a9b919c46156302c6d580a884c600be2f0375590c4879996c980c2c597051f95

Submit
Reports

Overview

overview

Static

static

ToolKit.Pr...16.zip

windows7-x64

ToolKit.Pr...16.zip

windows11-21h2-x64

ToolKit.Pr...fo.dat

windows10-2004-x64

ToolKit.Pr...fo.dat

windows11-21h2-x64

ToolKit.Pr...st.dat

windows10-2004-x64

ToolKit.Pr...st.dat

windows11-21h2-x64

ToolKit.Pr...es.dat

windows10-2004-x64

ToolKit.Pr...es.dat

windows11-21h2-x64

ToolKit.Pr...24.jpg

windows7-x64

ToolKit.Pr...24.jpg

windows11-21h2-x64

ToolKit.Pr...st.dat

windows11-21h2-x64

ToolKit.Pr...st.dat

windows11-21h2-x64

ToolKit.Pr...ge.dll

windows10-2004-x64

ToolKit.Pr...ge.dll

windows11-21h2-x64

ToolKit.Pr...TK.dll

windows10-2004-x64

ToolKit.Pr...TK.dll

windows11-21h2-x64

ToolKit.Pr...um.exe

windows7-x64

ToolKit.Pr...um.exe

windows11-21h2-x64

ToolKit.Pr...sw.dll

windows10-2004-x64

ToolKit.Pr...sw.dll

windows11-21h2-x64

Analysis

max time kernel
146s
max time network
274s
platform
windows11-21h2_x64
resource
win11-20240709-en
resource tags

arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
submitted
22/07/2024, 10:33

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ToolKit.Premium.v1.11.16.zip

Resource

win7-20240708-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral2

Sample

ToolKit.Premium.v1.11.16.zip

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral3

Sample

ToolKit.Premium.v1.11.16/Data/CashShop Files/IGC_CashItemInfo.dat

Resource

win10v2004-20240709-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral4

Sample

ToolKit.Premium.v1.11.16/Data/CashShop Files/IGC_CashItemInfo.dat

Resource

win11-20240709-en

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral5

Sample

ToolKit.Premium.v1.11.16/Data/CashShop Files/IGC_CashItemList.dat

Resource

win10v2004-20240709-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral6

Sample

ToolKit.Premium.v1.11.16/Data/CashShop Files/IGC_CashItemList.dat

Resource

win11-20240709-en

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral7

Sample

ToolKit.Premium.v1.11.16/Data/CashShop Files/IGC_CashItemPackages.dat

Resource

win10v2004-20240709-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral8

Sample

ToolKit.Premium.v1.11.16/Data/CashShop Files/IGC_CashItemPackages.dat

Resource

win11-20240709-en

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral9

Sample

ToolKit.Premium.v1.11.16/Data/Custom Maps/24.jpg

Resource

win7-20240704-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral10

Sample

ToolKit.Premium.v1.11.16/Data/Custom Maps/24.jpg

Resource

win11-20240709-en

windows11-21h2-x64

1 signatures

300 seconds

Behavioral task

behavioral11

Sample

ToolKit.Premium.v1.11.16/Data/SpecialItemList.dat

Resource

win11-20240709-en

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral12

Sample

ToolKit.Premium.v1.11.16/Data/SpecialItemList.dat

Resource

win11-20240709-en

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral13

Sample

ToolKit.Premium.v1.11.16/FreeImage.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral14

Sample

ToolKit.Premium.v1.11.16/FreeImage.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral15

Sample

ToolKit.Premium.v1.11.16/OpenTK.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral16

Sample

ToolKit.Premium.v1.11.16/OpenTK.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral17

Sample

ToolKit.Premium.v1.11.16/ToolKit.Premium.exe

Resource

win7-20240708-en

windows7-x64

6 signatures

300 seconds

Behavioral task

behavioral18

Sample

ToolKit.Premium.v1.11.16/ToolKit.Premium.exe

Resource

win11-20240709-en

bootkit evasion persistence trojan

windows11-21h2-x64

6 signatures

300 seconds

Behavioral task

behavioral19

Sample

ToolKit.Premium.v1.11.16/cppcsw.dll

Resource

win10v2004-20240709-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral20

Sample

ToolKit.Premium.v1.11.16/cppcsw.dll

Resource

win11-20240709-en

windows11-21h2-x64

0 signatures

300 seconds

Report Analysis Logs

General

Target

ToolKit.Premium.v1.11.16/cppcsw.dll
Size

1.4MB
MD5

3c9fcebd51229902c8aeefcedac36319
SHA1

f4115054bf4848178f8fb1110b9c370a34945fbb
SHA256

ff01182b10b04ee2aa03a8cc2779a09af3016ed923c3421a9debe669c2558399
SHA512

3afe8d7179abdf42a09fad232d4daf4d45c54e3fcf1a3f1e5a8fe5a7bddf2a445e0805a6b61546efdedc024f7b13edb8f82b6404a99632d32664769db39f4592
SSDEEP

24576:9QxzEyXxGMzKtY+Zt1mERezUBkpW4QPEyXOEV1QmlxLkEFRaLNFUKC5lO29VfPbr:WxtXwOU4LBgO+

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ToolKit.Premium.v1.11.16\cppcsw.dll,#1
1⤵
PID:3956

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads