a73f041afa6413f0fd67e9672bc4b956c9be1ca2f4de3bcf6455d5e0d3c67b89 | Triage

Submit
Reports

Overview

overview

Static

static

cryptic to...tic.py

windows7-x64

3

cryptic to...tic.py

windows10-2004-x64

3

cryptic to...up.bat

windows7-x64

1

cryptic to...up.bat

windows10-2004-x64

1

cryptic to...ol.bat

windows7-x64

1

cryptic to...ol.bat

windows10-2004-x64

1

cryptic to...ler.py

windows7-x64

3

cryptic to...ler.py

windows10-2004-x64

3

cryptic to...ler.py

windows7-x64

3

cryptic to...ler.py

windows10-2004-x64

3

cryptic to...nfo.py

windows7-x64

3

cryptic to...nfo.py

windows10-2004-x64

3

cryptic to...gin.py

windows7-x64

3

cryptic to...gin.py

windows10-2004-x64

3

cryptic to...ker.py

windows7-x64

3

cryptic to...ker.py

windows10-2004-x64

3

cryptic to...rdm.py

windows7-x64

3

cryptic to...rdm.py

windows10-2004-x64

3

cryptic to...ger.py

windows7-x64

3

cryptic to...ger.py

windows10-2004-x64

3

cryptic to...kup.py

windows7-x64

3

cryptic to...kup.py

windows10-2004-x64

3

cryptic to...sdm.py

windows7-x64

3

cryptic to...sdm.py

windows10-2004-x64

3

cryptic to...mer.py

windows7-x64

3

cryptic to...mer.py

windows10-2004-x64

3

cryptic to...gen.py

windows7-x64

3

cryptic to...gen.py

windows10-2004-x64

3

cryptic to...pam.py

windows7-x64

3

cryptic to...pam.py

windows10-2004-x64

3

cryptic to...ver.py

windows7-x64

3

cryptic to...ver.py

windows10-2004-x64

3

Analysis

max time kernel
137s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
11-05-2024 13:37

Sharing

Static task

static1

pyinstaller privateloader crealstealer

5 signatures

Behavioral task

behavioral1

Sample

cryptic tool/cryptic.py

Resource

win7-20240221-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

cryptic tool/cryptic.py

Resource

win10v2004-20240426-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

cryptic tool/setup.bat

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

cryptic tool/setup.bat

Resource

win10v2004-20240426-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

cryptic tool/start_tool.bat

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

cryptic tool/start_tool.bat

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

cryptic tool/util/10_AccountDisabler/accountdisabler.py

Resource

win7-20240508-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral8

Sample

cryptic tool/util/10_AccountDisabler/accountdisabler.py

Resource

win10v2004-20240426-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

cryptic tool/util/12_SettingsCycler/settingscycler.py

Resource

win7-20240221-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral10

Sample

cryptic tool/util/12_SettingsCycler/settingscycler.py

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

cryptic tool/util/13_TokenInfo/tokeninfo.py

Resource

win7-20240508-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

cryptic tool/util/13_TokenInfo/tokeninfo.py

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

cryptic tool/util/14_AutoLogin/autologin.py

Resource

win7-20240419-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

cryptic tool/util/14_AutoLogin/autologin.py

Resource

win10v2004-20240426-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

cryptic tool/util/15_TokensChecker/tokenschecker.py

Resource

win7-20240221-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral16

Sample

cryptic tool/util/15_TokensChecker/tokenschecker.py

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

cryptic tool/util/16_ClearDM/cleardm.py

Resource

win7-20231129-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral18

Sample

cryptic tool/util/16_ClearDM/cleardm.py

Resource

win10v2004-20240426-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

cryptic tool/util/17_HouseChanger/housechanger.py

Resource

win7-20240221-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral20

Sample

cryptic tool/util/17_HouseChanger/housechanger.py

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

cryptic tool/util/18_ServerLookup/serverlookup.py

Resource

win7-20240220-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral22

Sample

cryptic tool/util/18_ServerLookup/serverlookup.py

Resource

win10v2004-20240426-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

cryptic tool/util/19_MassDM/massdm.py

Resource

win7-20240508-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral24

Sample

cryptic tool/util/19_MassDM/massdm.py

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

cryptic tool/util/20_GroupSpammer/groupspammer.py

Resource

win7-20240221-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral26

Sample

cryptic tool/util/20_GroupSpammer/groupspammer.py

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

cryptic tool/util/21_NitroGen/nitrogen.py

Resource

win7-20240221-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral28

Sample

cryptic tool/util/21_NitroGen/nitrogen.py

Resource

win10v2004-20240426-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

cryptic tool/util/22_WebHSpam/webhspam.py

Resource

win7-20240419-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral30

Sample

cryptic tool/util/22_WebHSpam/webhspam.py

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

cryptic tool/util/23_WebHRemover/webhremover.py

Resource

win7-20240221-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral32

Sample

cryptic tool/util/23_WebHRemover/webhremover.py

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

cryptic tool/start_tool.bat
Size

23B
MD5

1459dcbf598727693db5c9df49429b5b
SHA1

744cf0802914ae519843227386b419e7be9cfc49
SHA256

4f414970ae6de23e78cce1f53ce5fe2864cee8c3b2e556011ec45b009f27cd04
SHA512

09cf8dc2bf3e771523fd6f475ef7f538f74614482a70b77a17d0c85becc31c7f0f73f5d098887e0ce5b885e650463df6ba30ca063905ca6984f6d96dcfcab7e5

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\cryptic tool\start_tool.bat"
1⤵
PID:3924

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3776 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:8
1⤵
PID:3108

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy