5366657e96a7e5477a37c0c7a59bfcfb7d06235a3a9e796d9e218de875cbcc5d | Triage

Submit
Reports

Overview

overview

3

Static

static

1

infected.zip

windows7-x64

1

infected.zip

windows10-2004-x64

1

.env

windows7-x64

3

.env

windows10-2004-x64

3

afk_data.json

windows7-x64

3

afk_data.json

windows10-2004-x64

3

auto_messages.json

windows7-x64

3

auto_messages.json

windows10-2004-x64

3

auto_responses.json

windows7-x64

3

auto_responses.json

windows10-2004-x64

3

cogs/admin.py

windows7-x64

3

cogs/admin.py

windows10-2004-x64

3

cogs/afk.py

windows7-x64

3

cogs/afk.py

windows10-2004-x64

3

cogs/auto_...s.json

windows7-x64

3

cogs/auto_...s.json

windows10-2004-x64

3

cogs/auto_...s.json

windows7-x64

3

cogs/auto_...s.json

windows10-2004-x64

3

cogs/automessage.py

windows7-x64

3

cogs/automessage.py

windows10-2004-x64

3

cogs/autoresponder.py

windows7-x64

3

cogs/autoresponder.py

windows10-2004-x64

3

cogs/crypto.py

windows7-x64

3

cogs/crypto.py

windows10-2004-x64

3

cogs/dump.py

windows7-x64

3

cogs/dump.py

windows10-2004-x64

3

cogs/fun.py

windows7-x64

3

cogs/fun.py

windows10-2004-x64

3

cogs/hentai.py

windows7-x64

3

cogs/hentai.py

windows10-2004-x64

3

cogs/image.py

windows7-x64

3

cogs/image.py

windows10-2004-x64

3

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240730-en
resource tags

arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system
submitted
01-08-2024 05:34

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

infected.zip

Resource

win7-20240705-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

infected.zip

Resource

win10v2004-20240730-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

.env

Resource

win7-20240705-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral4

Sample

.env

Resource

win10v2004-20240730-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

afk_data.json

Resource

win7-20240708-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral6

Sample

afk_data.json

Resource

win10v2004-20240730-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

auto_messages.json

Resource

win7-20240704-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral8

Sample

auto_messages.json

Resource

win10v2004-20240730-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

auto_responses.json

Resource

win7-20240708-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral10

Sample

auto_responses.json

Resource

win10v2004-20240730-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

cogs/admin.py

Resource

win7-20240705-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral12

Sample

cogs/admin.py

Resource

win10v2004-20240730-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

cogs/afk.py

Resource

win7-20240704-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral14

Sample

cogs/afk.py

Resource

win10v2004-20240730-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

cogs/auto_messages.json

Resource

win7-20240729-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral16

Sample

cogs/auto_messages.json

Resource

win10v2004-20240730-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

cogs/auto_responses.json

Resource

win7-20240708-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral18

Sample

cogs/auto_responses.json

Resource

win10v2004-20240730-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

cogs/automessage.py

Resource

win7-20240705-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral20

Sample

cogs/automessage.py

Resource

win10v2004-20240730-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

cogs/autoresponder.py

Resource

win7-20240705-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral22

Sample

cogs/autoresponder.py

Resource

win10v2004-20240730-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

cogs/crypto.py

Resource

win7-20240708-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral24

Sample

cogs/crypto.py

Resource

win10v2004-20240730-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

cogs/dump.py

Resource

win7-20240704-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral26

Sample

cogs/dump.py

Resource

win10v2004-20240730-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

cogs/fun.py

Resource

win7-20240708-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral28

Sample

cogs/fun.py

Resource

win10v2004-20240730-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

cogs/hentai.py

Resource

win7-20240708-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral30

Sample

cogs/hentai.py

Resource

win10v2004-20240730-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

cogs/image.py

Resource

win7-20240729-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral32

Sample

cogs/image.py

Resource

win10v2004-20240730-en

windows10-2004-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

infected.zip
Size

27KB
MD5

1ab9f0da0a91d815532681e7121f66df
SHA1

1572548f496e630b6e0aa5ce7fc67109569080e3
SHA256

5366657e96a7e5477a37c0c7a59bfcfb7d06235a3a9e796d9e218de875cbcc5d
SHA512

1f1f2a01f0c2f0048ea845c4a74b6f5f4cb3584156f54615324ae102eab0a5494508d89e2f8f252e04948e73c44977b697815fb59371402e8ac3afeb560168b4
SSDEEP

768:QOukPFHNLitSXTH2J0zKiZ2y4E5wS7evZWSoG87N:hd1xy0ff4c407G6N

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\infected.zip
1⤵
PID:112

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:316

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy