Overview

overview

10

Static

static

10

Plugins/WinLock.exe

windows7-x64

8

Plugins/WinLock.exe

windows10-2004-x64

8

Plugins/Wi...ld.exe

windows7-x64

8

Plugins/Wi...ld.exe

windows10-2004-x64

8

Plugins/ethminer.exe

windows7-x64

1

Plugins/ethminer.exe

windows10-2004-x64

1

Stub/Client.exe

windows7-x64

1

Stub/Client.exe

windows10-2004-x64

1

Stub/Criptor.exe

windows7-x64

1

Stub/Criptor.exe

windows10-2004-x64

1

Stub/Loader.exe

windows7-x64

1

Stub/Loader.exe

windows10-2004-x64

1

Stub/net5....fs.exe

windows7-x64

1

Stub/net5....fs.exe

windows10-2004-x64

1

Stub/netco...or.exe

windows7-x64

1

Stub/netco...or.exe

windows10-2004-x64

1

Stub/netco...or.exe

windows7-x64

1

Stub/netco...or.exe

windows10-2004-x64

1

Stub/netco...or.exe

windows7-x64

1

Stub/netco...or.exe

windows10-2004-x64

1

Stub/tempClient.exe

windows7-x64

1

Stub/tempClient.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    147s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-01-2025 15:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Stub/net5.0/ref/Obfs.exe

  • Size

    14KB

  • MD5

    ec9ec0b0d487d0c9d29e55c56753b864

  • SHA1

    e75720cc8f21eed5bcbef71062c16b737ade9c91

  • SHA256

    6e4a5284e68f2411be0e3140a1765cf3a5cbabe575ada63d7799ee6c679c869b

  • SHA512

    85335280a5a92f2a72edcb4dadc9250a5ee1ff36990f2bcd771eba2d98d7a65966ae179c371daf1b48139a33487c4b719866d5da7b44ae8de8283f98f46c37d2

  • SSDEEP

    192:6diyL2uyArhfIfuGHBopK6wwaOgRndkCDg0v5tF47D:RyHtdIfthiKt0mndkCZo

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Stub\net5.0\ref\Obfs.exe
    "C:\Users\Admin\AppData\Local\Temp\Stub\net5.0\ref\Obfs.exe"
    1⤵
      PID:5020

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/5020-0-0x00007FFAC2653000-0x00007FFAC2655000-memory.dmp

      Filesize

      8KB

      Download

    • memory/5020-1-0x0000021D115F0000-0x0000021D115FC000-memory.dmp

      Filesize

      48KB

      Download