Overview
overview
8Static
static
30_russia_u...le.cmd
windows7-x64
80_russia_u...le.cmd
windows10-2004-x64
81_russia_b...st.cmd
windows7-x64
11_russia_b...st.cmd
windows10-2004-x64
11_russia_b...BE.cmd
windows7-x64
11_russia_b...BE.cmd
windows10-2004-x64
11_russia_b...LT.cmd
windows7-x64
11_russia_b...LT.cmd
windows10-2004-x64
11_russia_b...ir.cmd
windows7-x64
11_russia_b...ir.cmd
windows10-2004-x64
12_any_country.cmd
windows7-x64
12_any_country.cmd
windows10-2004-x64
12_any_coun...ol.lnk
windows7-x64
32_any_coun...ol.lnk
windows10-2004-x64
72_any_coun...ir.cmd
windows7-x64
12_any_coun...ir.cmd
windows10-2004-x64
1service_in...st.cmd
windows7-x64
1service_in...st.cmd
windows10-2004-x64
1service_in...BE.cmd
windows7-x64
1service_in...BE.cmd
windows10-2004-x64
1service_in...LT.cmd
windows7-x64
1service_in...LT.cmd
windows10-2004-x64
1service_in...ir.cmd
windows7-x64
1service_in...ir.cmd
windows10-2004-x64
1service_remove.cmd
windows7-x64
1service_remove.cmd
windows10-2004-x64
1x86/WinDivert.dll
windows7-x64
3x86/WinDivert.dll
windows10-2004-x64
3x86/WinDivert32.sys
windows10-2004-x64
1x86/WinDivert64.sys
windows10-2004-x64
1x86/goodbyedpi.exe
windows7-x64
1x86/goodbyedpi.exe
windows10-2004-x64
3Analysis
- max time kernel
148s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
09/11/2024, 22:54
Static task
static1
Behavioral task
behavioral1
Sample
0_russia_update_blacklist_file.cmd
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral2
Sample
0_russia_update_blacklist_file.cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
1_russia_blacklist.cmd
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral4
Sample
1_russia_blacklist.cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
1_russia_blacklist_YOUTUBE.cmd
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral6
Sample
1_russia_blacklist_YOUTUBE.cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
1_russia_blacklist_YOUTUBE_ALT.cmd
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral8
Sample
1_russia_blacklist_YOUTUBE_ALT.cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
1_russia_blacklist_dnsredir.cmd
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral10
Sample
1_russia_blacklist_dnsredir.cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
2_any_country.cmd
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral12
Sample
2_any_country.cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
2_any_country_dnsredir - Kısayol.lnk
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral14
Sample
2_any_country_dnsredir - Kısayol.lnk
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
2_any_country_dnsredir.cmd
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral16
Sample
2_any_country_dnsredir.cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
service_install_russia_blacklist.cmd
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral18
Sample
service_install_russia_blacklist.cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
service_install_russia_blacklist_YOUTUBE.cmd
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral20
Sample
service_install_russia_blacklist_YOUTUBE.cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
service_install_russia_blacklist_YOUTUBE_ALT.cmd
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral22
Sample
service_install_russia_blacklist_YOUTUBE_ALT.cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
service_install_russia_blacklist_dnsredir.cmd
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral24
Sample
service_install_russia_blacklist_dnsredir.cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
service_remove.cmd
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral26
Sample
service_remove.cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
x86/WinDivert.dll
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral28
Sample
x86/WinDivert.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
x86/WinDivert32.sys
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
x86/WinDivert64.sys
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
x86/goodbyedpi.exe
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral32
Sample
x86/goodbyedpi.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
General
- Target service_install_russia_blacklist_YOUTUBE_ALT.cmd
- Size 813B
- Sample241109-2vqljstja1
- SHA256 98191c999493a3aa6018550c3dded3b6aa4f2b7c071f8acbf00d3f06c8df13bb
- MD5 e9b8f24c9624866d1607c05b6a79a6ec
- SHA1 b7dc28788112d3dbdf489418d609a13f9fcf95cc
- SHA512 35027fff139e666fd53e1f0272ebf9ea0e445f7595a8e5a978e3d76a29a67da9a22b890aa85512ef1df8cdd75a5e365284c22dc6de2cff4471bb40114eb5973d
- MD5 SHA1 SHA512