Overview

overview

8

Static

static

8

Builder.bat

windows7-x64

1

Builder.bat

windows10-2004-x64

1

Components...OBF.py

windows7-x64

3

Components...OBF.py

windows10-2004-x64

3

Components/loader.py

windows7-x64

3

Components/loader.py

windows10-2004-x64

3

Components...ess.py

windows7-x64

3

Components...ess.py

windows10-2004-x64

3

Components/process.py

windows7-x64

3

Components/process.py

windows10-2004-x64

3

Components/rar.exe

windows7-x64

3

Components/rar.exe

windows10-2004-x64

3

Components/run.bat

windows7-x64

1

Components/run.bat

windows10-2004-x64

1

Components...ief.py

windows7-x64

3

Components...ief.py

windows10-2004-x64

3

Components/stub.py

windows7-x64

3

Components/stub.py

windows10-2004-x64

3

Components/upx.exe

windows7-x64

7

Components/upx.exe

windows10-2004-x64

7

Extras/unb...tes.py

windows7-x64

3

Extras/unb...tes.py

windows10-2004-x64

3

env/Script...xa.dll

windows7-x64

1

env/Script...xa.dll

windows10-2004-x64

1

env/Script...lt.exe

windows7-x64

1

env/Script...lt.exe

windows10-2004-x64

1

env/Script...64.exe

windows7-x64

1

env/Script...64.exe

windows10-2004-x64

1

env/Script...En.exe

windows7-x64

1

env/Script...En.exe

windows10-2004-x64

1

env/Script...64.exe

windows7-x64

1

env/Script...64.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    0s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/06/2024, 00:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Extras/unblock_sites.py

  • Size

    1KB

  • MD5

    0d1019573b112545f9fd41a4e0acc342

  • SHA1

    6ab1685e4d4aa3d16307325da3c8c6a65cc1cd2a

  • SHA256

    bf5c32f73990a16835b5b91f08647617dce973a68626ee4921bc5e2c5a07cafe

  • SHA512

    d4cdb37acabfe9013aa8cdec6cce9040a9d9c2b52570fa45f1a0750c29860b161d0446ded2d3f31c61676f42ab2be7c01c8cffc09ae64126510ee2d484e1c561

Score
3/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\Extras\unblock_sites.py
    1⤵
      PID:2340
    • C:\Windows\system32\OpenWith.exe
      C:\Windows\system32\OpenWith.exe -Embedding
      1⤵
        PID:4460

      Network

      MITRE ATT&CK Enterprise v15

      Replay Monitor

      Loading Replay Monitor...

      Downloads