Overview
overview
4Static
static
3McTools 2.zip
windows10-1703-x64
1McTools 2/...eys.js
windows10-1703-x64
4McTools 2/...ace.js
windows10-1703-x64
3McTools 2/...ils.js
windows10-1703-x64
3McTools 2/...pt.dll
windows10-1703-x64
1McTools 2/...on.dll
windows10-1703-x64
1McTools 2/...pt.dll
windows10-1703-x64
1McTools 2/...ram.js
windows10-1703-x64
3McTools 2/...er.vbs
windows10-1703-x64
1McTools 2/...es.vbs
windows10-1703-x64
1McTools 2/...pt.dll
windows10-1703-x64
1McTools 2/...or.exe
windows10-1703-x64
1McTools 2/...on.dll
windows10-1703-x64
1McTools 2/...or.exe
windows10-1703-x64
1McTools 2/...pt.dll
windows10-1703-x64
1McTools 2/...or.exe
windows10-1703-x64
1McTools 2/...on.dll
windows10-1703-x64
1McTools 2/...or.exe
windows10-1703-x64
3McTools 2/...on.dll
windows10-1703-x64
1McTools 2/...on.dll
windows10-1703-x64
1McTools 2/...on.dll
windows10-1703-x64
1McTools 2/...on.dll
windows10-1703-x64
1McTools 2/...on.dll
windows10-1703-x64
1McTools 2/...on.dll
windows10-1703-x64
1McTools 2/...on.dll
windows10-1703-x64
1Analysis
-
max time kernel
615s -
max time network
1609s -
platform
windows10-1703_x64 -
resource
win10-20240404-es -
resource tags
arch:x64arch:x86image:win10-20240404-eslocale:es-esos:windows10-1703-x64systemwindows -
submitted
30-05-2024 11:54
Static task
static1
Behavioral task
behavioral1
Sample
McTools 2.zip
Resource
win10-20240404-es
Behavioral task
behavioral2
Sample
McTools 2/McCrypt/Keys.js
Resource
win10-20240404-es
Behavioral task
behavioral3
Sample
McTools 2/McCrypt/Marketplace.js
Resource
win10-20240404-es
Behavioral task
behavioral4
Sample
McTools 2/McCrypt/Utils.js
Resource
win10-20240404-es
Behavioral task
behavioral5
Sample
McTools 2/McCrypt/bin/Debug/LibMcCrypt.dll
Resource
win10-20240404-es
Behavioral task
behavioral6
Sample
McTools 2/McCrypt/bin/Debug/Newtonsoft.Json.dll
Resource
win10-20240404-es
Behavioral task
behavioral7
Sample
McTools 2/McCrypt/obj/Debug/LibMcCrypt.dll
Resource
win10-20240404-es
Behavioral task
behavioral8
Sample
McTools 2/McDecryptor/Program.js
Resource
win10-20240404-es
Behavioral task
behavioral9
Sample
McTools 2/McDecryptor/Properties/Resources.Designer.vbs
Resource
win10-20240404-es
Behavioral task
behavioral10
Sample
McTools 2/McDecryptor/Properties/Resources.vbs
Resource
win10-20240404-es
Behavioral task
behavioral11
Sample
McTools 2/McDecryptor/bin/Debug/LibMcCrypt.dll
Resource
win10-20240404-es
Behavioral task
behavioral12
Sample
McTools 2/McDecryptor/bin/Debug/McDecryptor.exe
Resource
win10-20240404-es
Behavioral task
behavioral13
Sample
McTools 2/McDecryptor/bin/Debug/Newtonsoft.Json.dll
Resource
win10-20240404-es
Behavioral task
behavioral14
Sample
McTools 2/McDecryptor/obj/Debug/McDecryptor.exe
Resource
win10-20240404-es
Behavioral task
behavioral15
Sample
McTools 2/McEncryptor/bin/Debug/LibMcCrypt.dll
Resource
win10-20240404-es
Behavioral task
behavioral16
Sample
McTools 2/McEncryptor/bin/Debug/McEncryptor.exe
Resource
win10-20240404-es
Behavioral task
behavioral17
Sample
McTools 2/McEncryptor/bin/Debug/Newtonsoft.Json.dll
Resource
win10-20240404-es
Behavioral task
behavioral18
Sample
McTools 2/McEncryptor/obj/Debug/McEncryptor.exe
Resource
win10-20240404-es
Behavioral task
behavioral19
Sample
McTools 2/packages/Newtonsoft.Json.13.0.1/lib/net20/Newtonsoft.Json.dll
Resource
win10-20240404-es
Behavioral task
behavioral20
Sample
McTools 2/packages/Newtonsoft.Json.13.0.1/lib/net35/Newtonsoft.Json.dll
Resource
win10-20240404-es
Behavioral task
behavioral21
Sample
McTools 2/packages/Newtonsoft.Json.13.0.1/lib/net40/Newtonsoft.Json.dll
Resource
win10-20240404-es
Behavioral task
behavioral22
Sample
McTools 2/packages/Newtonsoft.Json.13.0.1/lib/net45/Newtonsoft.Json.dll
Resource
win10-20240404-es
Behavioral task
behavioral23
Sample
McTools 2/packages/Newtonsoft.Json.13.0.1/lib/netstandard1.0/Newtonsoft.Json.dll
Resource
win10-20240404-es
Behavioral task
behavioral24
Sample
McTools 2/packages/Newtonsoft.Json.13.0.1/lib/netstandard1.3/Newtonsoft.Json.dll
Resource
win10-20240404-es
Behavioral task
behavioral25
Sample
McTools 2/packages/Newtonsoft.Json.13.0.1/lib/netstandard2.0/Newtonsoft.Json.dll
Resource
win10-20240404-es
General
-
Target
McTools 2/McCrypt/Utils.js
-
Size
2KB
-
MD5
d270d27148f8074d16b8d9faa19bfb36
-
SHA1
61e2703183e61b33702d0cc95bea354f2a456128
-
SHA256
7cae573072bcddb96f61e230ad978c8635724ed162b324803a617c1c9412f62b
-
SHA512
af498d5f3631336028c6b3990608a28d3ce01ef83eda79755e5e3b0526c58a6371346a765a7e085b8dd8aad44dc7ac51ae898fce9d7385dc37bf257fc9b35351
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs