Analysis
-
max time kernel
77s -
max time network
98s -
platform
windows11-21h2_x64 -
resource
win11-20240508-en -
resource tags
-
submitted
15/06/2024, 01:00
General
-
Target
Roblox-Cookie-Logger-main/Arctic.exe
-
Size
17.4MB
-
MD5
b5343da0e0f7cc78266f8282138f6bfc
-
SHA1
fdbb82d380e98a48a58de021b90f116cedc01298
-
SHA256
3e81ac827824478a5532846c42bdbf5d469beab9793092542419d0c5ebcf52ac
-
SHA512
01b5787a93d971f36238d9754db108e5d8133ccde528e7250c0e1acc3d3693f8a628d12fc8f14cdfff55236c0549e55a679b432f7f0e59f1c1bf7ec7ae2e2abf
-
SSDEEP
393216:jCSARbMb/m3pbsLG/PcjGsoTZleDXdk5I8g8F9/75oQlvQ+:+SkMbKx/PcsTZlofAFZlvQ
Malware Config
Signatures
-
Loads dropped DLL 57 IoCs
-
UPX packed file 64 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Roblox-Cookie-Logger-main\Arctic.exe"C:\Users\Admin\AppData\Local\Temp\Roblox-Cookie-Logger-main\Arctic.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\Roblox-Cookie-Logger-main\Arctic.exe"C:\Users\Admin\AppData\Local\Temp\Roblox-Cookie-Logger-main\Arctic.exe"2⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "ver"3⤵
-
-
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
14KB
MD5379cb154645f88ebdf0af8fa07a62ab6
SHA12d9172f4c97eae87c9501980554acb49704646a6
SHA2560418ccbd95db8f96e043c9972de10350f864951a25137f77b6e4c22a7b3d3315
SHA512428a8fbdd53611b76a3427b5732e8a71affe24e03901d8b2c11de8182afeb3baf3877bf42edbd4c81ca5cb4bd5652e40a47ca970247a37ee0fdf1ae2b0b1a4be
-
Filesize
14KB
MD5dca619ab054f52dd5721c51b6a74b895
SHA11b44dafff1ea8780629684e3b4fc8b7255e92db9
SHA256acf1d16f3ad979ce6591c5758de2f4faf748a4a38d184ff86062fb35716ca339
SHA512ee76e56f4962a917eedbef1ac5d0f0886db9583b9eb38d961e853a322cc12dbbb39e9ab449a70a08901533bc795c65bd9d959ac6f84725cbf736d1e276e334bf
-
Filesize
14KB
MD5cf32c2629ecfcb077b91787fd52248c0
SHA19f3d01a49f47df99ab0542b0d9d6292e40e5df89
SHA256fea87430ecf6d7b6b87a7e592e9e9333ee5de3d34968a058e23db46ff8d70328
SHA512857e19958dd0c3def2be273da04cb5ed3496dbd6d639887fe94a46578ada20edcee127681d998c111ef6228d453d915a87c98aea50ec1b8f2fd10f4382f8a724
-
Filesize
15KB
MD5e5a0eee1568b172ead6b7a1883c25f6a
SHA1b73d9b3cec2878d95819487616813658ccbbd4f5
SHA256cfce1c8fa046535cd0f62a8639445e4b3e1d9c4af5c96cc67257c0e39bd2dd44
SHA51219d7bc5917cf31fe317acde2f66ee8955d1f6d5d07fdc6a4d7da41c75853eab40b6af785feb3b1d470c637577a64e650c5ca4e905e536a39deaa9dc28df4510a
-
Filesize
13KB
MD57b33e1b222189dbcc24500a2ed7c1474
SHA1f861eaa8a495eaf5a947f70a015addce814da56b
SHA256974b1278a0bab19b066a4a18c6418e558a485cbdbd8de08a5c7f8bcee1f01620
SHA51296ab13a21c13ef0b0a11eeb3553fbf30f2c4afda3bbc5fd3fe574427b6786cd8d35daeb20af8f2289a49319ddb96282610cc99eb2e4e5e275d3da83250d9175e
-
Filesize
14KB
MD5a66fd121f1d2f4145b232ad7d61d4a51
SHA1d22d9c098d96f9fad5154dbdd6aa809503a5f1c3
SHA2565f89c248f38ccabd90da592090102add6844ec3e4959657bb1fd39b0f9c2a3b8
SHA51248be88e746fb440fd7ec4a663d66f308d33f1dfb2a0498ef11cf1d798ed5e730c122128e5780828021ff7620a5fb92a0da49d588ff76437a92163a9729f03a2f
-
Filesize
15KB
MD55905e263b145a794c362d3d120670492
SHA1c2e5d3624b021ebf7a61ecd34a20aade802e1127
SHA256611c49223c54f1316bc92d5cfd598c37077663efd11d98f0830e3796038938bc
SHA51240bdee938028d1c8427fe6480aa98d3f55047444058d35b757f8fa082247be8879528438847efc872727dd10f44d21c0a050fa8165e208edff482b12d5a97e06
-
Filesize
16KB
MD5c14d46cb478e3e115f75218d1ee20689
SHA17199ccd6451717f4746e2a043c525f6a0013b523
SHA2560e5cb860210e2592e5bcdba048b64bff973e152ae3e8b37dab1bebd34f959b8b
SHA5124e10305b9c0b7e665630f4c15ceaf21206f8b4de906f2022fd581415ec2a47d7593c0499012e58bf9719374d752060699711fece59beae6bd19e27fded436a0a
-
Filesize
17KB
MD5cbc56b7321ac2330aa1b44794049e023
SHA13235e1c8a3b462192e8ec3e4ad98da30a80c57db
SHA25657ca95d67546ae5a39d0ae707a75cdf0ac4226e4bd069261875c4a26429e351e
SHA51281cb4254b8be9f324dbdd7af8584790c6204aa647e72d75eefc9e08e74538817372d093d18cebaf5d468a588b998b04499d1a4024df1185f9fd3c9d597592b96
-
Filesize
18KB
MD53d82da53cd6fdef9af9d37fb41ab3a80
SHA16fb84f782e3a2d197f77c05a4557deb610f8dc31
SHA2563fe74f1bff5ee00df8492488035a91ef8a9b5639932f778d384daee0ac00e91b
SHA512ca4706446022cfa06b58c0e05c28d007405f555774f6b7d2dbaaaf18cdef53c629c6f1d4970ef626bff5ece85b8389386566c395ed2ee8b1e2d310b45ee3f1dc
-
Filesize
14KB
MD55af171e314a90fefed23d841f626686e
SHA154a39c657d8c4d4dc7dd6e0f80a012482681ee54
SHA2560d2a0cee2efeba596974b2b14283f2e536b9c0b5e6bcd2c5e17cc2ea1fa9b856
SHA512d32a5d25342c7b6e145f481b2ac150c5598761aeda9f7dfcaad139c187cb5d52e5fd01da0ec3d6c1524924376c66269253df32cced2cd6f5682ca9708849b58a
-
Filesize
14KB
MD54f60e65da888c0a3f8bfce9fa48487d2
SHA14ba1ede63e390bcdad06933f5ef6b8a2fee96a80
SHA2567731b0df740cd8b1dc36d464ed7a47fee6f8a1f88ed4213039ee9ab2d8955dce
SHA512f1725c57062e2bc1e45545dd96fc151ab0ffd6d714e2d1794e26b40d7e5eb6032da60078e536b2c0187a49bcfdc7b29a6caa112646966866eaf983f5fe4608e6
-
Filesize
14KB
MD5fcfb7c1d954c2dd90fc3e706cb760421
SHA1efba79868ba6be6a374970a8a1d52bd87387012c
SHA2565f31f9765099a6a3c577b11e065ef9891c5c36dd029a54e5d24558007ba4f15b
SHA51234ba0c9cbdc50682823301d7af9cd8a9d3c29fdbed04add0be60123620a21eecefc519970df3ce77ca942a8ec25fb306785da98455c10871b1cc7601bbfcd21f
-
Filesize
13KB
MD5326d2ec8f51cc47905a7e14d87451da0
SHA16279c6b8b72b97538b5013965bcafb47800cb973
SHA25612d3ae38023d63ff5ea7b6ac6f26ef1f67aedef94503a991f2cda084ec6152a1
SHA51240f2d96ee5de6b0e7aca3f2ede7dd3f94ad0910a0d4ffaf8ab9b2a0f39c0e4fc37caf153f4d410f307400ebf47649ee237b54aea7ec00da18280c5c604fee207
-
Filesize
13KB
MD52f95abc7edb97577c46118af28b3aef6
SHA13c39f9852fef49f570293eb898c8a6de3582c458
SHA256e21b65565bd68cf2ac82b7f7e629c51361bbff7c5fb2a666daea038c9ebcf5eb
SHA51259f1fbd9270b0ac992a4ebb26e7b4d4cc21ce3e3d4de30f0e831864dcc28cdd4d8d8bffce556c16bcd06339109c8b3e2f6af8c24609633398554fd07913140ae
-
Filesize
94KB
MD5a87575e7cf8967e481241f13940ee4f7
SHA1879098b8a353a39e16c79e6479195d43ce98629e
SHA256ded5adaa94341e6c62aea03845762591666381dca30eb7c17261dd154121b83e
SHA512e112f267ae4c9a592d0dd2a19b50187eb13e25f23ded74c2e6ccde458bcdaee99f4e3e0a00baf0e3362167ae7b7fe4f96ecbcd265cc584c1c3a4d1ac316e92f0
-
Filesize
47KB
MD5ffc729a1a725e73008d19e0ead356666
SHA133daabaad6a57db0ad4ebfbd753f1b0af913dcd1
SHA2562e798ad2ea8e4058a6da7cca0f7111f52c2d880092449244e2f9d960a7a235af
SHA51289cd6dd2081d2a2c395b32ca548093234941af8b6b4db86e4ee2680c71a6d3b1234e056fe48387559d8f9ec97cb0062a3e7c478f8c6f4f7c4d885a1b3b63d6ae
-
Filesize
71KB
MD50e178a407b2b6d0b0291f952e064034f
SHA1e5a1e485075068c7ddc05ed9bd9e59773ae44164
SHA256fa472ede1ed7a73ba13fb63bb14ec5b32b8445070ef8b2f12a5509a25c7d487d
SHA51203f0bb1374aaf623f2f39caf86fd84026566f5bd56a807cfdd3c2c218f0bc83d926ff1f5bc2713051e9e9d95255d44568226d422c48e9bb0bd41864e95813945
-
Filesize
56KB
MD5cace7ff57cac9775efb56be376e101d2
SHA180d26652fdf9788dffebfb0d2d3165b9db178b7c
SHA256e9010fcdcab116c429775030b8f3879a04399e73e5bd71d68c0ed8acb33f21d6
SHA51292888b13e5f4dbe41451d7924a8a28f07a1a5f6641c6318fdb508276bc389d136ece7ef18cb0e14f0a14069cfb8ab028d9a86e1f6e4fe27c2d389270d7c55110
-
Filesize
85KB
MD5d81ad781c5bdc6e9f50de364d322dc24
SHA16b20b64a679e57e66b667b6616a4fac2fa0a1106
SHA2560efbee39cd16ef121e2c04e78ee42770d4905d0cf262bda1d6d2fe2c8656a494
SHA5125876bc3e2176c8d8fcbbb91cd7e7d3ff8e4dfcd7190391cf204b730b64122cbe5d6a35fe6399904837d30d12e321a604c21d120081da070bdc89dfb113c7cc64
-
Filesize
40KB
MD5fa7771e74fa6fcc27d53565be05a65f7
SHA1753c420b10fef436fc2607d286469a5370c29b6a
SHA25672099dd9990c125e6b2cc1a3a6d7958edc7316c485bd3789da9a865a5b3f3956
SHA512018594b0190b856dadf858c18f728022970e5e6eac9f047658a7472d04030cb6a983fe3ca90949a3e281e1051bdc43c6630d9d7f1c59b15a6fc9477468c7be79
-
Filesize
44KB
MD5d8ec8740a7739023636ea60a13b6b973
SHA1b39fcb857dd47da50f0deebf03ccb29ff82e2e2c
SHA25698b60fc1a194b859f2fc9a148c7a29e7d684cde6024d0ba91de029030781538d
SHA512e5c5c9e6bb6a6ccb471f2a8a3c69547feaaee12dc81773e7ebd0562d9002a4b3e969e652734dccd01ef87a5fec17a1898515a78d05728e9ec9888c1a1a2b1112
-
Filesize
765KB
MD57e05b20d5ccc9ec98fefb5266eea8c0d
SHA1d3301b48ad8b5caf0a191092fb44e7052811c448
SHA256321e76698a876b3869f00efecfcf1971a73eb8473d6e0b4757717825e4a70fac
SHA512e196dccd0f4166cae3eb4b5a84fb7d4fd8c1530d5e13306f01d2ce702f92b273f4376d25adc2ec9b1b037b3a57182f239e59c3450565414f9b4b5727f9af8f28
-
Filesize
23KB
MD5b5150b41ca910f212a1dd236832eb472
SHA1a17809732c562524b185953ffe60dfa91ba3ce7d
SHA2561a106569ac0ad3152f3816ff361aa227371d0d85425b357632776ac48d92ea8a
SHA5129e82b0caa3d72bb4a7ad7d66ebfb10edb778749e89280bca67c766e72dc794e99aab2bc2980d64282a384699929ce6cc996462a73584898d2df67a57bff2a9c6
-
Filesize
86KB
MD5de178625c6f731e51d10bc6694ca161a
SHA1a43bf2c25c0246138b36af516242958371325d8e
SHA25682909bbf92179b79619565a9013adb96f549089ee80d25005aeb4d9cb5fd062b
SHA5123e4a4512e2e3d2d82f959cda2b024c7f06095eb2999f98fcd1ad9d378f52187f11e861637e3e31f84486d41f0a25b2885030621fe07e5fa53d646e9999e7c855
-
Filesize
58KB
MD52ddd2ee635db86575c416f075c41ac8c
SHA199d03f524823059066995181ba21be29d90f2488
SHA256be0b573bc6f005235354c246e1f9f626793687f50ad632feb2e767398f414fe3
SHA512b84d4b3ca1298897cfafe195394ec6fdb51ed42ce0ca9ea0ab60dc2a8c31b2c865c4cc4fe0df3ffe1c813d21ca6013661e0cb83a91614472c7f6e3a7c78c1f06
-
Filesize
1.5MB
MD5c938648ffb242bc402358c7a4f1ffb9c
SHA1bdd3f674702c4715669ddf062f94b8218dec46d5
SHA2568bb31916d8495625a7e280763e10346852b7bb76729a8c850929b015f4ef3378
SHA51289ab5a7c8f2ae836e83f80c3d1111f5ebd691d75aeefe9fef6f863d4ba8c71ef3b47d2bfc8cbe0a223dfd49ac01ca623d9859e6f26797bb757b3a6cdd6464df5
-
Filesize
193KB
MD546581e0c56de54a0f3df51e2a6796ad1
SHA1d8bcb21ab92ae3d5838237d15280380a0157abd9
SHA256df2e479149d90827723d4829485c50879fe2878c6d7fb6a4b0315082cc1534e3
SHA512ccccb5e5c5df39c35f3b226d3a168b1b3342c7f4b3f99311dec6cc4553e59f5b49bf11e02c4e993a0c3acb6fdf693bcd1d4db1fbcfb2f77ea5dde8a5e3922ba3
-
Filesize
63KB
MD501f97001f49506cbcab51e0931563dfc
SHA15cb6711126c9222743bcedc2cc1154f024c6a406
SHA256b3a79b8e5dee8641173e2b4f70981dd12cc6d740a82eac7f05c8dc17af239341
SHA512dc963b5a80b39f39cc3082e379dcf200dd130ee1420e317578bcdb271ae17bfbaf94120b643a20eb19569af151a21ab0876934369920e891458f3267990eeac3
-
Filesize
22KB
MD5aa76a96abf4d4431c5c28c7aecc3543d
SHA1e4160ff3ee21e08f4408df4e052859aa5a6f54ef
SHA25642217cf3a9e2849f10f4c7e303edff315952d581db18fb604e855dc71845c4e5
SHA512e9f9f31001872f634cb44d0f9ed85966974ae8e7f639fe285e9d2395b3f46cc26085a505ab9625e0b431350f4394d2f4f7c8ef4d60d7192e294ef7800a2aafaf
-
Filesize
628KB
MD5a97a44f9486197f8afc3379206eef7f8
SHA15af5242c94730e811bbaeb2b003b3b064d0903ae
SHA25615cf99c8d458384957dce22867c71a60f564780a62b0a0a182535454343e5c71
SHA512994f0583e789ef776c064661d054bf4d68727aa90e3268de15e57a643de29839512794a294fdf2166c27ca965f2d62b1807ca9988b99f5984e37db5b8b679ac3
-
Filesize
19KB
MD530156b741d136294f692cea4f80e5014
SHA18c057b5a0fdaffc26db3febcf04463f65a4a89ee
