7b476bbfc4d37fa50c1c5bec98b2e8aede8087b8873eb7de27b78ad4446dddbe

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

CyberDEV C...nd.pyc

windows10-1703-x64

CyberDEV C...er.pyc

windows10-1703-x64

CyberDEV C...or.pyc

windows10-1703-x64

CyberDEV C...nts.js

windows10-1703-x64

CyberDEV C...ute.js

windows10-1703-x64

CyberDEV C...yed.js

windows10-1703-x64

CyberDEV C...le.pyc

windows10-1703-x64

CyberDEV C...on.pyc

windows10-1703-x64

CyberDEV C...ey.pyc

windows10-1703-x64

CyberDEV C...ot.pyc

windows10-1703-x64

CyberDEV C...to.pyc

windows10-1703-x64

CyberDEV C...ls.pyc

windows10-1703-x64

CyberDEV C...ver.js

windows10-1703-x64

CyberDEV C...nt.pyc

windows10-1703-x64

CyberDEV C...on.pyc

windows10-1703-x64

CyberDEV C...__.pyc

windows10-1703-x64

CyberDEV C...ns.pyc

windows10-1703-x64

CyberDEV C...ns.pyc

windows10-1703-x64

CyberDEV C...on.pyc

windows10-1703-x64

CyberDEV C...ce.pyc

windows10-1703-x64

CyberDEV C...er.pyc

windows10-1703-x64

CyberDEV C...__.pyc

windows10-1703-x64

CyberDEV C...er.pyc

windows10-1703-x64

CyberDEV C...or.pyc

windows10-1703-x64

CyberDEV C...er.pyc

windows10-1703-x64

CyberDEV C...ts.pyc

windows10-1703-x64

CyberDEV C...ns.pyc

windows10-1703-x64

CyberDEV C...or.pyc

windows10-1703-x64

CyberDEV C...ct.pyc

windows10-1703-x64

CyberDEV C...ui.pyc

windows10-1703-x64

CyberDEV C...tp.ps1

windows10-1703-x64

CyberDEV C...it.vbs

windows10-1703-x64

Resubmissions

14/08/2024, 05:47

240814-ggy1jsxfkf 10

14/08/2024, 05:40

240814-gc194ssdjn 6

Analysis

max time kernel
129s
max time network
149s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
14/08/2024, 05:40

Sharing

Copy URL

Twitter E-mail

Static task

static1

pdf evasion

3 signatures

Behavioral task

behavioral1

Sample

CyberDEV Client/lib/selenium/webdriver/remote/command.pyc

Resource

win10-20240611-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

CyberDEV Client/lib/selenium/webdriver/remote/errorhandler.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

CyberDEV Client/lib/selenium/webdriver/remote/file_detector.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

CyberDEV Client/lib/selenium/webdriver/remote/findElements.js

Resource

win10-20240404-en

execution

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

CyberDEV Client/lib/selenium/webdriver/remote/getAttribute.js

Resource

win10-20240404-en

execution

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

CyberDEV Client/lib/selenium/webdriver/remote/isDisplayed.js

Resource

win10-20240404-en

execution

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

CyberDEV Client/lib/selenium/webdriver/remote/mobile.pyc

Resource

win10-20240611-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

CyberDEV Client/lib/selenium/webdriver/remote/remote_connection.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

CyberDEV Client/lib/selenium/webdriver/remote/script_key.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

CyberDEV Client/lib/selenium/webdriver/remote/shadowroot.pyc

Resource

win10-20240404-en

discovery

windows10-1703-x64

12 signatures

150 seconds

Behavioral task

behavioral11

Sample

CyberDEV Client/lib/selenium/webdriver/remote/switch_to.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

CyberDEV Client/lib/selenium/webdriver/remote/utils.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

CyberDEV Client/lib/selenium/webdriver/remote/webdriver.js

Resource

win10-20240404-en

execution

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

CyberDEV Client/lib/selenium/webdriver/remote/webelement.pyc

Resource

win10-20240611-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

CyberDEV Client/lib/selenium/webdriver/remote/websocket_connection.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

CyberDEV Client/lib/selenium/webdriver/safari/__init__.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

CyberDEV Client/lib/selenium/webdriver/safari/options.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

CyberDEV Client/lib/selenium/webdriver/safari/permissions.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

CyberDEV Client/lib/selenium/webdriver/safari/remote_connection.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

CyberDEV Client/lib/selenium/webdriver/safari/service.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

CyberDEV Client/lib/selenium/webdriver/safari/webdriver.pyc

Resource

win10-20240611-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

CyberDEV Client/lib/selenium/webdriver/support/__init__.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

CyberDEV Client/lib/selenium/webdriver/support/abstract_event_listener.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

CyberDEV Client/lib/selenium/webdriver/support/color.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

CyberDEV Client/lib/selenium/webdriver/support/event_firing_webdriver.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

CyberDEV Client/lib/selenium/webdriver/support/events.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

CyberDEV Client/lib/selenium/webdriver/support/expected_conditions.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral28

Sample

CyberDEV Client/lib/selenium/webdriver/support/relative_locator.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

CyberDEV Client/lib/selenium/webdriver/support/select.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral30

Sample

CyberDEV Client/lib/selenium/webdriver/support/ui.pyc

Resource

win10-20240611-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

CyberDEV Client/share/tcl8.6/http1.0/http.ps1

Resource

win10-20240404-en

execution

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral32

Sample

CyberDEV Client/share/tcl8.6/init.vbs

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

CyberDEV Client/share/tcl8.6/init.vbs
Size

25KB
MD5

fe92c81bb4acdda00761c695344d5f1e
SHA1

a87e1516fbd1f9751ec590273925cbc5284b16bd
SHA256

7a103a85413988456c2ad615c879bbcb4d91435bcfbbe23393e0eb52b56af6e2
SHA512

c983076e420614d12ab2a7342f6f74dd5dcdad21c7c547f660e73b74b3be487a560abd73213df3f58be3d9dbd061a12d2956ca85a58d7b9d9e40d9fa6e6c25eb
SSDEEP

768:cXugPHudKlExBG+Xg3Qonlm6ofRRECLSQDjr5vkhzx/i:hgGdKli4eonlm6offLzehNi

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\CyberDEV Client\share\tcl8.6\init.vbs"
1⤵
PID:4640

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads