0de1f1739dfc278a21c75d17be004aa2ea212896d18e56a4495f7b118cd7d7a1 | Triage

Submit
Reports

Overview

overview

Static

static

Hotmail Checker.rar

windows7-x64

1

Hotmail Checker.rar

windows10-2004-x64

1

Data/Modul...io.dll

windows7-x64

1

Data/Modul...io.dll

windows10-2004-x64

1

Data/Modul...pi.dll

windows7-x64

1

Data/Modul...pi.dll

windows10-2004-x64

1

Data/Modules/Jint.dll

windows7-x64

1

Data/Modules/Jint.dll

windows10-2004-x64

1

Data/Modul...et.dll

windows7-x64

1

Data/Modul...et.dll

windows10-2004-x64

1

Data/Modul...on.dll

windows7-x64

1

Data/Modul...on.dll

windows10-2004-x64

1

Data/Modul...um.dll

windows7-x64

1

Data/Modul...um.dll

windows10-2004-x64

1

Data/Modul...he.exe

windows7-x64

1

Data/Modul...he.exe

windows10-2004-x64

1

Data/Modul...e1.exe

windows7-x64

Data/Modul...e1.exe

windows10-2004-x64

Data/Modul...xe.xml

windows7-x64

3

Data/Modul...xe.xml

windows10-2004-x64

1

Data/Modul...e1.pdb

windows7-x64

3

Data/Modul...e1.pdb

windows10-2004-x64

3

Data/Modul...s.json

windows7-x64

3

Data/Modul...s.json

windows10-2004-x64

3

Jint.dll

windows7-x64

1

Jint.dll

windows10-2004-x64

1

Start Checker.bat

windows7-x64

Start Checker.bat

windows10-2004-x64

settings.json

windows7-x64

3

settings.json

windows10-2004-x64

3

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
25-11-2024 16:42

Sharing

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

Hotmail Checker.rar

Resource

win7-20241010-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

Hotmail Checker.rar

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

Data/Modules/AudioSwitcher.AudioApi.CoreAudio.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Data/Modules/AudioSwitcher.AudioApi.CoreAudio.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Data/Modules/AudioSwitcher.AudioApi.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Data/Modules/AudioSwitcher.AudioApi.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Data/Modules/Jint.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Data/Modules/Jint.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Data/Modules/Leaf.xNet.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Data/Modules/Leaf.xNet.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Data/Modules/Newtonsoft.Json.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Data/Modules/Newtonsoft.Json.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Data/Modules/Sodium.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Data/Modules/Sodium.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Data/Modules/porsche.exe

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Data/Modules/porsche.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Data/Modules/porsche1.exe

Resource

win7-20240903-en

toxiceye discovery rat trojan

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral18

Sample

Data/Modules/porsche1.exe

Resource

win10v2004-20241007-en

toxiceye discovery rat trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral19

Sample

Data/Modules/porsche1.exe.xml

Resource

win7-20240903-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral20

Sample

Data/Modules/porsche1.exe.xml

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Data/Modules/porsche1.pdb

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral22

Sample

Data/Modules/porsche1.pdb

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

Data/Modules/settings.json

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral24

Sample

Data/Modules/settings.json

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

Jint.dll

Resource

win7-20241023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Jint.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Start Checker.bat

Resource

win7-20240903-en

toxiceye discovery rat trojan

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral28

Sample

Start Checker.bat

Resource

win10v2004-20241007-en

toxiceye discovery rat trojan

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral29

Sample

settings.json

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral30

Sample

settings.json

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

Data/Modules/Leaf.xNet.dll
Size

142KB
MD5

2c607159e31c1e091697e74efa5cfebe
SHA1

874d28447e5c1d7583f413db85049bf17de830b5
SHA256

056900c587b7e574ccd154a83fe299bada653347c3862076b0ef6035039c0bec
SHA512

bfe7b463db8f0ef5981b4cdf22d2815ec10a941fb7cdeff4a861626f1fa9a29f913c5e971b257a5d206965e1300328b7530c40692889d9065ab95d63a63fe55c
SSDEEP

3072:iKpUZ/x+t38Q4I2T4EFWX66sU9/dfYJd:vUZ/x+tMnI2T4/XN

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Data\Modules\Leaf.xNet.dll,#1
1⤵
PID:4880

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy