9ecd96e90def2fa42b060d64290129903115d7410b2c2008e8d4b928c4b5846a

Submit
Reports

Overview

overview

Static

static

beaker-bro....2.exe

windows7-x64

beaker-bro....2.exe

windows10-2004-x64

$PLUGINSDI...er.dll

windows7-x64

$PLUGINSDI...er.dll

windows10-2004-x64

$PLUGINSDI...ls.dll

windows7-x64

$PLUGINSDI...ls.dll

windows10-2004-x64

$PLUGINSDI...em.dll

windows7-x64

$PLUGINSDI...em.dll

windows10-2004-x64

$PLUGINSDI...ll.dll

windows7-x64

$PLUGINSDI...ll.dll

windows10-2004-x64

$PLUGINSDIR/app-64.7z

windows7-x64

$PLUGINSDIR/app-64.7z

windows10-2004-x64

msvcp140.dll

windows7-x64

msvcp140.dll

windows10-2004-x64

natives_blob.js

windows7-x64

natives_blob.js

windows10-2004-x64

node.dll

windows7-x64

node.dll

windows10-2004-x64

resources/...ple.js

windows7-x64

resources/...ple.js

windows10-2004-x64

resources/...dex.js

windows7-x64

resources/...dex.js

windows10-2004-x64

resources/...gen.sh

windows7-x64

resources/...gen.sh

windows10-2004-x64

resources/...ll.bat

windows7-x64

resources/...ll.bat

windows10-2004-x64

resources/...se.bat

windows7-x64

resources/...se.bat

windows10-2004-x64

resources/...ss.bat

windows7-x64

resources/...ss.bat

windows10-2004-x64

resources/...ep.vbs

windows7-x64

resources/...ep.vbs

windows10-2004-x64

Analysis

max time kernel
587s
max time network
599s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
07-09-2024 17:15

Sharing

Copy URL

Twitter E-mail

Static task

static1

zloader

2 signatures

Behavioral task

behavioral1

Sample

beaker-browser-setup-0.8.2.exe

Resource

win7-20240903-en

zloader botnet discovery trojan

windows7-x64

11 signatures

600 seconds

Behavioral task

behavioral2

Sample

beaker-browser-setup-0.8.2.exe

Resource

win10v2004-20240802-en

zloader botnet discovery trojan

windows10-2004-x64

11 signatures

600 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/SpiderBanner.dll

Resource

win7-20240903-en

discovery

windows7-x64

2 signatures

600 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/SpiderBanner.dll

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

2 signatures

600 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

600 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/System.dll

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

600 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/WinShell.dll

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

600 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/WinShell.dll

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/app-64.7z

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

600 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/app-64.7z

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral13

Sample

msvcp140.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

600 seconds

Behavioral task

behavioral14

Sample

msvcp140.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral15

Sample

natives_blob.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

600 seconds

Behavioral task

behavioral16

Sample

natives_blob.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

600 seconds

Behavioral task

behavioral17

Sample

node.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

600 seconds

Behavioral task

behavioral18

Sample

node.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral19

Sample

resources/app.asar.unpacked/node_modules/sodium-native/example.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

600 seconds

Behavioral task

behavioral20

Sample

resources/app.asar.unpacked/node_modules/sodium-native/example.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

600 seconds

Behavioral task

behavioral21

Sample

resources/app.asar.unpacked/node_modules/sodium-native/index.js

Resource

win7-20240903-en

execution

windows7-x64

1 signatures

600 seconds

Behavioral task

behavioral22

Sample

resources/app.asar.unpacked/node_modules/sodium-native/index.js

Resource

win10v2004-20240802-en

execution

windows10-2004-x64

1 signatures

600 seconds

Behavioral task

behavioral23

Sample

resources/app.asar.unpacked/node_modules/sodium-native/libsodium/autogen.sh

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

600 seconds

Behavioral task

behavioral24

Sample

resources/app.asar.unpacked/node_modules/sodium-native/libsodium/autogen.sh

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral25

Sample

resources/app.asar.unpacked/node_modules/sodium-native/libsodium/builds/msvc/build/buildall.bat

Resource

win7-20240729-en

windows7-x64

0 signatures

600 seconds

Behavioral task

behavioral26

Sample

resources/app.asar.unpacked/node_modules/sodium-native/libsodium/builds/msvc/build/buildall.bat

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral27

Sample

resources/app.asar.unpacked/node_modules/sodium-native/libsodium/builds/msvc/build/buildbase.bat

Resource

win7-20240704-en

windows7-x64

0 signatures

600 seconds

Behavioral task

behavioral28

Sample

resources/app.asar.unpacked/node_modules/sodium-native/libsodium/builds/msvc/build/buildbase.bat

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral29

Sample

resources/app.asar.unpacked/node_modules/sodium-native/libsodium/msvc-scripts/process.bat

Resource

win7-20240903-en

windows7-x64

0 signatures

600 seconds

Behavioral task

behavioral30

Sample

resources/app.asar.unpacked/node_modules/sodium-native/libsodium/msvc-scripts/process.bat

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral31

Sample

resources/app.asar.unpacked/node_modules/sodium-native/libsodium/msvc-scripts/rep.vbs

Resource

win7-20240903-en

windows7-x64

0 signatures

600 seconds

Behavioral task

behavioral32

Sample

resources/app.asar.unpacked/node_modules/sodium-native/libsodium/msvc-scripts/rep.vbs

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

600 seconds

Report Analysis Logs

General

Target

msvcp140.dll
Size

626KB
MD5

d396985225d85caa7d743d67c7da6316
SHA1

915d5829ed02171684c2a9e8b3b57f7a35bc1e2c
SHA256

be2ef4f6d540d0ac5fddd556dcb6bfaf6cb6288679e4d64882d625ff35f173aa
SHA512

d7b0df2865bf491c9caf34cbabefb7b7f04b35b85276a59fef0499d02b09651d8f6d0db9e87df4a9a1417f07784a8e5625e9805bc434b87d64e442ab98e24075
SSDEEP

12288:+/AqzeYd5jcj712LobwFYz0U3lVQEKZm+jWodEEVncj:8x4rYYzr3jQEKZm+jWodEEVu

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\msvcp140.dll,#1
1⤵
PID:3916

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4076,i,1602949858158667699,12464335823361976127,262144 --variations-seed-version --mojo-platform-channel-handle=3812 /prefetch:8
1⤵
PID:1220

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads