f350bc1bfee147221881ea40a05aaa188806bf1461c2175dfcd1b0be127fff2b

Submit
Reports

Overview

overview

Static

static

McTools 2.zip

windows10-1703-x64

McTools 2/...eys.js

windows10-1703-x64

McTools 2/...ace.js

windows10-1703-x64

McTools 2/...ils.js

windows10-1703-x64

McTools 2/...pt.dll

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...pt.dll

windows10-1703-x64

McTools 2/...ram.js

windows10-1703-x64

McTools 2/...er.vbs

windows10-1703-x64

McTools 2/...es.vbs

windows10-1703-x64

McTools 2/...pt.dll

windows10-1703-x64

McTools 2/...or.exe

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...or.exe

windows10-1703-x64

McTools 2/...pt.dll

windows10-1703-x64

McTools 2/...or.exe

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...or.exe

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

Analysis

max time kernel
316s
max time network
1576s
platform
windows10-1703_x64
resource
win10-20240404-es
resource tags

arch:x64arch:x86image:win10-20240404-eslocale:es-esos:windows10-1703-x64systemwindows
submitted
30-05-2024 11:54

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

McTools 2.zip

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral2

Sample

McTools 2/McCrypt/Keys.js

Resource

win10-20240404-es

execution

windows10-1703-x64

11 signatures

1800 seconds

Behavioral task

behavioral3

Sample

McTools 2/McCrypt/Marketplace.js

Resource

win10-20240404-es

execution

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral4

Sample

McTools 2/McCrypt/Utils.js

Resource

win10-20240404-es

execution

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral5

Sample

McTools 2/McCrypt/bin/Debug/LibMcCrypt.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral6

Sample

McTools 2/McCrypt/bin/Debug/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral7

Sample

McTools 2/McCrypt/obj/Debug/LibMcCrypt.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral8

Sample

McTools 2/McDecryptor/Program.js

Resource

win10-20240404-es

execution

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral9

Sample

McTools 2/McDecryptor/Properties/Resources.Designer.vbs

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral10

Sample

McTools 2/McDecryptor/Properties/Resources.vbs

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral11

Sample

McTools 2/McDecryptor/bin/Debug/LibMcCrypt.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral12

Sample

McTools 2/McDecryptor/bin/Debug/McDecryptor.exe

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral13

Sample

McTools 2/McDecryptor/bin/Debug/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral14

Sample

McTools 2/McDecryptor/obj/Debug/McDecryptor.exe

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral15

Sample

McTools 2/McEncryptor/bin/Debug/LibMcCrypt.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral16

Sample

McTools 2/McEncryptor/bin/Debug/McEncryptor.exe

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral17

Sample

McTools 2/McEncryptor/bin/Debug/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral18

Sample

McTools 2/McEncryptor/obj/Debug/McEncryptor.exe

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral19

Sample

McTools 2/packages/Newtonsoft.Json.13.0.1/lib/net20/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral20

Sample

McTools 2/packages/Newtonsoft.Json.13.0.1/lib/net35/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral21

Sample

McTools 2/packages/Newtonsoft.Json.13.0.1/lib/net40/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral22

Sample

McTools 2/packages/Newtonsoft.Json.13.0.1/lib/net45/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral23

Sample

McTools 2/packages/Newtonsoft.Json.13.0.1/lib/netstandard1.0/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral24

Sample

McTools 2/packages/Newtonsoft.Json.13.0.1/lib/netstandard1.3/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral25

Sample

McTools 2/packages/Newtonsoft.Json.13.0.1/lib/netstandard2.0/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Report Analysis Logs

General

Target

McTools 2/McDecryptor/obj/Debug/McDecryptor.exe
Size

21KB
MD5

2eccdeb9175a640da817c7f56df44bbd
SHA1

37d353caa37e0466123a55729fcfd6a492dd17f9
SHA256

c5ab6a6c06eb4b86e17030fffeb8d8ddb970e7cb780b01955a74f51c77da9b6e
SHA512

2f6638eef02a894f80e22b1eb177ced00312bcda47e99b92a5f8f6149902d80cf687ab2e9e192588fd285eed00fa290174df532706ad8b451985bc439d54486c
SSDEEP

384:s6cq5YsO6rDl5YYOlhu+u2sVaiPow9Q7CNpvAN6vfr45ITrw:s6cqTnXl5Yy5Vaigh7CaqR3

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\McTools 2\McDecryptor\obj\Debug\McDecryptor.exe
"C:\Users\Admin\AppData\Local\Temp\McTools 2\McDecryptor\obj\Debug\McDecryptor.exe"
1⤵
PID:2412

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2412-0-0x0000022840490000-0x000002284049A000-memory.dmp

Filesize
40KB

Download
memory/2412-1-0x00007FFC96F83000-0x00007FFC96F84000-memory.dmp

Filesize
4KB

Download
memory/2412-2-0x000002285AD50000-0x000002285AE52000-memory.dmp

Filesize
1.0MB

Download