Overview
overview
10Static
static
8Builder.bat
windows10-1703-x64
1Components...OBF.py
windows10-1703-x64
3Components/loader.py
windows10-1703-x64
3Components...ess.py
windows10-1703-x64
3Components/process.py
windows10-1703-x64
3env/Script...ng.dll
windows10-1703-x64
1env/Script...AR.exe
windows10-1703-x64
3env/Script...ll.exe
windows10-1703-x64
4env/Script...on.exe
windows10-1703-x64
3env/Script...64.exe
windows10-1703-x64
1env/Script...En.exe
windows10-1703-x64
3env/Script...64.exe
windows10-1703-x64
1env/Script...AR.exe
windows10-1703-x64
5env/Script...ng.dll
windows10-1703-x64
1env/Script...AR.exe
windows10-1703-x64
3env/Script...ll.exe
windows10-1703-x64
4env/Script...on.exe
windows10-1703-x64
3env/Script...64.exe
windows10-1703-x64
1env/Script...En.exe
windows10-1703-x64
3env/Script...64.exe
windows10-1703-x64
1env/Script...AR.exe
windows10-1703-x64
5env/Script...ip.exe
windows10-1703-x64
3env/Script...64.exe
windows10-1703-x64
1env/Script...En.exe
windows10-1703-x64
3env/Script...64.exe
windows10-1703-x64
1env/Script...ip.exe
windows10-1703-x64
3env/Script...64.exe
windows10-1703-x64
1env/Script...En.exe
windows10-1703-x64
3env/Script...64.exe
windows10-1703-x64
1env/Script...cn.exe
windows10-1703-x64
10env/Script...ain.py
windows10-1703-x64
3gui.py
windows10-1703-x64
3Analysis
-
max time kernel
126s -
max time network
138s -
platform
windows10-1703_x64 -
resource
win10-20240611-en -
resource tags
arch:x64arch:x86image:win10-20240611-enlocale:en-usos:windows10-1703-x64system -
submitted
15-08-2024 12:55
Behavioral task
behavioral1
Sample
Builder.bat
Resource
win10-20240611-en
Behavioral task
behavioral2
Sample
Components/BlankOBF.py
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
Components/loader.py
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
Components/postprocess.py
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
Components/process.py
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
env/Scripts/dist/RarLng.dll
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
env/Scripts/dist/UnRAR.exe
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
env/Scripts/dist/Uninstall.exe
Resource
win10-20240611-en
Behavioral task
behavioral9
Sample
env/Scripts/dist/WinCon.exe
Resource
win10-20240404-en
Behavioral task
behavioral10
Sample
env/Scripts/dist/WinCon64.exe
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
env/Scripts/dist/WinConEn.exe
Resource
win10-20240404-en
Behavioral task
behavioral12
Sample
env/Scripts/dist/WinConEn64.exe
Resource
win10-20240404-en
Behavioral task
behavioral13
Sample
env/Scripts/dist/WinRAR.exe
Resource
win10-20240404-en
Behavioral task
behavioral14
Sample
env/Scripts/dist/WinRAR/RarLng.dll
Resource
win10-20240404-en
Behavioral task
behavioral15
Sample
env/Scripts/dist/WinRAR/UnRAR.exe
Resource
win10-20240611-en
Behavioral task
behavioral16
Sample
env/Scripts/dist/WinRAR/Uninstall.exe
Resource
win10-20240404-en
Behavioral task
behavioral17
Sample
env/Scripts/dist/WinRAR/WinCon.exe
Resource
win10-20240404-en
Behavioral task
behavioral18
Sample
env/Scripts/dist/WinRAR/WinCon64.exe
Resource
win10-20240404-en
Behavioral task
behavioral19
Sample
env/Scripts/dist/WinRAR/WinConEn.exe
Resource
win10-20240404-en
Behavioral task
behavioral20
Sample
env/Scripts/dist/WinRAR/WinConEn64.exe
Resource
win10-20240404-en
Behavioral task
behavioral21
Sample
env/Scripts/dist/WinRAR/WinRAR.exe
Resource
win10-20240404-en
Behavioral task
behavioral22
Sample
env/Scripts/dist/WinRAR/Zip.exe
Resource
win10-20240611-en
Behavioral task
behavioral23
Sample
env/Scripts/dist/WinRAR/Zip64.exe
Resource
win10-20240404-en
Behavioral task
behavioral24
Sample
env/Scripts/dist/WinRAR/ZipEn.exe
Resource
win10-20240404-en
Behavioral task
behavioral25
Sample
env/Scripts/dist/WinRAR/ZipEn64.exe
Resource
win10-20240404-en
Behavioral task
behavioral26
Sample
env/Scripts/dist/Zip.exe
Resource
win10-20240404-en
Behavioral task
behavioral27
Sample
env/Scripts/dist/Zip64.exe
Resource
win10-20240404-en
Behavioral task
behavioral28
Sample
env/Scripts/dist/ZipEn.exe
Resource
win10-20240404-en
Behavioral task
behavioral29
Sample
env/Scripts/dist/ZipEn64.exe
Resource
win10-20240404-en
Behavioral task
behavioral30
Sample
env/Scripts/dist/hacn.exe
Resource
win10-20240404-en
Behavioral task
behavioral31
Sample
env/Scripts/dist/main.py
Resource
win10-20240404-en
Behavioral task
behavioral32
Sample
gui.py
Resource
win10-20240404-en
General
-
Target
env/Scripts/dist/WinRAR/UnRAR.exe
-
Size
422KB
-
MD5
1ee4846cca962f50c85ae93af0376bd1
-
SHA1
4b18a97f070fea94ac896c98b669adab23e07bf2
-
SHA256
90c2b2107a22ea8eb3593a155c4c0007b18b1ba552bf65f963c040038da248be
-
SHA512
9cb39fd0f55e0b2bf436e6811ac019490596e1b73710cacfa5b024973d68c925bbe408d833eb86ed4f2b0064f158cc754c29e7371ce1470b091b6fbfcb7d6a2f
-
SSDEEP
12288:bfZS8F2j18h6zx8sI3GPT4FoMJB68QYjQM:9SO2jwyxFfT4FoMKJYjT
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).