Static task
static1
Behavioral task
behavioral1
Sample
devine.zip
Resource
win11-20240802-en
General
-
Target
devine.zip
-
Size
8.2MB
-
MD5
6fb428ba922395fe5b8c67527b023c2b
-
SHA1
a529fecc762efd2a8beb5a6ec1fd970e3af8f76e
-
SHA256
54f5bbe59f04689df5746744431c62c458ff8fd1763465233e3928deada87249
-
SHA512
85591da9450c7f683babf5b6454d7f9f245e58de3324d19eeb0b0576569244da6efe1a9f9eeed40dc0f160e677d95e61a6d5b1ee593deea64a5b77e7084258f8
-
SSDEEP
196608:9ZGZzh8MlNq/RZDFTyGaHIJoWofqcwnRt:90ZzWYwyZHIoWofqcK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/aria2c.exe
Files
-
devine.zip.zip
-
.deepsource.toml
-
.editorconfig
-
.git/HEAD
-
.git/config
-
.git/description
-
.git/hooks/applypatch-msg.sample.sh linux
-
.git/hooks/commit-msg.sample.sh linux
-
.git/hooks/fsmonitor-watchman.sample.sh linux
-
.git/hooks/post-update.sample.sh linux
-
.git/hooks/pre-applypatch.sample.sh linux
-
.git/hooks/pre-commit.sample.sh linux
-
.git/hooks/pre-merge-commit.sample.sh linux
-
.git/hooks/pre-push.sample.sh linux
-
.git/hooks/pre-rebase.sample.sh linux
-
.git/hooks/pre-receive.sample.sh linux
-
.git/hooks/prepare-commit-msg.sample.sh linux
-
.git/hooks/push-to-checkout.sample.sh linux
-
.git/hooks/update.sample.sh linux
-
.git/index
-
.git/info/exclude
-
.git/logs/HEAD
-
.git/logs/refs/heads/master
-
.git/logs/refs/remotes/origin/HEAD
-
.git/objects/pack/pack-18854a251b610fdf36277c66e88b8438acbfca26.idx
-
.git/objects/pack/pack-18854a251b610fdf36277c66e88b8438acbfca26.pack
-
.git/packed-refs
-
.git/refs/heads/master
-
.git/refs/remotes/origin/HEAD
-
.gitattributes
-
.github/ISSUE_TEMPLATE/bug_report.md
-
.github/ISSUE_TEMPLATE/feature_request.md
-
.github/workflows/cd.yml
-
.github/workflows/ci.yml
-
.gitignore
-
.pre-commit-config.yaml
-
.vscode/extensions.json
-
CHANGELOG.md
-
CONFIG.md
-
CONTRIBUTING.md
-
LICENSE
-
README.md
-
aria2c.exe.exe windows:4 windows x64 arch:x64
df08dc090f0f36e29933a24c29033049
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
AdjustTokenPrivileges
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
GetTokenInformation
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
SystemFunction036
bcrypt
BCryptCloseAlgorithmProvider
BCryptCreateHash
BCryptDecrypt
BCryptDeriveKey
BCryptDestroyHash
BCryptDestroyKey
BCryptDestroySecret
BCryptEncrypt
BCryptExportKey
BCryptFinalizeKeyPair
BCryptFinishHash
BCryptGenRandom
BCryptGenerateKeyPair
BCryptGetProperty
BCryptHashData
BCryptImportKey
BCryptImportKeyPair
BCryptOpenAlgorithmProvider
BCryptSecretAgreement
BCryptSetProperty
BCryptSignHash
BCryptVerifySignature
crypt32
CertCloseStore
CertEnumCertificatesInStore
CertFreeCertificateContext
CryptDecodeObjectEx
PFXImportCertStore
PFXIsPFXBlob
iphlpapi
FreeMibTable
GetAdaptersAddresses
GetBestRoute2
GetUnicastIpAddressTable
if_indextoname
kernel32
AreFileApisANSI
CloseHandle
CreateFileA
CreateFileMappingA
CreateFileMappingW
CreateFileW
CreateMutexW
CreateProcessW
CreateSemaphoreW
DeleteCriticalSection
DeleteFileA
DeleteFileW
DeviceIoControl
EnterCriticalSection
ExpandEnvironmentStringsA
FlushFileBuffers
FlushViewOfFile
FormatMessageA
FormatMessageW
FreeLibrary
GetCommandLineW
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetEnvironmentVariableW
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileSize
GetFileSizeEx
GetFullPathNameA
GetFullPathNameW
GetLastError
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTempPathW
GetTickCount
GetTimeZoneInformation
GetVersionExA
GetVersionExW
GetWindowsDirectoryA
HeapAlloc
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
HeapValidate
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFree
LockFile
LockFileEx
MapViewOfFile
MoveFileExW
MultiByteToWideChar
OpenProcess
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseSemaphore
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetConsoleCtrlHandler
SetConsoleTextAttribute
SetEndOfFile
SetFilePointer
SetFilePointerEx
SetFileTime
SetFileValidData
SetLastError
SetUnhandledExceptionFilter
Sleep
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnlockFile
UnlockFileEx
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile
msvcrt
__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__argv
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_assert
_beginthreadex
_cexit
_commit
_commode
_difftime64
_endthreadex
_errno
_filelengthi64
_fileno
_fmode
_fstat64
_gmtime64
_initterm
_localtime64
_lock
_lseeki64
_onexit
_setmode
_stricmp
_strnicmp
_time64
_unlock
_wfopen
_wfsopen
_wgetcwd
_wgetenv
_wmkdir
_wopen
_wrmdir
_wsopen
_wstat64
_wunlink
abort
acos
asctime
asin
atan
calloc
cosh
exit
fclose
feof
ferror
fflush
fgetpos
fgets
fopen
fprintf
fputc
fputs
fread
free
fsetpos
fwrite
getc
getenv
getwc
islower
isspace
isupper
iswctype
isxdigit
ldiv
localeconv
log10
malloc
memchr
memcmp
memcpy
memmove
memset
perror
putc
putwc
qsort
raise
realloc
rewind
setlocale
setvbuf
signal
sinh
strchr
strcmp
strcoll
strcpy
strcspn
strerror
strftime
strlen
strncat
strncmp
strncpy
strrchr
strspn
strstr
strtol
strtoul
strxfrm
tan
tanh
tolower
towlower
towupper
ungetc
ungetwc
vfprintf
wcscoll
wcsftime
wcslen
wcstombs
wcsxfrm
_tzname
_write
_tzset
_strdup
_read
_open
_isatty
_fileno
_fdopen
_dup
_close
secur32
AcceptSecurityContext
AcquireCredentialsHandleW
ApplyControlToken
DecryptMessage
DeleteSecurityContext
EncryptMessage
FreeContextBuffer
FreeCredentialsHandle
InitializeSecurityContextA
QueryContextAttributesA
shell32
CommandLineToArgvW
ws2_32
WSASend
freeaddrinfo
getaddrinfo
gethostname
getnameinfo
getservbyname
getservbyport
wsock32
WSACleanup
WSAGetLastError
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
getpeername
getsockname
getsockopt
htonl
htons
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket
Sections
.text Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 526KB - Virtual size: 526KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 258KB - Virtual size: 257KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 14KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
cliff.toml
-
devine-services/.git/HEAD
-
devine-services/.git/config
-
devine-services/.git/description
-
devine-services/.git/hooks/applypatch-msg.sample.sh linux
-
devine-services/.git/hooks/commit-msg.sample.sh linux
-
devine-services/.git/hooks/fsmonitor-watchman.sample.sh linux
-
devine-services/.git/hooks/post-update.sample.sh linux
-
devine-services/.git/hooks/pre-applypatch.sample.sh linux
-
devine-services/.git/hooks/pre-commit.sample.sh linux
-
devine-services/.git/hooks/pre-merge-commit.sample.sh linux
-
devine-services/.git/hooks/pre-push.sample.sh linux
-
devine-services/.git/hooks/pre-rebase.sample.sh linux
-
devine-services/.git/hooks/pre-receive.sample.sh linux
-
devine-services/.git/hooks/prepare-commit-msg.sample.sh linux
-
devine-services/.git/hooks/push-to-checkout.sample.sh linux
-
devine-services/.git/hooks/update.sample.sh linux
-
devine-services/.git/index
-
devine-services/.git/info/exclude
-
devine-services/.git/logs/HEAD
-
devine-services/.git/logs/refs/heads/main
-
devine-services/.git/logs/refs/remotes/origin/HEAD
-
devine-services/.git/objects/pack/pack-baac2ac0917e94e7d6057cdbd250561d93404a09.idx
-
devine-services/.git/objects/pack/pack-baac2ac0917e94e7d6057cdbd250561d93404a09.pack
-
devine-services/.git/packed-refs
-
devine-services/.git/refs/heads/main
-
devine-services/.git/refs/remotes/origin/HEAD
-
devine-services/.gitignore
-
devine-services/README.md
-
devine-services/services/ALL4/__init__.py
-
devine-services/services/ALL4/__pycache__/__init__.cpython-310.pyc
-
devine-services/services/ALL4/config.yaml
-
devine-services/services/AMZN/__init__.py
-
devine-services/services/AMZN/__pycache__/__init__.cpython-310.pyc
-
devine-services/services/AMZN/config.yaml
-
devine-services/services/CBS/__init__.py
-
devine-services/services/CBS/__pycache__/__init__.cpython-310.pyc
-
devine-services/services/CBS/config.yaml
-
devine-services/services/CR/__init__.py
-
devine-services/services/CR/__pycache__/__init__.cpython-310.pyc
-
devine-services/services/CR/config.yaml
-
devine-services/services/CTV/__init__.py
-
devine-services/services/CTV/__pycache__/__init__.cpython-310.pyc
-
devine-services/services/CTV/config.yaml
-
devine-services/services/DROP/__init__.py
-
devine-services/services/DROP/__pycache__/__init__.cpython-310.pyc
-
devine-services/services/DROP/config.yaml
-
devine-services/services/DSCP/__init__.py
-
devine-services/services/DSCP/__pycache__/__init__.cpython-310.pyc
-
devine-services/services/DSCP/config.yaml
-
devine-services/services/ITV/__init__.py
-
devine-services/services/ITV/__pycache__/__init__.cpython-310.pyc
-
devine-services/services/ITV/config.yaml
-
devine-services/services/MY5/__init__.py
-
devine-services/services/MY5/__pycache__/__init__.cpython-310.pyc
-
devine-services/services/MY5/config.yaml
-
devine-services/services/PLUTO/__init__.py
-
devine-services/services/PLUTO/__pycache__/__init__.cpython-310.pyc
-
devine-services/services/PLUTO/config.yaml
-
devine-services/services/ROKU/__init__.py
-
devine-services/services/ROKU/__pycache__/__init__.cpython-310.pyc
-
devine-services/services/ROKU/config.yaml
-
devine-services/services/RTE/__init__.py
-
devine-services/services/RTE/__pycache__/__init__.cpython-310.pyc
-
devine-services/services/RTE/config.yaml
-
devine-services/services/STV/__init__.py
-
devine-services/services/STV/__pycache__/__init__.cpython-310.pyc
-
devine-services/services/STV/config.yaml
-
devine-services/services/TFC/__init__.py
-
devine-services/services/TFC/__pycache__/__init__.cpython-310.pyc
-
devine-services/services/TFC/config.yaml
-
devine-services/services/TUBI/__init__.py
-
devine-services/services/TUBI/__pycache__/__init__.cpython-310.pyc
-
devine-services/services/TUBI/config.yaml
-
devine-services/services/UKTV/__init__.py
-
devine-services/services/UKTV/__pycache__/__init__.cpython-310.pyc
-
devine-services/services/UKTV/config.yaml
-
devine-services/services/VIKI/__init__.py
-
devine-services/services/VIKI/__pycache__/__init__.cpython-310.pyc
-
devine-services/services/VIKI/config.yaml
-
devine-services/services/iP/__init__.py
-
devine-services/services/iP/__pycache__/__init__.cpython-310.pyc
-
devine-services/services/iP/config.yaml
-
devine.yaml
-
devine/__main__.py
-
devine/__pycache__/__main__.cpython-310.pyc
-
devine/commands/__pycache__/__init__.cpython-310.pyc
-
devine/commands/__pycache__/cfg.cpython-310.pyc
-
devine/commands/__pycache__/dl.cpython-310.pyc
-
devine/commands/__pycache__/env.cpython-310.pyc
-
devine/commands/__pycache__/kv.cpython-310.pyc
-
devine/commands/__pycache__/search.cpython-310.pyc
-
devine/commands/__pycache__/serve.cpython-310.pyc
-
devine/commands/__pycache__/util.cpython-310.pyc
-
devine/commands/__pycache__/wvd.cpython-310.pyc
-
devine/commands/cfg.py
-
devine/commands/dl.py
-
devine/commands/env.py
-
devine/commands/kv.py
-
devine/commands/search.py
-
devine/commands/serve.py
-
devine/commands/util.py
-
devine/commands/wvd.py
-
devine/core/__init__.py
-
devine/core/__main__.py
-
devine/core/__pycache__/__init__.cpython-310.pyc
-
devine/core/__pycache__/__main__.cpython-310.pyc
-
devine/core/__pycache__/binaries.cpython-310.pyc
-
devine/core/__pycache__/cacher.cpython-310.pyc
-
devine/core/__pycache__/commands.cpython-310.pyc
-
devine/core/__pycache__/config.cpython-310.pyc
-
devine/core/__pycache__/console.cpython-310.pyc
-
devine/core/__pycache__/constants.cpython-310.pyc
-
devine/core/__pycache__/credential.cpython-310.pyc
-
devine/core/__pycache__/events.cpython-310.pyc
-
devine/core/__pycache__/search_result.cpython-310.pyc
-
devine/core/__pycache__/service.cpython-310.pyc
-
devine/core/__pycache__/services.cpython-310.pyc
-
devine/core/__pycache__/utilities.cpython-310.pyc
-
devine/core/__pycache__/vault.cpython-310.pyc
-
devine/core/__pycache__/vaults.cpython-310.pyc
-
devine/core/binaries.py
-
devine/core/cacher.py
-
devine/core/commands.py
-
devine/core/config.py
-
devine/core/console.py
-
devine/core/constants.py
-
devine/core/credential.py
-
devine/core/downloaders/__init__.py
-
devine/core/downloaders/__pycache__/__init__.cpython-310.pyc
-
devine/core/downloaders/__pycache__/aria2c.cpython-310.pyc
-
devine/core/downloaders/__pycache__/curl_impersonate.cpython-310.pyc
-
devine/core/downloaders/__pycache__/requests.cpython-310.pyc
-
devine/core/downloaders/aria2c.py
-
devine/core/downloaders/curl_impersonate.py
-
devine/core/downloaders/requests.py
-
devine/core/drm/__init__.py
-
devine/core/drm/__pycache__/__init__.cpython-310.pyc
-
devine/core/drm/__pycache__/clearkey.cpython-310.pyc
-
devine/core/drm/__pycache__/widevine.cpython-310.pyc
-
devine/core/drm/clearkey.py
-
devine/core/drm/widevine.py
-
devine/core/events.py
-
devine/core/manifests/__init__.py
-
devine/core/manifests/__pycache__/__init__.cpython-310.pyc
-
devine/core/manifests/__pycache__/dash.cpython-310.pyc
-
devine/core/manifests/__pycache__/hls.cpython-310.pyc
-
devine/core/manifests/dash.py
-
devine/core/manifests/hls.py
-
devine/core/proxies/__init__.py
-
devine/core/proxies/__pycache__/__init__.cpython-310.pyc
-
devine/core/proxies/__pycache__/basic.cpython-310.pyc
-
devine/core/proxies/__pycache__/hola.cpython-310.pyc
-
devine/core/proxies/__pycache__/nordvpn.cpython-310.pyc
-
devine/core/proxies/__pycache__/proxy.cpython-310.pyc
-
devine/core/proxies/basic.py
-
devine/core/proxies/hola.py
-
devine/core/proxies/nordvpn.py
-
devine/core/proxies/proxy.py
-
devine/core/search_result.py
-
devine/core/service.py
-
devine/core/services.py
-
devine/core/titles/__init__.py
-
devine/core/titles/__pycache__/__init__.cpython-310.pyc
-
devine/core/titles/__pycache__/episode.cpython-310.pyc
-
devine/core/titles/__pycache__/movie.cpython-310.pyc
-
devine/core/titles/__pycache__/song.cpython-310.pyc
-
devine/core/titles/__pycache__/title.cpython-310.pyc
-
devine/core/titles/episode.py
-
devine/core/titles/movie.py
-
devine/core/titles/song.py
-
devine/core/titles/title.py
-
devine/core/tracks/__init__.py
-
devine/core/tracks/__pycache__/__init__.cpython-310.pyc
-
devine/core/tracks/__pycache__/attachment.cpython-310.pyc
-
devine/core/tracks/__pycache__/audio.cpython-310.pyc
-
devine/core/tracks/__pycache__/chapter.cpython-310.pyc
-
devine/core/tracks/__pycache__/chapters.cpython-310.pyc
-
devine/core/tracks/__pycache__/subtitle.cpython-310.pyc
-
devine/core/tracks/__pycache__/track.cpython-310.pyc
-
devine/core/tracks/__pycache__/tracks.cpython-310.pyc
-
devine/core/tracks/__pycache__/video.cpython-310.pyc
-
devine/core/tracks/attachment.py
-
devine/core/tracks/audio.py
-
devine/core/tracks/chapter.py
-
devine/core/tracks/chapters.py
-
devine/core/tracks/subtitle.py
-
devine/core/tracks/track.py
-
devine/core/tracks/tracks.py
-
devine/core/tracks/video.py
-
devine/core/utilities.py
-
devine/core/utils/__pycache__/__init__.cpython-310.pyc
-
devine/core/utils/__pycache__/click_types.cpython-310.pyc
-
devine/core/utils/__pycache__/collections.cpython-310.pyc
-
devine/core/utils/__pycache__/sslciphers.cpython-310.pyc
-
devine/core/utils/__pycache__/subprocess.cpython-310.pyc
-
devine/core/utils/__pycache__/webvtt.cpython-310.pyc
-
devine/core/utils/__pycache__/xml.cpython-310.pyc
-
devine/core/utils/click_types.py
-
devine/core/utils/collections.py
-
devine/core/utils/sslciphers.py
-
devine/core/utils/subprocess.py
-
devine/core/utils/webvtt.py
-
devine/core/utils/xml.py
-
devine/core/vault.py
-
devine/core/vaults.py
-
devine/vaults/API.py
-
devine/vaults/MySQL.py
-
devine/vaults/SQLite.py
-
devine/vaults/__pycache__/API.cpython-310.pyc
-
devine/vaults/__pycache__/MySQL.cpython-310.pyc
-
devine/vaults/__pycache__/SQLite.cpython-310.pyc
-
dl.txt
-
poetry.lock
-
pyproject.toml