Overview
overview
10Static
static
3Rebel/Bin/...or.exe
windows7-x64
5Rebel/Bin/...or.exe
windows10-2004-x64
5Rebel/Bin/Rebel.dll
windows7-x64
1Rebel/Bin/Rebel.dll
windows10-2004-x64
1Rebel/Fast...ox.dll
windows7-x64
1Rebel/Fast...ox.dll
windows10-2004-x64
1Rebel/Rebe...ed.exe
windows7-x64
8Rebel/Rebe...ed.exe
windows10-2004-x64
10Rebel/Syst...om.dll
windows7-x64
1Rebel/Syst...om.dll
windows10-2004-x64
1Analysis
-
max time kernel
139s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
24-08-2024 18:32
Static task
static1
Behavioral task
behavioral1
Sample
Rebel/Bin/Injector.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
Rebel/Bin/Injector.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Rebel/Bin/Rebel.dll
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
Rebel/Bin/Rebel.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Rebel/FastColoredTextBox.dll
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
Rebel/FastColoredTextBox.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Rebel/RebelCracked.exe
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
Rebel/RebelCracked.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Rebel/System.CodeDom.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
Rebel/System.CodeDom.dll
Resource
win10v2004-20240802-en
General
-
Target
Rebel/Bin/Rebel.dll
-
Size
8.6MB
-
MD5
660d2429fc5f088bd197fb0958303936
-
SHA1
4189d1ba115f9e00caceb286f22655c6988e1eb6
-
SHA256
c9b95b9204234edfab46912d21953e3a6985a6b7d50c4fd63372e3d5361c7f3d
-
SHA512
9875fff045460f77dfc21cecd1de326d67778efd12fe8f53fc09bacfec807a9309752ed4bbb23653060fbee9152dd7c9a9bfda3a0c13c0375a1db932a02a197d
-
SSDEEP
98304:kz+S5QwKbQLCsjIpdUqsQf3/sfRMyxl5dn5Sz29f49EzFgfVp+t:WrS2LXjIpyDS3/0aWfmC
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Rebel\Bin\Rebel.dll,#11⤵PID:3136
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4072,i,12198811467968044966,17227406646827438786,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:81⤵PID:2488