f350bc1bfee147221881ea40a05aaa188806bf1461c2175dfcd1b0be127fff2b

Submit
Reports

Overview

overview

Static

static

McTools 2.zip

windows10-1703-x64

McTools 2/...eys.js

windows10-1703-x64

McTools 2/...ace.js

windows10-1703-x64

McTools 2/...ils.js

windows10-1703-x64

McTools 2/...pt.dll

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...pt.dll

windows10-1703-x64

McTools 2/...ram.js

windows10-1703-x64

McTools 2/...er.vbs

windows10-1703-x64

McTools 2/...es.vbs

windows10-1703-x64

McTools 2/...pt.dll

windows10-1703-x64

McTools 2/...or.exe

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...or.exe

windows10-1703-x64

McTools 2/...pt.dll

windows10-1703-x64

McTools 2/...or.exe

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...or.exe

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

Analysis

max time kernel
315s
max time network
1576s
platform
windows10-1703_x64
resource
win10-20240404-es
resource tags

arch:x64arch:x86image:win10-20240404-eslocale:es-esos:windows10-1703-x64systemwindows
submitted
30-05-2024 11:54

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

McTools 2.zip

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral2

Sample

McTools 2/McCrypt/Keys.js

Resource

win10-20240404-es

execution

windows10-1703-x64

11 signatures

1800 seconds

Behavioral task

behavioral3

Sample

McTools 2/McCrypt/Marketplace.js

Resource

win10-20240404-es

execution

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral4

Sample

McTools 2/McCrypt/Utils.js

Resource

win10-20240404-es

execution

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral5

Sample

McTools 2/McCrypt/bin/Debug/LibMcCrypt.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral6

Sample

McTools 2/McCrypt/bin/Debug/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral7

Sample

McTools 2/McCrypt/obj/Debug/LibMcCrypt.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral8

Sample

McTools 2/McDecryptor/Program.js

Resource

win10-20240404-es

execution

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral9

Sample

McTools 2/McDecryptor/Properties/Resources.Designer.vbs

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral10

Sample

McTools 2/McDecryptor/Properties/Resources.vbs

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral11

Sample

McTools 2/McDecryptor/bin/Debug/LibMcCrypt.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral12

Sample

McTools 2/McDecryptor/bin/Debug/McDecryptor.exe

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral13

Sample

McTools 2/McDecryptor/bin/Debug/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral14

Sample

McTools 2/McDecryptor/obj/Debug/McDecryptor.exe

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral15

Sample

McTools 2/McEncryptor/bin/Debug/LibMcCrypt.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral16

Sample

McTools 2/McEncryptor/bin/Debug/McEncryptor.exe

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral17

Sample

McTools 2/McEncryptor/bin/Debug/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral18

Sample

McTools 2/McEncryptor/obj/Debug/McEncryptor.exe

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral19

Sample

McTools 2/packages/Newtonsoft.Json.13.0.1/lib/net20/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral20

Sample

McTools 2/packages/Newtonsoft.Json.13.0.1/lib/net35/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral21

Sample

McTools 2/packages/Newtonsoft.Json.13.0.1/lib/net40/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral22

Sample

McTools 2/packages/Newtonsoft.Json.13.0.1/lib/net45/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral23

Sample

McTools 2/packages/Newtonsoft.Json.13.0.1/lib/netstandard1.0/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral24

Sample

McTools 2/packages/Newtonsoft.Json.13.0.1/lib/netstandard1.3/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral25

Sample

McTools 2/packages/Newtonsoft.Json.13.0.1/lib/netstandard2.0/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Report Analysis Logs

General

Target

McTools 2.zip
Size

5.0MB
MD5

6852d1cf5e48b45c446f793a1d4f5852
SHA1

c0a0375d3999a7c95b6f844f658bcb51b007e31b
SHA256

f350bc1bfee147221881ea40a05aaa188806bf1461c2175dfcd1b0be127fff2b
SHA512

7f46bdebb417a1133545393ecbc8100dacb34ee4ed82631e826a9b0f97e03aa350542b35a094703b56af414120ba8a88778e904c6b99ea962dca80cd021150b5
SSDEEP

98304:LzHfzH/HzHaPiZebEzHfGNocKgVX9GI+WKAjlLhWixFf7Xaw81zwMIPYwU:LLfL/LAiZMELsoWX8I+mldWixlXaw81z

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\McTools 2.zip"
1⤵
PID:2148

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4660

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads