460550950795698b91eca429b99fe023999af2edf205d67d6462c190e1f4e6ca

Submit
Reports

Overview

overview

Static

static

OSbot judi...ve.pdf

windows7-x64

OSbot judi...ve.pdf

windows10-2004-x64

OSbot judi...rd.pdf

windows7-x64

OSbot judi...rd.pdf

windows10-2004-x64

OSbot judi...nd.pdf

windows7-x64

OSbot judi...nd.pdf

windows10-2004-x64

OSbot judi...lp.pdf

windows7-x64

OSbot judi...lp.pdf

windows10-2004-x64

OSbot judi...me.pdf

windows7-x64

OSbot judi...me.pdf

windows10-2004-x64

OSbot judi...ib.pdf

windows7-x64

OSbot judi...ib.pdf

windows10-2004-x64

OSbot judi...ve.pdf

windows7-x64

OSbot judi...ve.pdf

windows10-2004-x64

OSbot judi...ns.pdf

windows7-x64

OSbot judi...ns.pdf

windows10-2004-x64

OSbot judi...ts.pdf

windows7-x64

OSbot judi...ts.pdf

windows10-2004-x64

OSbot judi...ct.pdf

windows7-x64

OSbot judi...ct.pdf

windows10-2004-x64

OSbot judi...t__.py

windows7-x64

OSbot judi...t__.py

windows10-2004-x64

OSbot judi...10.pyc

windows7-x64

OSbot judi...10.pyc

windows10-2004-x64

OSbot judi...10.pyc

windows7-x64

OSbot judi...10.pyc

windows10-2004-x64

OSbot judi...10.pyc

windows7-x64

OSbot judi...10.pyc

windows10-2004-x64

OSbot judi...bot.py

windows7-x64

OSbot judi...bot.py

windows10-2004-x64

OSbot judi...t__.py

windows7-x64

OSbot judi...t__.py

windows10-2004-x64

Resubmissions

03/05/2024, 18:40

240503-xa7xwagb26 10

03/05/2024, 18:19

240503-wynngach5t 10

03/05/2024, 15:38

240503-s26fxaad2t 10

Analysis

max time kernel
5s
max time network
7s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
03/05/2024, 18:19

Sharing

Copy URL

Twitter E-mail

Static task

static1

pyinstaller privateloader

3 signatures

Behavioral task

behavioral1

Sample

OSbot judicable/_internal/matplotlib/mpl-data/images/filesave.pdf

Resource

win7-20240215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

OSbot judicable/_internal/matplotlib/mpl-data/images/filesave.pdf

Resource

win10v2004-20240419-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral3

Sample

OSbot judicable/_internal/matplotlib/mpl-data/images/forward.pdf

Resource

win7-20240220-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

OSbot judicable/_internal/matplotlib/mpl-data/images/forward.pdf

Resource

win10v2004-20240419-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral5

Sample

OSbot judicable/_internal/matplotlib/mpl-data/images/hand.pdf

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

OSbot judicable/_internal/matplotlib/mpl-data/images/hand.pdf

Resource

win10v2004-20240226-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral7

Sample

OSbot judicable/_internal/matplotlib/mpl-data/images/help.pdf

Resource

win7-20240215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

OSbot judicable/_internal/matplotlib/mpl-data/images/help.pdf

Resource

win10v2004-20240419-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

OSbot judicable/_internal/matplotlib/mpl-data/images/home.pdf

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

OSbot judicable/_internal/matplotlib/mpl-data/images/home.pdf

Resource

win10v2004-20240419-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral11

Sample

OSbot judicable/_internal/matplotlib/mpl-data/images/matplotlib.pdf

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

OSbot judicable/_internal/matplotlib/mpl-data/images/matplotlib.pdf

Resource

win10v2004-20240426-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral13

Sample

OSbot judicable/_internal/matplotlib/mpl-data/images/move.pdf

Resource

win7-20231129-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

OSbot judicable/_internal/matplotlib/mpl-data/images/move.pdf

Resource

win10v2004-20240419-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral15

Sample

OSbot judicable/_internal/matplotlib/mpl-data/images/qt4_editor_options.pdf

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

OSbot judicable/_internal/matplotlib/mpl-data/images/qt4_editor_options.pdf

Resource

win10v2004-20240419-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral17

Sample

OSbot judicable/_internal/matplotlib/mpl-data/images/subplots.pdf

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

OSbot judicable/_internal/matplotlib/mpl-data/images/subplots.pdf

Resource

win10v2004-20240419-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral19

Sample

OSbot judicable/_internal/matplotlib/mpl-data/images/zoom_to_rect.pdf

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

OSbot judicable/_internal/matplotlib/mpl-data/images/zoom_to_rect.pdf

Resource

win10v2004-20240419-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral21

Sample

OSbot judicable/_internal/model/__init__.py

Resource

win7-20240221-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

OSbot judicable/_internal/model/__init__.py

Resource

win10v2004-20240226-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral23

Sample

OSbot judicable/_internal/model/__pycache__/__init__.cpython-310.pyc

Resource

win7-20231129-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

OSbot judicable/_internal/model/__pycache__/__init__.cpython-310.pyc

Resource

win10v2004-20240426-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

OSbot judicable/_internal/model/__pycache__/bot.cpython-310.pyc

Resource

win7-20240215-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral26

Sample

OSbot judicable/_internal/model/__pycache__/bot.cpython-310.pyc

Resource

win10v2004-20240419-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

OSbot judicable/_internal/model/__pycache__/runelite_bot.cpython-310.pyc

Resource

win7-20240221-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

OSbot judicable/_internal/model/__pycache__/runelite_bot.cpython-310.pyc

Resource

win10v2004-20240419-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

OSbot judicable/_internal/model/bot.py

Resource

win7-20240221-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral30

Sample

OSbot judicable/_internal/model/bot.py

Resource

win10v2004-20240419-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

OSbot judicable/_internal/model/near_reality/__init__.py

Resource

win7-20231129-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral32

Sample

OSbot judicable/_internal/model/near_reality/__init__.py

Resource

win10v2004-20240419-en

windows10-2004-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

OSbot judicable/_internal/matplotlib/mpl-data/images/home.pdf
Size

1KB
MD5

941072b3b1e26b7d10a00fa51828b28c
SHA1

6d1edf50c1c8f4100a3189aa8e210bb0eb511dfa
SHA256

7b47b4a48f9746d3e6bd4096d954ca2f50de62ed69bcf99451e4528046d69a29
SHA512

a04c9c986f1b9cc0dc5a78210bc6b9576e9b914d3c7eb6904f1875b491167f91ad9ebe47a0dca3a3af52a4a8fde13e411d961b3a90c3bd5e0a17b9523c5632b1

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2032	AcroRd32.exe
2032	AcroRd32.exe
2032	AcroRd32.exe

Processes

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\OSbot judicable\_internal\matplotlib\mpl-data\images\home.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
d81e96232d82223f48f48bac534a1505

SHA1
b5fdd307be22ab63c6402005978d8169976f1038

SHA256
1dcf13da75f7f89b61553dde591fce8870ff3e4b8998fac2c6ea75607cd72c36

SHA512
8501953e23579d29f7d024e5204c79bb6d965dca493caecf0b5365736dbf97881c0f6558c6d8b466008533ef4a3be13596b914c3fb193dd04b6703aa2350c79b

Download Submit