Overview
overview
10Static
static
7malware/1/Setup.exe
windows7-x64
10malware/1/Setup.exe
windows10-2004-x64
10malware/2/Setup.exe
windows7-x64
10malware/2/Setup.exe
windows10-2004-x64
10malware/3/...p_.exe
windows7-x64
7malware/3/...p_.exe
windows10-2004-x64
7malware/4/Setup.exe
windows7-x64
10malware/4/Setup.exe
windows10-2004-x64
10malware/5/...ls.dll
windows7-x64
1malware/5/...ls.dll
windows10-2004-x64
1malware/5/...ng.dll
windows7-x64
1malware/5/...ng.dll
windows10-2004-x64
1malware/5/...nt.dll
windows7-x64
1malware/5/...nt.dll
windows10-2004-x64
1malware/5/...pt.dll
windows7-x64
1malware/5/...pt.dll
windows10-2004-x64
1malware/5/...ib.dll
windows7-x64
1malware/5/...ib.dll
windows10-2004-x64
1malware/5/...ns.dll
windows7-x64
1malware/5/...ns.dll
windows10-2004-x64
1malware/5/...on.dll
windows7-x64
1malware/5/...on.dll
windows10-2004-x64
1malware/5/...op.dll
windows7-x64
3malware/5/...op.dll
windows10-2004-x64
3malware/5/...en.dll
windows7-x64
1malware/5/...en.dll
windows10-2004-x64
1malware/5/...te.dll
windows7-x64
1malware/5/...te.dll
windows10-2004-x64
1malware/5/...ty.dll
windows7-x64
1malware/5/...ty.dll
windows10-2004-x64
1malware/5/...api.js
windows7-x64
3malware/5/...api.js
windows10-2004-x64
3Analysis
-
max time kernel
89s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
29/12/2024, 13:48
Behavioral task
behavioral1
Sample
malware/1/Setup.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
malware/1/Setup.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
malware/2/Setup.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
malware/2/Setup.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
malware/3/free_sea_of_thieves_hacks_(esp_.exe
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
malware/3/free_sea_of_thieves_hacks_(esp_.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
malware/4/Setup.exe
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
malware/4/Setup.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
malware/5/Data/Plug-ins/root/data/BIBUtils.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
malware/5/Data/Plug-ins/root/data/BIBUtils.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
malware/5/Data/Plug-ins/root/data/CITThreading.dll
Resource
win7-20241010-en
Behavioral task
behavioral12
Sample
malware/5/Data/Plug-ins/root/data/CITThreading.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
malware/5/Data/Plug-ins/root/data/CRClient.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
malware/5/Data/Plug-ins/root/data/CRClient.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
malware/5/Data/Plug-ins/root/data/ExtendScript.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
malware/5/Data/Plug-ins/root/data/ExtendScript.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
malware/5/Data/Plug-ins/root/data/JP2KLib.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
malware/5/Data/Plug-ins/root/data/JP2KLib.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
malware/5/Data/Plug-ins/root/data/Microsoft.Expression.Interactions.dll
Resource
win7-20241010-en
Behavioral task
behavioral20
Sample
malware/5/Data/Plug-ins/root/data/Microsoft.Expression.Interactions.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
malware/5/Data/Plug-ins/root/data/Newtonsoft.Json.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
malware/5/Data/Plug-ins/root/data/Newtonsoft.Json.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
malware/5/Data/Plug-ins/root/data/SQLite.Interop.dll
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
malware/5/Data/Plug-ins/root/data/SQLite.Interop.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
malware/5/Data/Plug-ins/root/data/SharpRaven.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
malware/5/Data/Plug-ins/root/data/SharpRaven.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
malware/5/Data/Plug-ins/root/data/System.Data.SQLite.dll
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
malware/5/Data/Plug-ins/root/data/System.Data.SQLite.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
malware/5/Data/Plug-ins/root/data/System.Windows.Interactivity.dll
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
malware/5/Data/Plug-ins/root/data/System.Windows.Interactivity.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
malware/5/Data/Plug-ins/root/data/api.js
Resource
win7-20241010-en
Behavioral task
behavioral32
Sample
malware/5/Data/Plug-ins/root/data/api.js
Resource
win10v2004-20241007-en
General
-
Target
malware/5/Data/Plug-ins/root/data/api.js
-
Size
21KB
-
MD5
28a14d5d6c3912ea3cd20b7e94757441
-
SHA1
a21fb4bdfb0b063a83e818c18bba396b26fc2655
-
SHA256
4dcbaf51457660f0f4edbb916ba20fbb5003ba5bba923d60e41494ddca9d091a
-
SHA512
1300699cb4e8510c946abdac9dfcb37c262c1485e7886cbb27d985c7b6b9b9d2ab02dee10f9430b4df21839282cc7efa9f0fa13fe7a9d4e2c67676cb7bd37289
-
SSDEEP
384:mcq9EarSceeQMORRKx6kDr4VCPH3ZaSKHxka2Eci2mL:ONrbQMOHKxJxa2ch2mL
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs