498df8057ccd98b0cc7b47fb53276fb2cf040d5f745c6138d4b574df620e7ce2

Login
Reports

Overview

overview

Static

static

Thanks For...PI.dll

windows7-x64

Thanks For...PI.dll

windows10-2004-x64

Thanks For...ct.dll

windows7-x64

Thanks For...ct.dll

windows10-2004-x64

Thanks For...ti.dll

windows7-x64

Thanks For...ti.dll

windows10-2004-x64

Thanks For...nx.dll

windows7-x64

Thanks For...nx.dll

windows10-2004-x64

Thanks For...xe.exe

windows7-x64

Thanks For...xe.exe

windows10-2004-x64

Thanks For...ay.ps1

windows7-x64

Thanks For...ay.ps1

windows10-2004-x64

Thanks For...ls.ps1

windows7-x64

Thanks For...ls.ps1

windows10-2004-x64

Thanks For...or.ps1

windows7-x64

Thanks For...or.ps1

windows10-2004-x64

Thanks For...pt.ps1

windows7-x64

Thanks For...pt.ps1

windows10-2004-x64

Thanks For...te.ps1

windows7-x64

Thanks For...te.ps1

windows10-2004-x64

Thanks For...og.ps1

windows7-x64

Thanks For...og.ps1

windows10-2004-x64

Thanks For...el.ps1

windows7-x64

Thanks For...el.ps1

windows10-2004-x64

Thanks For...Ex.ps1

windows7-x64

Thanks For...Ex.ps1

windows10-2004-x64

Thanks For...le.ps1

windows7-x64

Thanks For...le.ps1

windows10-2004-x64

Thanks For...us.ps1

windows7-x64

Thanks For...us.ps1

windows10-2004-x64

Thanks For...ox.ps1

windows7-x64

Thanks For...ox.ps1

windows10-2004-x64

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
07/09/2024, 16:13

Sharing

Copy URL Twitter E-mail

Static task

static1

4 signatures

agilenet

Behavioral task

behavioral1

Sample

Thanks For Purchase/S-400 [EXTRACT]/API.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Thanks For Purchase/S-400 [EXTRACT]/API.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/Act.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/Act.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/Anti.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/Anti.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/Anx.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/Anx.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Aut2Exe/Aut2exe.exe

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral10

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Aut2Exe/Aut2exe.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

1 signatures

150 seconds

discovery

Behavioral task

behavioral11

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Array.ps1

Resource

win7-20240704-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral12

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Array.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral13

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/ArrayDisplayInternals.ps1

Resource

win7-20240729-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral14

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/ArrayDisplayInternals.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral15

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Color.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral16

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Color.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral17

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Crypt.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral18

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Crypt.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral19

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Date.ps1

Resource

win7-20240708-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral20

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Date.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral21

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/EventLog.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral22

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/EventLog.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral23

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Excel.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral24

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Excel.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral25

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/FTPEx.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral26

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/FTPEx.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral27

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/File.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral28

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/File.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral29

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/GDIPlus.ps1

Resource

win7-20240729-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral30

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/GDIPlus.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral31

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/GuiComboBox.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral32

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/GuiComboBox.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Report Analysis Logs

General

Target
Thanks For Purchase/S-400 [EXTRACT]/FC/Anti.dll
Size 12KB
Sample240907-tpan5sscql
SHA256 b6d8c15ecfe75c7f1a3082ce202cb85ee84450bb95f83e0e1d8f202036571524
MD5 ab646175867b7602f2497f3e8a8bb8e6
SHA1 7e5bc0df0baf3771b9c730ac437c9867a783c498
SHA512 92bcf728a8f6ed3e79512acd7d5aad4b65c8266a03e6ea325727f6539e51799d97f4b3bd0a158786e4f59785cb7dde0d2eb951b2d7c7f7e000a119d4a9b1eb82
SSDEEP 384:boEUEB2YJWVGmn+faqn2+lSyzT9n/1GbKf8:boEUEdcb+fDX/Emf8
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Thanks For Purchase\S-400 [EXTRACT]\FC\Anti.dll",#1
1⤵
PID:2260

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads