Overview
overview
10Static
static
3Rebel.7z
windows7-x64
1Rebel.7z
windows10-2004-x64
10Rebel/Bin/...or.exe
windows7-x64
5Rebel/Bin/...or.exe
windows10-2004-x64
5Rebel/Bin/Rebel.dll
windows7-x64
1Rebel/Bin/Rebel.dll
windows10-2004-x64
1Rebel/Fast...ox.dll
windows7-x64
1Rebel/Fast...ox.dll
windows10-2004-x64
1Rebel/Fast...ox.xml
windows7-x64
3Rebel/Fast...ox.xml
windows10-2004-x64
1Rebel/ReadMe.txt
windows7-x64
1Rebel/ReadMe.txt
windows10-2004-x64
1Rebel/Rebe...ed.exe
windows7-x64
10Rebel/Rebe...ed.exe
windows10-2004-x64
10Rebel/Syst...om.dll
windows7-x64
1Rebel/Syst...om.dll
windows10-2004-x64
1Rebel/Syst...om.xml
windows7-x64
3Rebel/Syst...om.xml
windows10-2004-x64
1Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
15-10-2024 12:05
Static task
static1
Behavioral task
behavioral1
Sample
Rebel.7z
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Rebel.7z
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Rebel/Bin/Injector.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Rebel/Bin/Injector.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Rebel/Bin/Rebel.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
Rebel/Bin/Rebel.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Rebel/FastColoredTextBox.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Rebel/FastColoredTextBox.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Rebel/FastColoredTextBox.xml
Resource
win7-20241010-en
Behavioral task
behavioral10
Sample
Rebel/FastColoredTextBox.xml
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Rebel/ReadMe.txt
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Rebel/ReadMe.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Rebel/RebelCracked.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Rebel/RebelCracked.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Rebel/System.CodeDom.dll
Resource
win7-20240729-en
Behavioral task
behavioral16
Sample
Rebel/System.CodeDom.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
Rebel/System.CodeDom.xml
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
Rebel/System.CodeDom.xml
Resource
win10v2004-20241007-en
General
-
Target
Rebel/FastColoredTextBox.xml
-
Size
132KB
-
MD5
70d49dec6a333f1d94fb1e77c663525c
-
SHA1
184b544e672f4c4cb9ed9cf010da568eed16623d
-
SHA256
f3f2e537065317b6ce66dac64042e925bbcea65f00561f9860b7172c9ca07027
-
SHA512
b78a3c4418a7c5014eb16e72f2113f00353e9e566942f7160067c826c47f1ec2752ae7ede796fc159fb9bae499d347f822401fbc4446e2556cbd680cd595c2e2
-
SSDEEP
1536:45SVw7sekyF7o//t3zEzacGE5xa5lIV1/P5:45Sm7sekyxo//xzEz3GlM
Malware Config
Signatures
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Rebel\FastColoredTextBox.xml"1⤵PID:3844