Overview
overview
3Static
static
1OTP BY Blazee (1).zip
windows7-x64
1OTP BY Blazee (1).zip
windows10-2004-x64
1OTP BY Bla...g.json
windows7-x64
3OTP BY Bla...g.json
windows10-2004-x64
3OTP BY Bla...s.json
windows7-x64
3OTP BY Bla...s.json
windows10-2004-x64
3OTP BY Bla...10.pyc
windows7-x64
3OTP BY Bla...10.pyc
windows10-2004-x64
3OTP BY Bla...11.pyc
windows7-x64
3OTP BY Bla...11.pyc
windows10-2004-x64
3OTP BY Bla...39.pyc
windows7-x64
3OTP BY Bla...39.pyc
windows10-2004-x64
3OTP BY Bla...10.pyc
windows7-x64
3OTP BY Bla...10.pyc
windows10-2004-x64
3OTP BY Bla...11.pyc
windows7-x64
3OTP BY Bla...11.pyc
windows10-2004-x64
3OTP BY Bla...39.pyc
windows7-x64
3OTP BY Bla...39.pyc
windows10-2004-x64
3OTP BY Bla...ost.py
windows7-x64
3OTP BY Bla...ost.py
windows10-2004-x64
3OTP BY Bla...ost.py
windows7-x64
3OTP BY Bla...ost.py
windows10-2004-x64
3OTP BY Bla...g.json
windows7-x64
3OTP BY Bla...g.json
windows10-2004-x64
3OTP BY Bla...ll.bat
windows7-x64
1OTP BY Bla...ll.bat
windows10-2004-x64
1OTP BY Bla...ain.py
windows7-x64
3OTP BY Bla...ain.py
windows10-2004-x64
3OTP BY Bla...dme.md
windows7-x64
3OTP BY Bla...dme.md
windows10-2004-x64
3OTP BY Bla...rt.bat
windows7-x64
1OTP BY Bla...rt.bat
windows10-2004-x64
1Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
14/10/2024, 17:14
Static task
static1
Behavioral task
behavioral1
Sample
OTP BY Blazee (1).zip
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral2
Sample
OTP BY Blazee (1).zip
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/config.json
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral4
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/config.json
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/fprints.json
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral6
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/fprints.json
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/helpers/__pycache__/automated_boost.cpython-310.pyc
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral8
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/helpers/__pycache__/automated_boost.cpython-310.pyc
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/helpers/__pycache__/automated_boost.cpython-311.pyc
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral10
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/helpers/__pycache__/automated_boost.cpython-311.pyc
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/helpers/__pycache__/automated_boost.cpython-39.pyc
Resource
win7-20240729-en
windows7-x64
Behavioral task
behavioral12
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/helpers/__pycache__/automated_boost.cpython-39.pyc
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/helpers/__pycache__/boost.cpython-310.pyc
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral14
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/helpers/__pycache__/boost.cpython-310.pyc
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/helpers/__pycache__/boost.cpython-311.pyc
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral16
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/helpers/__pycache__/boost.cpython-311.pyc
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/helpers/__pycache__/boost.cpython-39.pyc
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral18
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/helpers/__pycache__/boost.cpython-39.pyc
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/helpers/automated_boost.py
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral20
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/helpers/automated_boost.py
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/helpers/boost.py
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral22
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/helpers/boost.py
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/helpers/config.json
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral24
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/helpers/config.json
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/install.bat
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral26
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/install.bat
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/main.py
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral28
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/main.py
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/readme.md
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral30
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/readme.md
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/start.bat
Resource
win7-20240729-en
windows7-x64
Behavioral task
behavioral32
Sample
OTP BY Blazee/OTP BOT BY SYNDICATE.rar/start.bat
Resource
win10v2004-20241007-en
windows10-2004-x64
General
-
Target
OTP BY Blazee (1).zip
-
Size
118KB
-
MD5
efdd8493e3d291f4db3d643100def6d4
-
SHA1
46f65a0b90d08141237f05c8a6dee564bf92acdb
-
SHA256
67bfb1d5f2cff3053578d83dd34a7b5b2f006616d145b3184a958ed45ce92f1b
-
SHA512
55ee35931fe9fc92fb0d010ecc44e2502a54cbcaba77f2b80cd9893e1c6584c7ec73a6659166822857136dda863d398770a1c4b1ea865a660e52338652ccaaed
-
SSDEEP
3072:Aa1yvPFwPyO80+uZyY2YW7Qq7nc70nvS4+mWero1i5WxW3KSY4:C9yTer/5F3Z
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1996 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1996 7zFM.exe Token: 35 1996 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1996 7zFM.exe