498df8057ccd98b0cc7b47fb53276fb2cf040d5f745c6138d4b574df620e7ce2

Login
Reports

Overview

overview

Static

static

Thanks For...PI.dll

windows7-x64

Thanks For...PI.dll

windows10-2004-x64

Thanks For...ct.dll

windows7-x64

Thanks For...ct.dll

windows10-2004-x64

Thanks For...ti.dll

windows7-x64

Thanks For...ti.dll

windows10-2004-x64

Thanks For...nx.dll

windows7-x64

Thanks For...nx.dll

windows10-2004-x64

Thanks For...xe.exe

windows7-x64

Thanks For...xe.exe

windows10-2004-x64

Thanks For...ay.ps1

windows7-x64

Thanks For...ay.ps1

windows10-2004-x64

Thanks For...ls.ps1

windows7-x64

Thanks For...ls.ps1

windows10-2004-x64

Thanks For...or.ps1

windows7-x64

Thanks For...or.ps1

windows10-2004-x64

Thanks For...pt.ps1

windows7-x64

Thanks For...pt.ps1

windows10-2004-x64

Thanks For...te.ps1

windows7-x64

Thanks For...te.ps1

windows10-2004-x64

Thanks For...og.ps1

windows7-x64

Thanks For...og.ps1

windows10-2004-x64

Thanks For...el.ps1

windows7-x64

Thanks For...el.ps1

windows10-2004-x64

Thanks For...Ex.ps1

windows7-x64

Thanks For...Ex.ps1

windows10-2004-x64

Thanks For...le.ps1

windows7-x64

Thanks For...le.ps1

windows10-2004-x64

Thanks For...us.ps1

windows7-x64

Thanks For...us.ps1

windows10-2004-x64

Thanks For...ox.ps1

windows7-x64

Thanks For...ox.ps1

windows10-2004-x64

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
07/09/2024, 16:13

Sharing

Copy URL Twitter E-mail

Static task

static1

4 signatures

agilenet

Behavioral task

behavioral1

Sample

Thanks For Purchase/S-400 [EXTRACT]/API.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Thanks For Purchase/S-400 [EXTRACT]/API.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/Act.dll

Resource

win7-20240704-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/Act.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/Anti.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/Anti.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/Anx.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/Anx.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Aut2Exe/Aut2exe.exe

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral10

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Aut2Exe/Aut2exe.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

1 signatures

150 seconds

discovery

Behavioral task

behavioral11

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Array.ps1

Resource

win7-20240704-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral12

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Array.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral13

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/ArrayDisplayInternals.ps1

Resource

win7-20240729-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral14

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/ArrayDisplayInternals.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral15

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Color.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral16

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Color.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral17

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Crypt.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral18

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Crypt.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral19

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Date.ps1

Resource

win7-20240708-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral20

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Date.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral21

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/EventLog.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral22

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/EventLog.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral23

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Excel.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral24

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/Excel.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral25

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/FTPEx.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral26

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/FTPEx.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral27

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/File.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral28

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/File.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral29

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/GDIPlus.ps1

Resource

win7-20240729-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral30

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/GDIPlus.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral31

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/GuiComboBox.ps1

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral32

Sample

Thanks For Purchase/S-400 [EXTRACT]/FC/CVE_Port/AutoIt3/Include/GuiComboBox.ps1

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

execution

Report Analysis Logs

General

Target
Thanks For Purchase/S-400 [EXTRACT]/FC/Anx.dll
Size 23KB
Sample240907-tpan5sscql
SHA256 40d7c2fab8c23cb959842c8d74eff8541a4b1c1dcbec99806e3c92e7f990d962
MD5 0f52530cf216a3cf65fd195c8b29768d
SHA1 4675f8ddd03ab1fe6de9a4d5c2c1b4511ec5bc5b
SHA512 42035cd7075d4019fbc42b2ae470a4c224e121c47a41925e3fec2f344aa298e1e2c95118ee0ba6a53f9ae8adf0ccf94381b21fb3b5caf2b90c28936cbc1d0c83
SSDEEP 384:aRrUJh5fljJul3zsW3cffwElNZyzAd2U2tbKc1TokI7yC1e5Iuf6R/elISjsdm:aR0h5fl8l3r3cnDT2RKc1C1evuqYdm
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Thanks For Purchase\S-400 [EXTRACT]\FC\Anx.dll",#1
1⤵
PID:2520

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads