Overview
overview
3Static
static
1cffi-1.16....64.zip
windows7-x64
1cffi-1.16....64.zip
windows10-2004-x64
1_cffi_back...gnu.so
ubuntu-22.04-amd64
1cffi-1.16....ICENSE
windows7-x64
1cffi-1.16....ICENSE
windows10-2004-x64
1cffi-1.16....TADATA
windows7-x64
1cffi-1.16....TADATA
windows10-2004-x64
1cffi-1.16....RECORD
windows7-x64
1cffi-1.16....RECORD
windows10-2004-x64
1cffi-1.16..../WHEEL
windows7-x64
1cffi-1.16..../WHEEL
windows10-2004-x64
1cffi-1.16....ts.txt
windows7-x64
1cffi-1.16....ts.txt
windows10-2004-x64
1cffi-1.16....el.txt
windows7-x64
1cffi-1.16....el.txt
windows10-2004-x64
1cffi/__init__.py
windows7-x64
3cffi/__init__.py
windows10-2004-x64
3cffi/_cffi_errors.h
windows7-x64
3cffi/_cffi_errors.h
windows10-2004-x64
3cffi/_cffi_include.h
windows7-x64
3cffi/_cffi_include.h
windows10-2004-x64
3cffi/_embedding.h
windows7-x64
3cffi/_embedding.h
windows10-2004-x64
3cffi/_imp_...ion.py
windows7-x64
3cffi/_imp_...ion.py
windows10-2004-x64
3cffi/_shim...ils.py
windows7-x64
3cffi/_shim...ils.py
windows10-2004-x64
3cffi/api.py
windows7-x64
3cffi/api.py
windows10-2004-x64
3cffi/backe...pes.py
windows7-x64
3cffi/backe...pes.py
windows10-2004-x64
3cffi/cffi_opcode.py
windows7-x64
3Analysis
-
max time kernel
142s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
30/05/2024, 06:10
Static task
static1
Behavioral task
behavioral1
Sample
cffi-1.16.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.zip
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
cffi-1.16.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.zip
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
_cffi_backend.cpython-39-x86_64-linux-gnu.so
Resource
ubuntu2204-amd64-20240522.1-en
Behavioral task
behavioral4
Sample
cffi-1.16.0.dist-info/LICENSE
Resource
win7-20240221-en
Behavioral task
behavioral5
Sample
cffi-1.16.0.dist-info/LICENSE
Resource
win10v2004-20240426-en
Behavioral task
behavioral6
Sample
cffi-1.16.0.dist-info/METADATA
Resource
win7-20240221-en
Behavioral task
behavioral7
Sample
cffi-1.16.0.dist-info/METADATA
Resource
win10v2004-20240226-en
Behavioral task
behavioral8
Sample
cffi-1.16.0.dist-info/RECORD
Resource
win7-20240508-en
Behavioral task
behavioral9
Sample
cffi-1.16.0.dist-info/RECORD
Resource
win10v2004-20240426-en
Behavioral task
behavioral10
Sample
cffi-1.16.0.dist-info/WHEEL
Resource
win7-20240508-en
Behavioral task
behavioral11
Sample
cffi-1.16.0.dist-info/WHEEL
Resource
win10v2004-20240508-en
Behavioral task
behavioral12
Sample
cffi-1.16.0.dist-info/entry_points.txt
Resource
win7-20240215-en
Behavioral task
behavioral13
Sample
cffi-1.16.0.dist-info/entry_points.txt
Resource
win10v2004-20240426-en
Behavioral task
behavioral14
Sample
cffi-1.16.0.dist-info/top_level.txt
Resource
win7-20240221-en
Behavioral task
behavioral15
Sample
cffi-1.16.0.dist-info/top_level.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral16
Sample
cffi/__init__.py
Resource
win7-20240508-en
Behavioral task
behavioral17
Sample
cffi/__init__.py
Resource
win10v2004-20240508-en
Behavioral task
behavioral18
Sample
cffi/_cffi_errors.h
Resource
win7-20240220-en
Behavioral task
behavioral19
Sample
cffi/_cffi_errors.h
Resource
win10v2004-20240508-en
Behavioral task
behavioral20
Sample
cffi/_cffi_include.h
Resource
win7-20240221-en
Behavioral task
behavioral21
Sample
cffi/_cffi_include.h
Resource
win10v2004-20240508-en
Behavioral task
behavioral22
Sample
cffi/_embedding.h
Resource
win7-20240221-en
Behavioral task
behavioral23
Sample
cffi/_embedding.h
Resource
win10v2004-20240226-en
Behavioral task
behavioral24
Sample
cffi/_imp_emulation.py
Resource
win7-20240221-en
Behavioral task
behavioral25
Sample
cffi/_imp_emulation.py
Resource
win10v2004-20240508-en
Behavioral task
behavioral26
Sample
cffi/_shimmed_dist_utils.py
Resource
win7-20240508-en
Behavioral task
behavioral27
Sample
cffi/_shimmed_dist_utils.py
Resource
win10v2004-20240426-en
Behavioral task
behavioral28
Sample
cffi/api.py
Resource
win7-20240419-en
Behavioral task
behavioral29
Sample
cffi/api.py
Resource
win10v2004-20240508-en
Behavioral task
behavioral30
Sample
cffi/backend_ctypes.py
Resource
win7-20240215-en
Behavioral task
behavioral31
Sample
cffi/backend_ctypes.py
Resource
win10v2004-20240426-en
Behavioral task
behavioral32
Sample
cffi/cffi_opcode.py
Resource
win7-20240220-en
General
-
Target
cffi-1.16.0.dist-info/METADATA
-
Size
1KB
-
MD5
2b4a69c2c5594b6985773f8813c399a0
-
SHA1
d2701aa881909fdc42bb6d8f8f45fbde4c6b7dd8
-
SHA256
a8e048da2d2a4a52ce2b09b33636c97cb9ab4f31d5fc9152eee29b7058ffa7d6
-
SHA512
8fb2617e957bc3ed26b611938a351ef63384b1c3d084e6dd59e0929774cb7f2e4d8a47f4ff034515bf0e7312bad816864fac927856de9eced7e148064dacbb31
Malware Config
Signatures
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\cffi-1.16.0.dist-info\METADATA1⤵PID:1104
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1416 --field-trial-handle=3240,i,13319578961094268484,16557498665191861597,262144 --variations-seed-version /prefetch:81⤵PID:4696