62c6091d6823e53697522c0cc46c4f6c0e651d908122679d3fcfaeac8e448b95

Submit
Reports

Overview

overview

Static

static

IDA Pro 8....GPT.py

windows10-1703-x64

IDA Pro 8....38.pyc

windows10-1703-x64

IDA Pro 8....ch.dll

windows10-1703-x64

IDA Pro 8....64.dll

windows10-1703-x64

IDA Pro 8....IDA.py

windows10-1703-x64

IDA Pro 8....RT.dll

windows10-1703-x64

IDA Pro 8....64.dll

windows10-1703-x64

IDA Pro 8....CC.dll

windows10-1703-x64

IDA Pro 8....64.dll

windows10-1703-x64

IDA Pro 8....GPT.py

windows10-1703-x64

IDA Pro 8...._re.py

windows10-1703-x64

IDA Pro 8....rm.dll

windows10-1703-x64

IDA Pro 8....64.dll

windows10-1703-x64

IDA Pro 8....ing.py

windows10-1703-x64

IDA Pro 8....t__.py

windows10-1703-x64

IDA Pro 8....38.pyc

windows10-1703-x64

IDA Pro 8....38.pyc

windows10-1703-x64

IDA Pro 8....38.pyc

windows10-1703-x64

IDA Pro 8....38.pyc

windows10-1703-x64

IDA Pro 8....38.pyc

windows10-1703-x64

IDA Pro 8....ons.py

windows10-1703-x64

IDA Pro 8....asm.py

windows10-1703-x64

IDA Pro 8....ore.py

windows10-1703-x64

IDA Pro 8....ons.py

windows10-1703-x64

IDA Pro 8....t__.py

windows10-1703-x64

IDA Pro 8....38.pyc

windows10-1703-x64

IDA Pro 8....38.pyc

windows10-1703-x64

IDA Pro 8....38.pyc

windows10-1703-x64

IDA Pro 8....38.pyc

windows10-1703-x64

IDA Pro 8....38.pyc

windows10-1703-x64

IDA Pro 8....38.pyc

windows10-1703-x64

IDA Pro 8....38.pyc

windows10-1703-x64

Analysis

max time kernel
132s
max time network
135s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
12-10-2024 17:07

Sharing

Copy URL

Twitter E-mail

Static task

static1

upx industroyer

4 signatures

Behavioral task

behavioral1

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/Auto-WPeGPT_WPeace/Auto_WPeGPT.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/Auto-WPeGPT_WPeace/__pycache__/Auto_WPeGPT.cpython-38.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

IDA Pro 8.3 (x86_ x86_64) additional by QiuChenly/plugins/IDA_Signsrch.dll

Resource

win10-20240611-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

IDA Pro 8.3 (x86_ x86_64) additional by QiuChenly/plugins/IDA_Signsrch64.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/LazyIDA.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

IDA Pro 8.3 (x86_ x86_64) additional by QiuChenly/plugins/OllyDumpEx_IdaRT.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

IDA Pro 8.3 (x86_ x86_64) additional by QiuChenly/plugins/OllyDumpEx_IdaRT64.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

IDA Pro 8.3 (x86_ x86_64) additional by QiuChenly/plugins/StrongCC.dll

Resource

win10-20240404-en

upx

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

IDA Pro 8.3 (x86_ x86_64) additional by QiuChenly/plugins/StrongCC_x64.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/WPeChatGPT.py

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/auto_re.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

IDA Pro 8.3 (x86_ x86_64) additional by QiuChenly/plugins/hexarm.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

IDA Pro 8.3 (x86_ x86_64) additional by QiuChenly/plugins/hexarm64.dll

Resource

win10-20240611-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/__init__.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/__pycache__/__init__.cpython-38.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/__pycache__/actions.cpython-38.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/__pycache__/asm.cpython-38.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/__pycache__/core.cpython-38.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/__pycache__/exceptions.cpython-38.pyc

Resource

win10-20240611-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/actions.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/asm.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/core.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/exceptions.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/keystone/__init__.py

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/keystone/__pycache__/__init__.cpython-38.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/keystone/__pycache__/arm64_const.cpython-38.pyc

Resource

win10-20240611-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral28

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/keystone/__pycache__/arm_const.cpython-38.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/keystone/__pycache__/evm_const.cpython-38.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral30

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/keystone/__pycache__/hexagon_const.cpython-38.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/keystone/__pycache__/keystone.cpython-38.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral32

Sample

IDA Pro 8.3 (x86, x86_64) additional by QiuChenly/plugins/patching/keystone/__pycache__/keystone_const.cpython-38.pyc

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

IDA Pro 8.3 (x86_ x86_64) additional by QiuChenly/plugins/OllyDumpEx_IdaRT64.dll
Size

258KB
MD5

c3036a66895e864436c472ec4d25f225
SHA1

a92879d48d6a99f4cc06123c173ae475e6aaf5aa
SHA256

a4cd96b7d08f5616179f919ddcd6c828fca771d173e66358715e82f12f5d0d25
SHA512

acb828cd1d8b53a24657974ea31051f3d1eb32a84393cc26966ea37e461af8fcddcf9d0928dc50a3c7d18e07f4c8fcf26f9d3c0f26dd5e136f6bbba1caaa1ea5
SSDEEP

6144:LcKctwzXtMXogzRbg4GxVSCSX2Lq7somZFTAToMH62niF12pQw2ktP0+rJRUHX8:wnGXtMX5zRbnGxVgmLCsomZFTAToMH66

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\IDA Pro 8.3 (x86_ x86_64) additional by QiuChenly\plugins\OllyDumpEx_IdaRT64.dll",#1
1⤵
PID:4920

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads