498df8057ccd98b0cc7b47fb53276fb2cf040d5f745c6138d4b574df620e7ce2

Login
Reports

Overview

overview

Static

static

Thanks For...PI.dll

windows7-x64

Thanks For...PI.dll

windows10-2004-x64

Thanks For...ct.dll

windows7-x64

Thanks For...ct.dll

windows10-2004-x64

Thanks For...ti.dll

windows7-x64

Thanks For...ti.dll

windows10-2004-x64

Thanks For...nx.dll

windows7-x64

Thanks For...nx.dll

windows10-2004-x64

Thanks For...xe.exe

windows7-x64

Thanks For...xe.exe

windows10-2004-x64

Thanks For...ay.ps1

windows7-x64

Thanks For...ay.ps1

windows10-2004-x64

Thanks For...ls.ps1

windows7-x64

Thanks For...ls.ps1

windows10-2004-x64

Thanks For...or.ps1

windows7-x64

Thanks For...or.ps1

windows10-2004-x64

Thanks For...pt.ps1

windows7-x64

Thanks For...pt.ps1

windows10-2004-x64

Thanks For...te.ps1

windows7-x64

Thanks For...te.ps1

windows10-2004-x64

Thanks For...og.ps1

windows7-x64

Thanks For...og.ps1

windows10-2004-x64

Thanks For...el.ps1

windows7-x64

Thanks For...el.ps1

windows10-2004-x64

Thanks For...Ex.ps1

windows7-x64

Thanks For...Ex.ps1

windows10-2004-x64

Thanks For...le.ps1

windows7-x64

Thanks For...le.ps1

windows10-2004-x64

Thanks For...us.ps1

windows7-x64

Thanks For...us.ps1

windows10-2004-x64

Thanks For...ox.ps1

windows7-x64

Thanks For...ox.ps1

windows10-2004-x64

Analysis

max time kernel
134s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
07/09/2024, 16:13

Sharing

Copy URL Twitter E-mail

Static task

static1

4 signatures

agilenet

Behavioral task

behavioral1

Sample

Thanks For Purchase/S-400 [EXTRACT]/API.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Thanks For Purchase/S-400 [EXTRACT]/API.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/Act.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/Act.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/Anti.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/Anti.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/Anx.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/Anx.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Aut2Exe/Aut2exe.exe

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral10

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Aut2Exe/Aut2exe.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

1 signatures

150 seconds

discovery

Behavioral task

behavioral11

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Array.ps1

Resource

win7-20240704-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral12

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Array.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral13

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/ArrayDisplayInternals.ps1

Resource

win7-20240729-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral14

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/ArrayDisplayInternals.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral15

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Color.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral16

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Color.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral17

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Crypt.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral18

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Crypt.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral19

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Date.ps1

Resource

win7-20240708-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral20

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Date.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral21

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/EventLog.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral22

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/EventLog.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral23

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Excel.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral24

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Excel.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral25

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/FTPEx.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral26

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/FTPEx.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral27

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/File.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral28

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/File.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral29

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/GDIPlus.ps1

Resource

win7-20240729-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral30

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/GDIPlus.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral31

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/GuiComboBox.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral32

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/GuiComboBox.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Report Analysis Logs

General

Target
Thanks For Purchase/S-400 [EXTRACT]/API.dll
Size 51KB
Sample240907-tpan5sscql
SHA256 9eeea1447ac2fadce2b6dbdd73a607052007f2e3c4381336e3e31450a5092509
MD5 df1b7e8e22353b01a29cb972d054ee16
SHA1 27df441b511a5f4aea9a24b54cddb8d7b5fdbdd7
SHA512 271b8ad7d51c379b0a21adcd9f1a8bf2a9f239ef5174b7d7ce9567e09aaa361a90988d63cccb6ab2b71f6936a42ecddc9f9a424a4feca1ea925cc57458e8ebd7
SSDEEP 768:DaeCA3W2BB9q4yVUy+4ousziMWZ2f1TZKbhE4wJI86zyemRoY38u9ZwSn:DaeCA3TorVYjWisOJBWylx38uP
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Thanks For Purchase\S-400 [EXTRACT]\API.dll",#1
1⤵
PID:860

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads