Overview
overview
4Static
static
3McTools 2.zip
windows10-1703-x64
1McTools 2/...eys.js
windows10-1703-x64
4McTools 2/...ace.js
windows10-1703-x64
3McTools 2/...ils.js
windows10-1703-x64
3McTools 2/...pt.dll
windows10-1703-x64
1McTools 2/...on.dll
windows10-1703-x64
1McTools 2/...pt.dll
windows10-1703-x64
1McTools 2/...ram.js
windows10-1703-x64
3McTools 2/...er.vbs
windows10-1703-x64
1McTools 2/...es.vbs
windows10-1703-x64
1McTools 2/...pt.dll
windows10-1703-x64
1McTools 2/...or.exe
windows10-1703-x64
1McTools 2/...on.dll
windows10-1703-x64
1McTools 2/...or.exe
windows10-1703-x64
1McTools 2/...pt.dll
windows10-1703-x64
1McTools 2/...or.exe
windows10-1703-x64
1McTools 2/...on.dll
windows10-1703-x64
1McTools 2/...or.exe
windows10-1703-x64
3McTools 2/...on.dll
windows10-1703-x64
1McTools 2/...on.dll
windows10-1703-x64
1McTools 2/...on.dll
windows10-1703-x64
1McTools 2/...on.dll
windows10-1703-x64
1McTools 2/...on.dll
windows10-1703-x64
1McTools 2/...on.dll
windows10-1703-x64
1McTools 2/...on.dll
windows10-1703-x64
1Analysis
-
max time kernel
315s -
max time network
1596s -
platform
windows10-1703_x64 -
resource
win10-20240404-es -
resource tags
arch:x64arch:x86image:win10-20240404-eslocale:es-esos:windows10-1703-x64systemwindows -
submitted
30-05-2024 11:54
Static task
static1
Behavioral task
behavioral1
Sample
McTools 2.zip
Resource
win10-20240404-es
Behavioral task
behavioral2
Sample
McTools 2/McCrypt/Keys.js
Resource
win10-20240404-es
Behavioral task
behavioral3
Sample
McTools 2/McCrypt/Marketplace.js
Resource
win10-20240404-es
Behavioral task
behavioral4
Sample
McTools 2/McCrypt/Utils.js
Resource
win10-20240404-es
Behavioral task
behavioral5
Sample
McTools 2/McCrypt/bin/Debug/LibMcCrypt.dll
Resource
win10-20240404-es
Behavioral task
behavioral6
Sample
McTools 2/McCrypt/bin/Debug/Newtonsoft.Json.dll
Resource
win10-20240404-es
Behavioral task
behavioral7
Sample
McTools 2/McCrypt/obj/Debug/LibMcCrypt.dll
Resource
win10-20240404-es
Behavioral task
behavioral8
Sample
McTools 2/McDecryptor/Program.js
Resource
win10-20240404-es
Behavioral task
behavioral9
Sample
McTools 2/McDecryptor/Properties/Resources.Designer.vbs
Resource
win10-20240404-es
Behavioral task
behavioral10
Sample
McTools 2/McDecryptor/Properties/Resources.vbs
Resource
win10-20240404-es
Behavioral task
behavioral11
Sample
McTools 2/McDecryptor/bin/Debug/LibMcCrypt.dll
Resource
win10-20240404-es
Behavioral task
behavioral12
Sample
McTools 2/McDecryptor/bin/Debug/McDecryptor.exe
Resource
win10-20240404-es
Behavioral task
behavioral13
Sample
McTools 2/McDecryptor/bin/Debug/Newtonsoft.Json.dll
Resource
win10-20240404-es
Behavioral task
behavioral14
Sample
McTools 2/McDecryptor/obj/Debug/McDecryptor.exe
Resource
win10-20240404-es
Behavioral task
behavioral15
Sample
McTools 2/McEncryptor/bin/Debug/LibMcCrypt.dll
Resource
win10-20240404-es
Behavioral task
behavioral16
Sample
McTools 2/McEncryptor/bin/Debug/McEncryptor.exe
Resource
win10-20240404-es
Behavioral task
behavioral17
Sample
McTools 2/McEncryptor/bin/Debug/Newtonsoft.Json.dll
Resource
win10-20240404-es
Behavioral task
behavioral18
Sample
McTools 2/McEncryptor/obj/Debug/McEncryptor.exe
Resource
win10-20240404-es
Behavioral task
behavioral19
Sample
McTools 2/packages/Newtonsoft.Json.13.0.1/lib/net20/Newtonsoft.Json.dll
Resource
win10-20240404-es
Behavioral task
behavioral20
Sample
McTools 2/packages/Newtonsoft.Json.13.0.1/lib/net35/Newtonsoft.Json.dll
Resource
win10-20240404-es
Behavioral task
behavioral21
Sample
McTools 2/packages/Newtonsoft.Json.13.0.1/lib/net40/Newtonsoft.Json.dll
Resource
win10-20240404-es
Behavioral task
behavioral22
Sample
McTools 2/packages/Newtonsoft.Json.13.0.1/lib/net45/Newtonsoft.Json.dll
Resource
win10-20240404-es
Behavioral task
behavioral23
Sample
McTools 2/packages/Newtonsoft.Json.13.0.1/lib/netstandard1.0/Newtonsoft.Json.dll
Resource
win10-20240404-es
Behavioral task
behavioral24
Sample
McTools 2/packages/Newtonsoft.Json.13.0.1/lib/netstandard1.3/Newtonsoft.Json.dll
Resource
win10-20240404-es
Behavioral task
behavioral25
Sample
McTools 2/packages/Newtonsoft.Json.13.0.1/lib/netstandard2.0/Newtonsoft.Json.dll
Resource
win10-20240404-es
General
-
Target
McTools 2/McCrypt/Marketplace.js
-
Size
14KB
-
MD5
63ed98d86aec7d2d06b9c5c1a29d712e
-
SHA1
08d4728fc311b799b6ad57fe2854c06755a4a3f1
-
SHA256
d07691253015cc95a7fc8ce375b072cb3770c23657f32807f627b3ad31372915
-
SHA512
2d69ae6dad503617e9f5e9fb7c1d31d6ae5165b024936bf1486a58609923e04e7abe819970f054aac50fa499342e886b26199188c566389f7d60f893d04bedff
-
SSDEEP
192:MUFnq8DkqQnXoBJMXiyfgBUytGMiRuSLuyQcI+B9asYmHaGQMaUgMqyyg5RO:M8xBWg5tGM8uunDBKmHaGQMaUgM7jC
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs