10478f357fce33e3022657700b14d357f727880a2c9f12802f244054a94bfbfd

Login
Reports

Overview

overview

Static

static

Artic-Tool...tic.py

windows10-1703-x64

Artic-Tool...12.pyc

windows10-1703-x64

Artic-Tool... 2.exe

windows10-1703-x64

Artic-Tool...up.bat

windows10-1703-x64

Artic-Tool...rt.bat

windows10-1703-x64

Artic-Tool...t__.py

windows10-1703-x64

Artic-Tool...12.pyc

windows10-1703-x64

Artic-Tool...12.pyc

windows10-1703-x64

Artic-Tool...12.pyc

windows10-1703-x64

Artic-Tool...12.pyc

windows10-1703-x64

Artic-Tool...12.pyc

windows10-1703-x64

Artic-Tool...12.pyc

windows10-1703-x64

Artic-Tool...12.pyc

windows10-1703-x64

Artic-Tool...12.pyc

windows10-1703-x64

Artic-Tool...12.pyc

windows10-1703-x64

Artic-Tool...12.pyc

windows10-1703-x64

Artic-Tool...12.pyc

windows10-1703-x64

Artic-Tool...12.pyc

windows10-1703-x64

Artic-Tool...12.pyc

windows10-1703-x64

Artic-Tool...12.pyc

windows10-1703-x64

Artic-Tool...12.pyc

windows10-1703-x64

Artic-Tool...12.pyc

windows10-1703-x64

Artic-Tool...les.py

windows10-1703-x64

Artic-Tool...mer.py

windows10-1703-x64

Artic-Tool...ger.py

windows10-1703-x64

Artic-Tool...ort.py

windows10-1703-x64

Artic-Tool...mer.py

windows10-1703-x64

Artic-Tool...ger.py

windows10-1703-x64

Artic-Tool...ker.py

windows10-1703-x64

Artic-Tool...ker.py

windows10-1703-x64

Artic-Tool...ner.py

windows10-1703-x64

Artic-Tool...ver.py

windows10-1703-x64

Analysis

max time kernel
133s
max time network
142s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
08/07/2024, 03:15

Sharing

Copy URL Twitter E-mail

Static task

static1

3 signatures

office04 quasar

Behavioral task

behavioral1

Sample

Artic-Tools-main/Artic.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral2

Sample

Artic-Tools-main/__pycache__/Xvirus.cpython-312.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral3

Sample

Artic-Tools-main/setup 2.exe

Resource

win10-20240404-en

windows10-1703-x64

8 signatures

1800 seconds

quasar office04 spyware trojan

Behavioral task

behavioral4

Sample

Artic-Tools-main/setup.bat

Resource

win10-20240404-en

windows10-1703-x64

1 signatures

1800 seconds

Behavioral task

behavioral5

Sample

Artic-Tools-main/start.bat

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral6

Sample

Artic-Tools-main/util/__init__.py

Resource

win10-20240611-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral7

Sample

Artic-Tools-main/util/__pycache__/__init__.cpython-312.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral8

Sample

Artic-Tools-main/util/options/__pycache__/bypass_rules.cpython-312.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral9

Sample

Artic-Tools-main/util/options/__pycache__/channel_spammer.cpython-312.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral10

Sample

Artic-Tools-main/util/options/__pycache__/hypesquad_changer.cpython-312.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral11

Sample

Artic-Tools-main/util/options/__pycache__/mass_report.cpython-312.pyc

Resource

win10-20240611-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral12

Sample

Artic-Tools-main/util/options/__pycache__/soundboard_spammer.cpython-312.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral13

Sample

Artic-Tools-main/util/options/__pycache__/token_bio_changer.cpython-312.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral14

Sample

Artic-Tools-main/util/options/__pycache__/token_checker.cpython-312.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral15

Sample

Artic-Tools-main/util/options/__pycache__/token_global_nicker.cpython-312.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral16

Sample

Artic-Tools-main/util/options/__pycache__/token_joiner.cpython-312.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral17

Sample

Artic-Tools-main/util/options/__pycache__/token_leaver.cpython-312.pyc

Resource

win10-20240611-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral18

Sample

Artic-Tools-main/util/options/__pycache__/token_pron_changer.cpython-312.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral19

Sample

Artic-Tools-main/util/options/__pycache__/token_saver.cpython-312.pyc

Resource

win10-20240611-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral20

Sample

Artic-Tools-main/util/options/__pycache__/token_server_nicker.cpython-312.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral21

Sample

Artic-Tools-main/util/options/__pycache__/token_typer.cpython-312.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral22

Sample

Artic-Tools-main/util/options/__pycache__/webhook_tool.cpython-312.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral23

Sample

Artic-Tools-main/util/options/bypass_rules.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral24

Sample

Artic-Tools-main/util/options/channel_spammer.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral25

Sample

Artic-Tools-main/util/options/hypesquad_changer.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral26

Sample

Artic-Tools-main/util/options/mass_report.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral27

Sample

Artic-Tools-main/util/options/soundboard_spammer.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral28

Sample

Artic-Tools-main/util/options/token_bio_changer.py

Resource

win10-20240611-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral29

Sample

Artic-Tools-main/util/options/token_checker.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral30

Sample

Artic-Tools-main/util/options/token_global_nicker.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral31

Sample

Artic-Tools-main/util/options/token_joiner.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral32

Sample

Artic-Tools-main/util/options/token_leaver.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

1800 seconds

Report Analysis Logs

General

Target
Artic-Tools-main/setup.bat
Size 62B
Sample240708-dsawbasbnh
SHA256 59f5244b33fe77d4dfe76e5159d44a07e037040f8790276ec84139ed3128a21b
MD5 bac1df08b5a2b813d82ace3a51adc67f
SHA1 bd1279e6379de4ea6ac108718010235f3b342405
SHA512 175b17c6e7d91aea20e6d8d3b63abfd467c0cf7fc6b8c574e39dbffeb52db8c40020816291f7a83e0411a165d0535c033ff1df299dd2c2a7e48ba8b34dcd4afa
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 4876 wrote to memory of 4172	4876	cmd.exe	74
PID 4876 wrote to memory of 4172	4876	cmd.exe	74

Processes

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Artic-Tools-main\setup.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:4876
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /K start.bat
  2⤵
  PID:4172

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads