Overview

overview

7

Static

static

7

Source/MainWindow.exe

windows7-x64

3

Source/MainWindow.exe

windows10-2004-x64

3

Source/Mai...ow.exe

windows7-x64

3

Source/Mai...ow.exe

windows10-2004-x64

3

Source/Spo...ck.cmd

windows7-x64

1

Source/Spo...ck.cmd

windows10-2004-x64

1

Source/Spo...ck.exe

windows7-x64

7

Source/Spo...ck.exe

windows10-2004-x64

7

Source/bobspeak.vbs

windows7-x64

3

Source/bobspeak.vbs

windows10-2004-x64

1

Source/mover.exe

windows7-x64

5

Source/mover.exe

windows10-2004-x64

5

SpongebobFuck.exe

windows7-x64

7

SpongebobFuck.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    141s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    05-09-2024 01:10

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Source/mover.exe

  • Size

    548KB

  • MD5

    c1978e4080d1ec7e2edf49d6c9710045

  • SHA1

    b6a87a32d80f6edf889e99fb47518e69435321ed

  • SHA256

    c9e2a7905501745c304ffc5a70b290db40088d9dc10c47a98a953267468284a8

  • SHA512

    2de11fdf749dc7f4073062cdd4881cf51b78e56cb27351f463a45c934388da2cda24bf6b71670b432c9fc039e24de9edd0e2d5382b67b2681e097636ba17626e

  • SSDEEP

    12288:OuxZ9WrtjV86EabvtVMuQE3yv5lbLG0Bh9RqtAetx:DxZ9WrBVjE8vEuQcWH13q+etx

Score
5/10

Malware Config

Signatures

  • AutoIT Executable 15 IoCs

    AutoIT scripts compiled to PE executables.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Source\mover.exe
    "C:\Users\Admin\AppData\Local\Temp\Source\mover.exe"
    1⤵
      PID:3012

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3012-0-0x0000000140000000-0x0000000140126000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3012-1-0x0000000140000000-0x0000000140126000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3012-2-0x0000000140000000-0x0000000140126000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3012-3-0x0000000140000000-0x0000000140126000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3012-4-0x0000000140000000-0x0000000140126000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3012-5-0x0000000140000000-0x0000000140126000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3012-6-0x0000000140000000-0x0000000140126000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3012-7-0x0000000140000000-0x0000000140126000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3012-8-0x0000000140000000-0x0000000140126000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3012-9-0x0000000140000000-0x0000000140126000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3012-10-0x0000000140000000-0x0000000140126000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3012-11-0x0000000140000000-0x0000000140126000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3012-12-0x0000000140000000-0x0000000140126000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3012-13-0x0000000140000000-0x0000000140126000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3012-14-0x0000000140000000-0x0000000140126000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/3012-15-0x0000000140000000-0x0000000140126000-memory.dmp

      Filesize

      1.1MB

      Download