Overview

overview

10

Static

static

10

BoratRat_Cracked.exe

windows7-x64

10

BoratRat_Cracked.exe

windows10-2004-x64

10

bin/Audio.dll

windows7-x64

1

bin/Audio.dll

windows10-2004-x64

1

bin/Discord.dll

windows7-x64

1

bin/Discord.dll

windows10-2004-x64

1

bin/Extra.dll

windows7-x64

1

bin/Extra.dll

windows10-2004-x64

1

bin/FileManager.dll

windows7-x64

1

bin/FileManager.dll

windows10-2004-x64

1

bin/FileSearcher.dll

windows7-x64

1

bin/FileSearcher.dll

windows10-2004-x64

1

bin/Fun.dll

windows7-x64

1

bin/Fun.dll

windows10-2004-x64

1

bin/Information.dll

windows7-x64

1

bin/Information.dll

windows10-2004-x64

1

bin/Keylogger.exe

windows7-x64

1

bin/Keylogger.exe

windows10-2004-x64

1

bin/Logger.dll

windows7-x64

1

bin/Logger.dll

windows10-2004-x64

1

bin/Messag...ib.dll

windows7-x64

1

bin/Messag...ib.dll

windows10-2004-x64

1

bin/Miscellaneous.dll

windows7-x64

1

bin/Miscellaneous.dll

windows10-2004-x64

1

bin/Netstat.dll

windows7-x64

1

bin/Netstat.dll

windows10-2004-x64

1

bin/Options.dll

windows7-x64

1

bin/Options.dll

windows10-2004-x64

1

bin/Proces...er.dll

windows7-x64

1

bin/Proces...er.dll

windows10-2004-x64

1

bin/Ransomware.dll

windows7-x64

1

bin/Ransomware.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    95s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-08-2024 11:06

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bin/MessagePackLib.dll

  • Size

    16KB

  • MD5

    590b00c87d5ff2ffe09079f0406eb2cd

  • SHA1

    92c91f1db8c2c8cc34c2e1a26f4f970f1518a7ed

  • SHA256

    adb00dee751b4ba620d3b0e002f5b6d8b89cf63b062f74ec65bba72294d553d1

  • SHA512

    9396620bb9d77cacd7bc2bfa44e8fb76091e314298434d8ba995595df0b2a13edf8229c465b563aa668702176ccf2de34e9fd3d1567d4ff20d94672aba4ad745

  • SSDEEP

    384:omnkO72iseXGr8puUUqmMDRVE7PuFRQ5:7nkprnJMDRVE72I

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\bin\MessagePackLib.dll,#1
    1⤵
      PID:3560

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads