f350bc1bfee147221881ea40a05aaa188806bf1461c2175dfcd1b0be127fff2b

Submit
Reports

Overview

overview

Static

static

McTools 2.zip

windows10-1703-x64

McTools 2/...eys.js

windows10-1703-x64

McTools 2/...ace.js

windows10-1703-x64

McTools 2/...ils.js

windows10-1703-x64

McTools 2/...pt.dll

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...pt.dll

windows10-1703-x64

McTools 2/...ram.js

windows10-1703-x64

McTools 2/...er.vbs

windows10-1703-x64

McTools 2/...es.vbs

windows10-1703-x64

McTools 2/...pt.dll

windows10-1703-x64

McTools 2/...or.exe

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...or.exe

windows10-1703-x64

McTools 2/...pt.dll

windows10-1703-x64

McTools 2/...or.exe

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...or.exe

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

McTools 2/...on.dll

windows10-1703-x64

Analysis

max time kernel
503s
max time network
1607s
platform
windows10-1703_x64
resource
win10-20240404-es
resource tags

arch:x64arch:x86image:win10-20240404-eslocale:es-esos:windows10-1703-x64systemwindows
submitted
30-05-2024 11:54

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

McTools 2.zip

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral2

Sample

McTools 2/McCrypt/Keys.js

Resource

win10-20240404-es

execution

windows10-1703-x64

11 signatures

1800 seconds

Behavioral task

behavioral3

Sample

McTools 2/McCrypt/Marketplace.js

Resource

win10-20240404-es

execution

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral4

Sample

McTools 2/McCrypt/Utils.js

Resource

win10-20240404-es

execution

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral5

Sample

McTools 2/McCrypt/bin/Debug/LibMcCrypt.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral6

Sample

McTools 2/McCrypt/bin/Debug/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral7

Sample

McTools 2/McCrypt/obj/Debug/LibMcCrypt.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral8

Sample

McTools 2/McDecryptor/Program.js

Resource

win10-20240404-es

execution

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral9

Sample

McTools 2/McDecryptor/Properties/Resources.Designer.vbs

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral10

Sample

McTools 2/McDecryptor/Properties/Resources.vbs

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral11

Sample

McTools 2/McDecryptor/bin/Debug/LibMcCrypt.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral12

Sample

McTools 2/McDecryptor/bin/Debug/McDecryptor.exe

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral13

Sample

McTools 2/McDecryptor/bin/Debug/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral14

Sample

McTools 2/McDecryptor/obj/Debug/McDecryptor.exe

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral15

Sample

McTools 2/McEncryptor/bin/Debug/LibMcCrypt.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral16

Sample

McTools 2/McEncryptor/bin/Debug/McEncryptor.exe

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral17

Sample

McTools 2/McEncryptor/bin/Debug/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral18

Sample

McTools 2/McEncryptor/obj/Debug/McEncryptor.exe

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral19

Sample

McTools 2/packages/Newtonsoft.Json.13.0.1/lib/net20/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral20

Sample

McTools 2/packages/Newtonsoft.Json.13.0.1/lib/net35/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral21

Sample

McTools 2/packages/Newtonsoft.Json.13.0.1/lib/net40/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral22

Sample

McTools 2/packages/Newtonsoft.Json.13.0.1/lib/net45/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral23

Sample

McTools 2/packages/Newtonsoft.Json.13.0.1/lib/netstandard1.0/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral24

Sample

McTools 2/packages/Newtonsoft.Json.13.0.1/lib/netstandard1.3/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral25

Sample

McTools 2/packages/Newtonsoft.Json.13.0.1/lib/netstandard2.0/Newtonsoft.Json.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1800 seconds

Report Analysis Logs

General

Target

McTools 2/McCrypt/bin/Debug/LibMcCrypt.dll
Size

23KB
MD5

8cac54c71b58c67db54ea6ef0ab9e350
SHA1

14a6720174eea0dbb0de70f56e8a7f5b22df362c
SHA256

b05d7f7f63a959fdd96ae2bf82cce8ff55c8129d726dfe1634e36e3385efaf33
SHA512

092ed5f3610b5381b1ac388b4e77acbd215303ddc31e16f28815e3c6de5611cda1422619f8d6bfb498ea49b07f36425193f83de1baa1f5ffcb9a1d41d2ecc12d
SSDEEP

384:Za2VK+oPpedFDdmPNUf6KjXjc0vH+qKb8xTxrRdJSx/KhAlRQj:Za2U/KXcceoXbSBKi4

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\McTools 2\McCrypt\bin\Debug\LibMcCrypt.dll",#1
1⤵
PID:4164

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads