498df8057ccd98b0cc7b47fb53276fb2cf040d5f745c6138d4b574df620e7ce2

Login
Reports

Overview

overview

Static

static

Thanks For...PI.dll

windows7-x64

Thanks For...PI.dll

windows10-2004-x64

Thanks For...ct.dll

windows7-x64

Thanks For...ct.dll

windows10-2004-x64

Thanks For...ti.dll

windows7-x64

Thanks For...ti.dll

windows10-2004-x64

Thanks For...nx.dll

windows7-x64

Thanks For...nx.dll

windows10-2004-x64

Thanks For...xe.exe

windows7-x64

Thanks For...xe.exe

windows10-2004-x64

Thanks For...ay.ps1

windows7-x64

Thanks For...ay.ps1

windows10-2004-x64

Thanks For...ls.ps1

windows7-x64

Thanks For...ls.ps1

windows10-2004-x64

Thanks For...or.ps1

windows7-x64

Thanks For...or.ps1

windows10-2004-x64

Thanks For...pt.ps1

windows7-x64

Thanks For...pt.ps1

windows10-2004-x64

Thanks For...te.ps1

windows7-x64

Thanks For...te.ps1

windows10-2004-x64

Thanks For...og.ps1

windows7-x64

Thanks For...og.ps1

windows10-2004-x64

Thanks For...el.ps1

windows7-x64

Thanks For...el.ps1

windows10-2004-x64

Thanks For...Ex.ps1

windows7-x64

Thanks For...Ex.ps1

windows10-2004-x64

Thanks For...le.ps1

windows7-x64

Thanks For...le.ps1

windows10-2004-x64

Thanks For...us.ps1

windows7-x64

Thanks For...us.ps1

windows10-2004-x64

Thanks For...ox.ps1

windows7-x64

Thanks For...ox.ps1

windows10-2004-x64

Analysis

max time kernel
120s
max time network
122s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
07/09/2024, 16:13

Sharing

Copy URL Twitter E-mail

Static task

static1

4 signatures

agilenet

Behavioral task

behavioral1

Sample

Thanks For Purchase/S-400 [EXTRACT]/API.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Thanks For Purchase/S-400 [EXTRACT]/API.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/Act.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/Act.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/Anti.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/Anti.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/Anx.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/Anx.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Aut2Exe/Aut2exe.exe

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral10

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Aut2Exe/Aut2exe.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

1 signatures

150 seconds

discovery

Behavioral task

behavioral11

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Array.ps1

Resource

win7-20240704-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral12

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Array.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral13

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/ArrayDisplayInternals.ps1

Resource

win7-20240729-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral14

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/ArrayDisplayInternals.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral15

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Color.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral16

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Color.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral17

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Crypt.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral18

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Crypt.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral19

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Date.ps1

Resource

win7-20240708-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral20

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Date.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral21

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/EventLog.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral22

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/EventLog.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral23

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Excel.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral24

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Excel.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral25

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/FTPEx.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral26

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/FTPEx.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral27

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/File.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral28

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/File.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral29

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/GDIPlus.ps1

Resource

win7-20240729-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral30

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/GDIPlus.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral31

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/GuiComboBox.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral32

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/GuiComboBox.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Report Analysis Logs

General

Target
Thanks For Purchase/S-400 [EXTRACT]/FC/Act.dll
Size 12KB
Sample240907-tpan5sscql
SHA256 44e9418e96f5eb466f79b77b4e9fe550f392ae84cc5f335faf4adb8d1f02c120
MD5 40514fa1bab88f1b8c4c2a42d361f67c
SHA1 9794f98cb73d50754d595cc80f7b569672c5ef5d
SHA512 a8d1c32245d8c4c93137631ec9026fb05abb5261d0ee3cca2f32f378bb54184d1d3c8d32c7916bce1c63243e929b5ab8601c82351902587f16b5b43119031de0
SSDEEP 192:6uaZFwqkC4x50O4GsCLfm0VJ1n/xEx1V9O0uUlFgyHTzIW1Pn/vU+MgWDJnLLk:6u52OR80VJ1nZmBx3lWyHT9n/8+CFM
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Thanks For Purchase\S-400 [EXTRACT]\FC\Act.dll",#1
1⤵
PID:2624

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads