Overview
overview
8Static
static
30_russia_u...le.cmd
windows7-x64
80_russia_u...le.cmd
windows10-2004-x64
81_russia_b...st.cmd
windows7-x64
11_russia_b...st.cmd
windows10-2004-x64
11_russia_b...BE.cmd
windows7-x64
11_russia_b...BE.cmd
windows10-2004-x64
11_russia_b...LT.cmd
windows7-x64
11_russia_b...LT.cmd
windows10-2004-x64
11_russia_b...ir.cmd
windows7-x64
11_russia_b...ir.cmd
windows10-2004-x64
12_any_country.cmd
windows7-x64
12_any_country.cmd
windows10-2004-x64
12_any_coun...ol.lnk
windows7-x64
32_any_coun...ol.lnk
windows10-2004-x64
72_any_coun...ir.cmd
windows7-x64
12_any_coun...ir.cmd
windows10-2004-x64
1service_in...st.cmd
windows7-x64
1service_in...st.cmd
windows10-2004-x64
1service_in...BE.cmd
windows7-x64
1service_in...BE.cmd
windows10-2004-x64
1service_in...LT.cmd
windows7-x64
1service_in...LT.cmd
windows10-2004-x64
1service_in...ir.cmd
windows7-x64
1service_in...ir.cmd
windows10-2004-x64
1service_remove.cmd
windows7-x64
1service_remove.cmd
windows10-2004-x64
1x86/WinDivert.dll
windows7-x64
3x86/WinDivert.dll
windows10-2004-x64
3x86/WinDivert32.sys
windows10-2004-x64
1x86/WinDivert64.sys
windows10-2004-x64
1x86/goodbyedpi.exe
windows7-x64
1x86/goodbyedpi.exe
windows10-2004-x64
3Analysis
- max time kernel
98s - max time network
158s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
09/11/2024, 22:54
Static task
static1
Behavioral task
behavioral1
Sample
0_russia_update_blacklist_file.cmd
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral2
Sample
0_russia_update_blacklist_file.cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
1_russia_blacklist.cmd
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral4
Sample
1_russia_blacklist.cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
1_russia_blacklist_YOUTUBE.cmd
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral6
Sample
1_russia_blacklist_YOUTUBE.cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
1_russia_blacklist_YOUTUBE_ALT.cmd
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral8
Sample
1_russia_blacklist_YOUTUBE_ALT.cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
1_russia_blacklist_dnsredir.cmd
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral10
Sample
1_russia_blacklist_dnsredir.cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
2_any_country.cmd
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral12
Sample
2_any_country.cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
2_any_country_dnsredir - Kısayol.lnk
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral14
Sample
2_any_country_dnsredir - Kısayol.lnk
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
2_any_country_dnsredir.cmd
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral16
Sample
2_any_country_dnsredir.cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
service_install_russia_blacklist.cmd
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral18
Sample
service_install_russia_blacklist.cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
service_install_russia_blacklist_YOUTUBE.cmd
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral20
Sample
service_install_russia_blacklist_YOUTUBE.cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
service_install_russia_blacklist_YOUTUBE_ALT.cmd
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral22
Sample
service_install_russia_blacklist_YOUTUBE_ALT.cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
service_install_russia_blacklist_dnsredir.cmd
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral24
Sample
service_install_russia_blacklist_dnsredir.cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
service_remove.cmd
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral26
Sample
service_remove.cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
x86/WinDivert.dll
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral28
Sample
x86/WinDivert.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
x86/WinDivert32.sys
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
x86/WinDivert64.sys
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
x86/goodbyedpi.exe
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral32
Sample
x86/goodbyedpi.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
General
- Target x86/WinDivert64.sys
- Size 89KB
- Sample241109-2vqljstja1
- SHA256 e69b5ba3f0cd6cfb2983e442636e7f0b342b61b15264b0328317d4559c82cf50
- MD5 6a33620de63bccaf5e5314ee49cd58fb
- SHA1 ac728b339681b2e27099fecc1419821f01d04b34
- SHA512 638d1b8aa4dc0e4ac504f51aaa3ec8375ccc3d69a4d36821f6bb98060b58586007f47966b9d58d222b9f067e12e80755f56559286cbabec8746146acaf24f945
- SSDEEP 1536:8ovgCRgYL/h//oJJw5AdPtey2AyWpdsihch9WXi2v6MuO2:84jmJJsKle9A5pdsiqg/vsO2
- MD5 SHA1 SHA512 SSDEEP