SHA25649d4dff20f47ad831d7aff9215b95a283f56f1bc3fb2ca24c48418ad8f92ad4f
SHA51231014c8b702bbe9e347c341b4b157cd7ecda44694b577d48b638219e99357440b9e80eaac9a73aca0c1a53ca4c27502644ab9a660c21010d7b53eab1d9c7885a
-
Filesize
47KB
MD51ece4a98d438ea8028cbc9e82853f680
SHA1496860f93d814013b3c86bba7fc593e56870db44
SHA2561d1eef92c404309918cb951836ae7099145c4c7c4ddf84ce19a8cd4b9dde1c03
SHA512253b1920f9992ebefb3eb0e80eb9fe599509b017a4b7f3f3fbb00ca30ae48113a8d009ce3398bd60e5f957cba55c0d54fa810c96033fdfbb351fef8f2db78326
-
Filesize
72KB
-
Filesize
88KB
-
Filesize
4.6MB
-
Filesize
224KB
-
Filesize
112KB
-
Filesize
56KB
-
Filesize
104KB
-
Filesize
116KB
-
Filesize
1.5MB
-
Filesize
752KB
-
Filesize
192KB
-
Filesize
168KB
-
Filesize
56KB
-
Filesize
220KB
-
Filesize
184KB
-
Filesize
112KB
-
Filesize
104KB
-
Filesize
68KB
-
Filesize
56KB
-
Filesize
56KB
-
Filesize
60KB
-
Filesize
56KB
-
Filesize
60KB
-
Filesize
168KB
-
Filesize
56KB
-
Filesize
68KB
-
Filesize
64KB
-
Filesize
72KB
-
Filesize
220KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
152KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
68KB
-
Filesize
60KB
-
Filesize
3.5MB
-
Filesize
3.5MB
-
Filesize
1.5MB
-
Filesize
752KB
-
Filesize
84KB
-
Filesize
180KB
-
Filesize
68KB
-
Filesize
732KB
-
Filesize
88KB
-
Filesize
224KB
-
Filesize
116KB
-
Filesize
4.6MB
-
Filesize
80KB
-
Filesize
88KB
-
Filesize
1.1MB
-
Filesize
112KB
-
Filesize
76KB
-
Filesize
732KB
-
Filesize
56KB
-
Filesize
180KB
-
Filesize
252KB
-
Filesize
84KB
-
Filesize
52KB
-
Filesize
88KB
-
Filesize
3.5MB
-
Filesize
3.5MB
-
Filesize
168KB
-
Filesize
60KB
-
Filesize
96KB
-
Filesize
52KB
-
Filesize
3.1MB
-
Filesize
1.1MB
-
Filesize
76KB
-
Filesize
56KB
-
Filesize
252KB
-
Filesize
68KB
-
Filesize
84KB
-
Filesize
68KB
-
Filesize
56KB
-
Filesize
56KB
-
Filesize
60KB
-
Filesize
56KB
-
Filesize
60KB
-
Filesize
64KB
-
Filesize
72KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
60KB
-
Filesize
68KB
-
Filesize
56KB
-
Filesize
60KB
-
Filesize
752KB
-
Filesize
192KB
-
Filesize
104KB
-
Filesize
4.6MB
-
Filesize
60KB
-
Filesize
152KB
-
Filesize
180KB
-
Filesize
116KB
-
Filesize
192KB
-
Filesize
168KB
-
Filesize
220KB
-
Filesize
184KB
-
Filesize
112KB
-
Filesize
56KB
-
Filesize
104KB
-
Filesize
60KB
-
Filesize
152KB
-
Filesize
68KB
-
Filesize
4.6MB
-
Filesize
252KB
-
Filesize
3.1MB
-
Filesize
52KB
-
Filesize
96KB
-
Filesize
168KB
-
Filesize
3.5MB
-
Filesize
88KB
-
Filesize
84KB
-
Filesize
76KB
-
Filesize
112KB
-
Filesize
1.1MB
-
Filesize
88KB
-
Filesize
80KB
-
Filesize
72KB
-
Filesize
88KB
-
Filesize
52KB
-
Filesize
732KB
-
Filesize
56KB
-
Filesize
224KB
-
Filesize
1.5MB
-
Filesize
752KB