a7802294cd32041dfd96c31952bf8ebbd9f594704de5ea04e5426d9989c6a437

Submit
Reports

Overview

overview

Static

static

mamosis_v1...tor.js

windows7-x64

mamosis_v1...tor.js

windows10-2004-x64

mamosis_v1...rp.dll

windows7-x64

mamosis_v1...rp.dll

windows10-2004-x64

mamosis_v1...ne.dll

windows7-x64

mamosis_v1...ne.dll

windows10-2004-x64

mamosis_v1...ty.dll

windows7-x64

mamosis_v1...ty.dll

windows10-2004-x64

mamosis_v1...on.dll

windows7-x64

mamosis_v1...on.dll

windows10-2004-x64

mamosis_v1...on.dll

windows7-x64

mamosis_v1...on.dll

windows10-2004-x64

mamosis_v1...re.dll

windows7-x64

mamosis_v1...re.dll

windows10-2004-x64

mamosis_v1...ta.dll

windows7-x64

mamosis_v1...ta.dll

windows10-2004-x64

mamosis_v1...ce.dll

windows7-x64

mamosis_v1...ce.dll

windows10-2004-x64

mamosis_v1...ng.dll

windows7-x64

mamosis_v1...ng.dll

windows10-2004-x64

mamosis_v1...es.dll

windows7-x64

mamosis_v1...es.dll

windows10-2004-x64

mamosis_v1...ns.dll

windows7-x64

mamosis_v1...ns.dll

windows10-2004-x64

mamosis_v1...em.dll

windows7-x64

mamosis_v1...em.dll

windows10-2004-x64

mamosis_v1...on.dll

windows7-x64

mamosis_v1...on.dll

windows10-2004-x64

mamosis_v1...tp.dll

windows7-x64

mamosis_v1...tp.dll

windows10-2004-x64

mamosis_v1...cs.dll

windows7-x64

mamosis_v1...cs.dll

windows10-2004-x64

Analysis

max time kernel
135s
max time network
199s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
21-05-2024 14:00

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.js

Resource

win7-20240508-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.js

Resource

win10v2004-20240226-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/Assembly-CSharp.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/Assembly-CSharp.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/Cinemachine.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/Cinemachine.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/Mono.Security.dll

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/Mono.Security.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.ComponentModel.Composition.dll

Resource

win7-20240220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.ComponentModel.Composition.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.Configuration.dll

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.Configuration.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

16 signatures

150 seconds

Behavioral task

behavioral13

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.Core.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.Core.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.Data.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.Data.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.Diagnostics.StackTrace.dll

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.Diagnostics.StackTrace.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.Drawing.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.Drawing.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.EnterpriseServices.dll

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.EnterpriseServices.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.Globalization.Extensions.dll

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.Globalization.Extensions.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.IO.Compression.FileSystem.dll

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.IO.Compression.FileSystem.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.IO.Compression.dll

Resource

win7-20240419-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.IO.Compression.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.Net.Http.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.Net.Http.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.Numerics.dll

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/Resources/Data/Managed/System.Numerics.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

mamosis_v1.04/mamosis_v1.04_mac/SuperMamonoSisters.app/Contents/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.js
Size

59KB
MD5

f7be9f1841ff92f9d4040aed832e0c79
SHA1

b3e4b508aab3cf201c06892713b43ddb0c43b7ae
SHA256

751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
SHA512

380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
SSDEEP

768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\mamosis_v1.04\mamosis_v1.04_mac\SuperMamonoSisters.app\Contents\MonoBleedingEdge\etc\mono\4.5\DefaultWsdlHelpGenerator.js
1⤵
PID:4492

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3724 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:8
1⤵
PID:5104

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads