Overview
overview
10Static
static
3Collapse/Collapse.exe
windows7-x64
10Collapse/Collapse.exe
windows10-2004-x64
10Collapse/M...re.dll
windows7-x64
1Collapse/M...re.dll
windows10-2004-x64
1Collapse/i...v2.dll
windows7-x64
1Collapse/i...v2.dll
windows10-2004-x64
1Collapse/i...de.ps1
windows7-x64
3Collapse/i...de.ps1
windows10-2004-x64
3Collapse/i...m.html
windows7-x64
3Collapse/i...m.html
windows10-2004-x64
3Collapse/i...ng.dll
windows7-x64
1Collapse/i...ng.dll
windows10-2004-x64
1Collapse/i...ng.dll
windows7-x64
1Collapse/i...ng.dll
windows10-2004-x64
1Collapse/i...ng.dll
windows7-x64
1Collapse/i...ng.dll
windows10-2004-x64
1Collapse/i...47.dll
windows10-2004-x64
1Collapse/i...de.ps1
windows7-x64
3Collapse/i...de.ps1
windows10-2004-x64
3Collapse/i...eg.dll
windows7-x64
1Collapse/i...eg.dll
windows10-2004-x64
1Collapse/i....1.dll
windows7-x64
1Collapse/i....1.dll
windows10-2004-x64
1Collapse/i...er.dll
windows7-x64
1Collapse/i...er.dll
windows10-2004-x64
1Collapse/i...-1.dll
windows7-x64
1Collapse/i...-1.dll
windows10-2004-x64
1Collapse/l...64.dll
windows7-x64
1Collapse/l...64.dll
windows10-2004-x64
1Collapse/l...yll.js
windows7-x64
3Collapse/l...yll.js
windows10-2004-x64
3Collapse/l...eld.js
windows7-x64
3Analysis
-
max time kernel
146s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
05-01-2025 17:46
Static task
static1
Behavioral task
behavioral1
Sample
Collapse/Collapse.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Collapse/Collapse.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Collapse/Microsoft.Web.Core.dll
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
Collapse/Microsoft.Web.Core.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Collapse/infos/libGLESv2.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Collapse/infos/libGLESv2.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Collapse/infos/locale/de.ps1
Resource
win7-20241023-en
Behavioral task
behavioral8
Sample
Collapse/infos/locale/de.ps1
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Collapse/infos/resources/LICENSES.chromium.html
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Collapse/infos/resources/LICENSES.chromium.html
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Collapse/infos/resources/app.asar.unpacked/node_modules/btime/binding.dll
Resource
win7-20241010-en
Behavioral task
behavioral12
Sample
Collapse/infos/resources/app.asar.unpacked/node_modules/btime/binding.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Collapse/infos/resources/app.asar.unpacked/node_modules/get-fonts/binding.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Collapse/infos/resources/app.asar.unpacked/node_modules/get-fonts/binding.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Collapse/infos/resources/app.asar.unpacked/node_modules/vibrancy-win/binding.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Collapse/infos/resources/app.asar.unpacked/node_modules/vibrancy-win/binding.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
Collapse/infos/resources/d3dcompiler_47.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral18
Sample
Collapse/infos/resources/de.ps1
Resource
win7-20240903-en
Behavioral task
behavioral19
Sample
Collapse/infos/resources/de.ps1
Resource
win10v2004-20241007-en
Behavioral task
behavioral20
Sample
Collapse/infos/resources/ffmpeg.dll
Resource
win7-20240903-en
Behavioral task
behavioral21
Sample
Collapse/infos/resources/ffmpeg.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral22
Sample
Collapse/infos/resources/mkl_mc3.1.dll
Resource
win7-20240903-en
Behavioral task
behavioral23
Sample
Collapse/infos/resources/mkl_mc3.1.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral24
Sample
Collapse/infos/resources/vk_swiftshader.dll
Resource
win7-20241010-en
Behavioral task
behavioral25
Sample
Collapse/infos/resources/vk_swiftshader.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral26
Sample
Collapse/infos/resources/vulkan-1.dll
Resource
win7-20240903-en
Behavioral task
behavioral27
Sample
Collapse/infos/resources/vulkan-1.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral28
Sample
Collapse/libsl-x64.dll
Resource
win7-20240903-en
Behavioral task
behavioral29
Sample
Collapse/libsl-x64.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral30
Sample
Collapse/loaders/Dexyll.js
Resource
win7-20240729-en
Behavioral task
behavioral31
Sample
Collapse/loaders/Dexyll.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral32
Sample
Collapse/loaders/Infinite Yield.js
Resource
win7-20240903-en
General
-
Target
Collapse/infos/resources/ffmpeg.dll
-
Size
2.6MB
-
MD5
7f31b5234e44fac97d3c673a38c4c11f
-
SHA1
65dc18e0bce308608dbba3c76d84e266c9fa53e6
-
SHA256
0e751cd4312fab78d2c316860f1460875cd799e8d158f75934391c14ba328101
-
SHA512
83658e0275a8e1fec8dd0f98c19c3e7d37a7205afc3547fdc09c60f0feebe72d30ecb2b182e9ed17ceaf3604ecd77810e330eff4cb5e38fef8a27b8ea9db2467
-
SSDEEP
49152:zYuqVaqc35GHXVNtcZ44yODvSEbO/1o/GRRpYN4MJ8eIknusyUUjkU+jLtyTzQVN:zYLVl54yODvH/ySJUiLtyTzQVkU5qkJr
Malware Config
Signatures
Processes
Network
-
Remote address:8.8.8.8:53Request8.8.8.8.in-addr.arpaIN PTRResponse8.8.8.8.in-addr.arpaIN PTRdnsgoogle
-
Remote address:8.8.8.8:53Request97.17.167.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request172.214.232.199.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request23.159.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request95.221.229.192.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request133.211.185.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request53.210.109.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request228.249.119.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request15.164.165.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request172.210.232.199.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request196.249.167.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request21.236.111.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request85.65.42.20.in-addr.arpaIN PTRResponse
-
66 B 90 B 1 1
DNS Request
8.8.8.8.in-addr.arpa
-
71 B 145 B 1 1
DNS Request
97.17.167.52.in-addr.arpa
-
74 B 128 B 1 1
DNS Request
172.214.232.199.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
23.159.190.20.in-addr.arpa
-
73 B 144 B 1 1
DNS Request
95.221.229.192.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
133.211.185.52.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
53.210.109.20.in-addr.arpa
-
72 B 146 B 1 1
DNS Request
15.164.165.52.in-addr.arpa
-
73 B 159 B 1 1
DNS Request
228.249.119.40.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
196.249.167.52.in-addr.arpa
-
74 B 128 B 1 1
DNS Request
172.210.232.199.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
21.236.111.52.in-addr.arpa
-
70 B 156 B 1 1
DNS Request
85.65.42.20.in-addr.arpa