7270e81ff76322c4fe062d629051d369e6cf8d7bbe86f226c662daea1e7fbd9b

Submit
Reports

Overview

overview

Static

static

MonoBleedi...tor.js

windows10-2004-x64

MonoBleedi...tor.js

windows10-2004-x64

Theory of ...ng.exe

windows10-2004-x64

Theory of ...er.dll

windows10-2004-x64

Theory of ...gc.dll

windows10-2004-x64

Theory of ...tor.js

windows10-2004-x64

Theory of ...tor.js

windows10-2004-x64

Theory of ...tor.js

windows10-2004-x64

Theory of ...ng.exe

windows10-2004-x64

Theory of ...rp.dll

windows10-2004-x64

Theory of ...ty.dll

windows10-2004-x64

Theory of ...on.dll

windows10-2004-x64

Theory of ...on.dll

windows10-2004-x64

Theory of ...re.dll

windows10-2004-x64

Theory of ...ta.dll

windows10-2004-x64

Theory of ...ce.dll

windows10-2004-x64

Theory of ...ng.dll

windows10-2004-x64

Theory of ...es.dll

windows10-2004-x64

Theory of ...ns.dll

windows10-2004-x64

Theory of ...em.dll

windows10-2004-x64

Theory of ...on.dll

windows10-2004-x64

Theory of ...tp.dll

windows10-2004-x64

Theory of ...cs.dll

windows10-2004-x64

Theory of ...ml.dll

windows10-2004-x64

Theory of ...on.dll

windows10-2004-x64

Theory of ...ls.dll

windows10-2004-x64

Theory of ...ns.dll

windows10-2004-x64

Theory of ...nq.dll

windows10-2004-x64

Theory of ...nt.dll

windows10-2004-x64

Theory of ...ml.dll

windows10-2004-x64

Theory of ...em.dll

windows10-2004-x64

Theory of ...me.dll

windows10-2004-x64

Analysis

max time kernel
4s
max time network
9s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
14/05/2024, 12:29

Sharing

Copy URL

Twitter E-mail

Static task

static1

pyinstaller crealstealer

4 signatures

Behavioral task

behavioral1

Sample

MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.js

Resource

win10v2004-20240426-en

execution

windows10-2004-x64

1 signatures

1800 seconds

Behavioral task

behavioral2

Sample

MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.js

Resource

win10v2004-20240426-en

execution pyinstaller spyware stealer

windows10-2004-x64

22 signatures

1800 seconds

Behavioral task

behavioral3

Sample

Theory of Everything.exe

Resource

win10v2004-20240508-en

spyware

windows10-2004-x64

12 signatures

1800 seconds

Behavioral task

behavioral4

Sample

Theory of Everything_Data/MonoBleedingEdge/EmbedRuntime/MonoPosixHelper.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral5

Sample

Theory of Everything_Data/MonoBleedingEdge/EmbedRuntime/mono-2.0-bdwgc.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral6

Sample

Theory of Everything_Data/MonoBleedingEdge/etc/mono/2.0/DefaultWsdlHelpGenerator.js

Resource

win10v2004-20240226-en

execution

windows10-2004-x64

1 signatures

1800 seconds

Behavioral task

behavioral7

Sample

Theory of Everything_Data/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.js

Resource

win10v2004-20240426-en

execution

windows10-2004-x64

1 signatures

1800 seconds

Behavioral task

behavioral8

Sample

Theory of Everything_Data/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.js

Resource

win10v2004-20240508-en

execution

windows10-2004-x64

1 signatures

1800 seconds

Behavioral task

behavioral9

Sample

Theory of Everything_Data/Theory of Everything.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

3 signatures

1800 seconds

Behavioral task

behavioral10

Sample

Theory of Everything_Data/Theory of Everything_Data/Managed/Assembly-CSharp.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral11

Sample

Theory of Everything_Data/Theory of Everything_Data/Managed/Mono.Security.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral12

Sample

Theory of Everything_Data/Theory of Everything_Data/Managed/System.ComponentModel.Composition.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral13

Sample

Theory of Everything_Data/Theory of Everything_Data/Managed/System.Configuration.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral14

Sample

Theory of Everything_Data/Theory of Everything_Data/Managed/System.Core.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral15

Sample

Theory of Everything_Data/Theory of Everything_Data/Managed/System.Data.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral16

Sample

Theory of Everything_Data/Theory of Everything_Data/Managed/System.Diagnostics.StackTrace.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral17

Sample

Theory of Everything_Data/Theory of Everything_Data/Managed/System.Drawing.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral18

Sample

Theory of Everything_Data/Theory of Everything_Data/Managed/System.EnterpriseServices.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral19

Sample

Theory of Everything_Data/Theory of Everything_Data/Managed/System.Globalization.Extensions.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral20

Sample

Theory of Everything_Data/Theory of Everything_Data/Managed/System.IO.Compression.FileSystem.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral21

Sample

Theory of Everything_Data/Theory of Everything_Data/Managed/System.IO.Compression.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral22

Sample

Theory of Everything_Data/Theory of Everything_Data/Managed/System.Net.Http.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral23

Sample

Theory of Everything_Data/Theory of Everything_Data/Managed/System.Numerics.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral24

Sample

Theory of Everything_Data/Theory of Everything_Data/Managed/System.Runtime.Serialization.Xml.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral25

Sample

Theory of Everything_Data/Theory of Everything_Data/Managed/System.Runtime.Serialization.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral26

Sample

Theory of Everything_Data/Theory of Everything_Data/Managed/System.ServiceModel.Internals.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral27

Sample

Theory of Everything_Data/Theory of Everything_Data/Managed/System.Transactions.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral28

Sample

Theory of Everything_Data/Theory of Everything_Data/Managed/System.Xml.Linq.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral29

Sample

Theory of Everything_Data/Theory of Everything_Data/Managed/System.Xml.XPath.XDocument.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral30

Sample

Theory of Everything_Data/Theory of Everything_Data/Managed/System.Xml.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral31

Sample

Theory of Everything_Data/Theory of Everything_Data/Managed/System.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

1800 seconds

Behavioral task

behavioral32

Sample

Theory of Everything_Data/Theory of Everything_Data/Managed/Unity.2D.Animation.Runtime.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

1800 seconds

Report Analysis Logs

General

Target

MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.js
Size

59KB
MD5

f7be9f1841ff92f9d4040aed832e0c79
SHA1

b3e4b508aab3cf201c06892713b43ddb0c43b7ae
SHA256

751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
SHA512

380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
SSDEEP

768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\MonoBleedingEdge\etc\mono\4.0\DefaultWsdlHelpGenerator.js
1⤵
PID:692

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads