2004-20240226-en

discovery persistence

windows10-2004-x64

20 signatures

150 seconds

Behavioral task

behavioral9

Sample

vcredist2005_x64.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral10

Sample

vcredist2005_x86.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral11

Sample

vcredist2008_x64.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

vcredist2008_x86.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

vcredist2010_x64.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

vcredist2010_x86.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral15

Sample

vcredist2012_x64.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

vcredist2012_x86.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

vcredist2013_x64.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

vcredist2013_x86.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

vcredist2015_2017_2019_2022_x64.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

vcredist2015_2017_2019_2022_x86.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

xSpoofer-ReleaseNew2.0/tools/Visual C++/วิธีติดตั้ง.txt

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

xSpoofer-ReleaseNew2.0/tools/dxwebsetup.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral23

Sample

xSpoofer-ReleaseNew2.0/tools/revosetup.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

xSpoofer-ReleaseNew2.0/tools/xspoofer-clean.bat

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

xSpoofer-ReleaseNew2.0/xSpoofer-new.exe

Resource

win10v2004-20240226-en

xworm evasion rat themida trojan

windows10-2004-x64

18 signatures

150 seconds

Report Analysis Logs

General

Target

xSpoofer-ReleaseNew2.0/rjN8rnm5
Size

41B
MD5

9eab77cb455ac5af5ee33f2b58b87c5e
SHA1

8746ced0cdcc6ccc9ced7f76d602f2099ec498ad
SHA256

18fc489631a79742394ea3c099b55b1fc02f707b8d6b306c3156a1614963c222
SHA512

28ecfe4f2df01ee29793522a6882a1644c311a716468549698f5b769b4942399f79ee3c45152f4c780391fff5b2f7cab68df32ff1c4bdd344249d52adfe40e28

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\xSpoofer-ReleaseNew2.0\rjN8rnm5
1⤵
PID:4624

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy