Overview
overview
10Static
static
3Rebel.7z
windows7-x64
1Rebel.7z
windows10-2004-x64
10Rebel/Bin/...or.exe
windows7-x64
5Rebel/Bin/...or.exe
windows10-2004-x64
5Rebel/Bin/Rebel.dll
windows7-x64
1Rebel/Bin/Rebel.dll
windows10-2004-x64
1Rebel/Fast...ox.dll
windows7-x64
1Rebel/Fast...ox.dll
windows10-2004-x64
1Rebel/Fast...ox.xml
windows7-x64
3Rebel/Fast...ox.xml
windows10-2004-x64
1Rebel/ReadMe.txt
windows7-x64
1Rebel/ReadMe.txt
windows10-2004-x64
1Rebel/Rebe...ed.exe
windows7-x64
10Rebel/Rebe...ed.exe
windows10-2004-x64
10Rebel/Syst...om.dll
windows7-x64
1Rebel/Syst...om.dll
windows10-2004-x64
1Rebel/Syst...om.xml
windows7-x64
3Rebel/Syst...om.xml
windows10-2004-x64
1Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
15-10-2024 12:05
Static task
static1
Behavioral task
behavioral1
Sample
Rebel.7z
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Rebel.7z
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Rebel/Bin/Injector.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Rebel/Bin/Injector.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Rebel/Bin/Rebel.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
Rebel/Bin/Rebel.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Rebel/FastColoredTextBox.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Rebel/FastColoredTextBox.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Rebel/FastColoredTextBox.xml
Resource
win7-20241010-en
Behavioral task
behavioral10
Sample
Rebel/FastColoredTextBox.xml
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Rebel/ReadMe.txt
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Rebel/ReadMe.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Rebel/RebelCracked.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Rebel/RebelCracked.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Rebel/System.CodeDom.dll
Resource
win7-20240729-en
Behavioral task
behavioral16
Sample
Rebel/System.CodeDom.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
Rebel/System.CodeDom.xml
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
Rebel/System.CodeDom.xml
Resource
win10v2004-20241007-en
General
-
Target
Rebel/ReadMe.txt
-
Size
13B
-
MD5
1c6c20f0c324e98e38272f1245d24e11
-
SHA1
bbb5dc3a18a532529ec6fa88c86542288dd979f7
-
SHA256
4ca7414e2aba6d74826403afb6ccbcc1752297a1b61aced8808b75d80d212f2d
-
SHA512
a30aed5a54580ad73f16ad237f82e2dc99c99d9645d40d1fbdf88a7d6c10c238b6967c011ba46c6084d409e4a37b41983d600146f93cd9250a810b7d784d8246
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 3476 NOTEPAD.EXE