Overview
overview
8Static
static
7Atlantis.exe
windows7-x64
8Atlantis.exe
windows10-2004-x64
3Atlantis.e...re.dll
windows7-x64
1Atlantis.e...re.dll
windows10-2004-x64
1Atlantis.e...pet.js
windows7-x64
3Atlantis.e...pet.js
windows10-2004-x64
3Atlantis.e..._1.zip
windows7-x64
1Atlantis.e..._1.zip
windows10-2004-x64
1Atlantis.e..._1.zip
windows7-x64
1Atlantis.e..._1.zip
windows10-2004-x64
1Microsoft....re.dll
windows7-x64
1Microsoft....re.dll
windows10-2004-x64
1Atlantis.e..._1.zip
windows7-x64
1Atlantis.e..._1.zip
windows10-2004-x64
1adblock_snippet.js
windows7-x64
3adblock_snippet.js
windows10-2004-x64
3Microsoft....re.dll
windows7-x64
1Microsoft....re.dll
windows10-2004-x64
1Microsoft....ms.dll
windows7-x64
1Microsoft....ms.dll
windows10-2004-x64
1Microsoft....pf.dll
windows7-x64
1Microsoft....pf.dll
windows10-2004-x64
1NetIntrinsics.dll
windows7-x64
1NetIntrinsics.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows7-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1bin/Monaco...o.html
windows7-x64
3bin/Monaco...o.html
windows10-2004-x64
3bin/Monaco...der.js
windows7-x64
3bin/Monaco...der.js
windows10-2004-x64
3bin/Monaco...lua.js
windows7-x64
3bin/Monaco...lua.js
windows10-2004-x64
3Analysis
-
max time kernel
12s -
max time network
15s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
29-11-2024 22:01
Behavioral task
behavioral1
Sample
Atlantis.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Atlantis.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Atlantis.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll
Resource
win7-20241023-en
Behavioral task
behavioral4
Sample
Atlantis.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Atlantis.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/adblock_snippet.js
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Atlantis.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/adblock_snippet.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Atlantis.exe.WebView2/EBWebView/component_crx_cache/alpjnmnfbgfkmmpcfpejmmoebdndedno_1.zip
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Atlantis.exe.WebView2/EBWebView/component_crx_cache/alpjnmnfbgfkmmpcfpejmmoebdndedno_1.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Atlantis.exe.WebView2/EBWebView/component_crx_cache/fppmbhmldokgmleojlplaaodlkibgikh_1.zip
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Atlantis.exe.WebView2/EBWebView/component_crx_cache/fppmbhmldokgmleojlplaaodlkibgikh_1.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Microsoft.CognitiveServices.Speech.core.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Microsoft.CognitiveServices.Speech.core.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Atlantis.exe.WebView2/EBWebView/component_crx_cache/kpfehajjjbbcifeehjgfgnabifknmdad_1.zip
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Atlantis.exe.WebView2/EBWebView/component_crx_cache/kpfehajjjbbcifeehjgfgnabifknmdad_1.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
adblock_snippet.js
Resource
win7-20241010-en
Behavioral task
behavioral16
Sample
adblock_snippet.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
Microsoft.Web.WebView2.WinForms.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Microsoft.Web.WebView2.WinForms.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
Microsoft.Web.WebView2.Wpf.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
Microsoft.Web.WebView2.Wpf.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
NetIntrinsics.dll
Resource
win7-20241023-en
Behavioral task
behavioral24
Sample
NetIntrinsics.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
Newtonsoft.Json.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
bin/Monaco/Monaco.html
Resource
win7-20240729-en
Behavioral task
behavioral28
Sample
bin/Monaco/Monaco.html
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
bin/Monaco/vs/Loader.js
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
bin/Monaco/vs/Loader.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
bin/Monaco/vs/basic-languages/lua/lua.js
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
bin/Monaco/vs/basic-languages/lua/lua.js
Resource
win10v2004-20241007-en
General
-
Target
Atlantis.exe.WebView2/EBWebView/component_crx_cache/fppmbhmldokgmleojlplaaodlkibgikh_1.zip
-
Size
952KB
-
MD5
1a9c030cf025d340ff394cd9e5b664f3
-
SHA1
c1e8490662903d90de97760cb3102426f2784bd9
-
SHA256
a81d1959892ae4180554347df1b97834abba2e1a5e6b9aeba000ecea26eabecc
-
SHA512
7a9584c96849b1c8c623119bea4255a628e0f36d3a5f670e9c6a20f84d250fee859751a521322864b1577d7ca3ecdd7ee805c0f35bd7d74ddf43afc9f2abf8cb
-
SSDEEP
24576:LwrAaUx3buUhBVQYflCitQKjQKR6kizJqpAGQ7xj8pUvQCg2:LCAH3ZsYflCiuKjgkc7B8mvQC9
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2640 7zFM.exe Token: 35 2640 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2640 7zFM.exe