62c6091d6823e53697522c0cc46c4f6c0e651d908122679d3fcfaeac8e448b95

Submit
Reports

Overview

overview

Static

static

IDA Pro 8....GPT.py

windows10-1703-x64

IDA Pro 8....38.pyc

windows10-1703-x64

IDA Pro 8....ch.dll

windows10-1703-x64

IDA Pro 8....64.dll

windows10-1703-x64

IDA Pro 8....IDA.py

windows10-1703-x64

IDA Pro 8....RT.dll

windows10-1703-x64

IDA Pro 8....64.dll

windows10-1703-x64

IDA Pro 8....CC.dll

windows10-1703-x64

IDA Pro 8....64.dll

windows10-1703-x64

IDA Pro 8....GPT.py

windows10-1703-x64

IDA Pro 8...._re.py

windows10-1703-x64

IDA Pro 8....rm.dll

windows10-1703-x64

IDA Pro 8....64.dll

windows10-1703-x64

IDA Pro 8....ing.py

windows10-1703-x64

IDA Pro 8....t__.py

windows10-1703-x64

IDA Pro 8....38.pyc

windows10-1703-x64

IDA Pro 8....38.pyc

windows10-1703-x64

IDA Pro 8....38.pyc

windows10-1703-x64

IDA Pro 8....38.pyc

windows10-1703-x64

IDA Pro 8....38.pyc

windows10-1703-x64

IDA Pro 8....ons.py

windows10-1703-x64

IDA Pro 8....asm.py

windows10-1703-x64

IDA Pro 8....ore.py

windows10-1703-x64

IDA Pro 8....ons.py

windows10-1703-x64

IDA Pro 8....t__.py

windows10-1703-x64

IDA Pro 8....38.pyc

windows10-1703-x64

IDA Pro 8....38.pyc

windows10-1703-x64

IDA Pro 8....38.pyc

windows10-1703-x64

IDA Pro 8....38.pyc

windows10-1703-x64

IDA Pro 8....38.pyc

windows10-1703-x64

IDA Pro 8....38.pyc

windows10-1703-x64

IDA Pro 8....38.pyc

windows10-1703-x64

Analysis

max time kernel
127s
max time network
135s
platform
windows10-1703_x64
resource
win10-20240611-en
resource tags

arch:x64arch:x86image:win10-20240611-enlocale:en-usos:windows10-1703-x64system
submitted
12-10-2024 17:07

Sharing

Copy URL

Twitter E-mail

Static task

static1

upx industroyer

4 signatures

Behavioral task

behavioral1

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/Auto-WPeGPT_WPeace/Auto_WPeGPT.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/Auto-WPeGPT_WPeace/__pycache__/Auto_WPeGPT.cpython-38.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

IDA Pro 8.3 (x86_ x86_64) additional by QiuChenly/plugins/IDA_Signsrch.dll

Resource

win10-20240611-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

IDA Pro 8.3 (x86_ x86_64) additional by QiuChenly/plugins/IDA_Signsrch64.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/LazyIDA.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

IDA Pro 8.3 (x86_ x86_64) additional by QiuChenly/plugins/OllyDumpEx_IdaRT.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

IDA Pro 8.3 (x86_ x86_64) additional by QiuChenly/plugins/OllyDumpEx_IdaRT64.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

IDA Pro 8.3 (x86_ x86_64) additional by QiuChenly/plugins/StrongCC.dll

Resource

win10-20240404-en

upx

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

IDA Pro 8.3 (x86_ x86_64) additional by QiuChenly/plugins/StrongCC_x64.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/WPeChatGPT.py

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/auto_re.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

IDA Pro 8.3 (x86_ x86_64) additional by QiuChenly/plugins/hexarm.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

IDA Pro 8.3 (x86_ x86_64) additional by QiuChenly/plugins/hexarm64.dll

Resource

win10-20240611-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/__init__.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/__pycache__/__init__.cpython-38.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/__pycache__/actions.cpython-38.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/__pycache__/asm.cpython-38.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/__pycache__/core.cpython-38.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/__pycache__/exceptions.cpython-38.pyc

Resource

win10-20240611-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/actions.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/asm.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/core.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/exceptions.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/keystone/__init__.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/keystone/__pycache__/__init__.cpython-38.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/keystone/__pycache__/arm64_const.cpython-38.pyc

Resource

win10-20240611-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral28

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/keystone/__pycache__/arm_const.cpython-38.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/keystone/__pycache__/evm_const.cpython-38.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral30

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/keystone/__pycache__/hexagon_const.cpython-38.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/keystone/__pycache__/keystone.cpython-38.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral32

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/keystone/__pycache__/keystone_const.cpython-38.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

IDA Pro 8.3 (x86_ x86_64) additional by QiuChenly/plugins/hexarm64.dll
Size

2.7MB
MD5

fe9afea4e43277427ce673e32d568bb3
SHA1

05d4c4192fd1d48500044e7da9071f1e7f2520e3
SHA256

a94b4825f3396f201ae1622075291c12d8a649e6312edf17edb62069d2214201
SHA512

1396a81d31d99b493951d3945df6c8f200275bb32d4c2a2d203fe4a01beed1a1577f90230043096f19b7f796c945934a83efc9dfab7b5687076339923659b3ca
SSDEEP

49152:m5j7tsQ3qLanubyB8MWmLCF7K7eL0LD1rHj0XnQ87fl0QoTuOlkX+9BlA/1aHplk:UqRv05abd29GA80TFfe

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\IDA Pro 8.3 (x86_ x86_64) additional by QiuChenly\plugins\hexarm64.dll",#1
1⤵
PID:2012

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads