Overview

overview

10

Static

static

10

Plugins/WinLock.exe

windows7-x64

8

Plugins/WinLock.exe

windows10-2004-x64

8

Plugins/Wi...ld.exe

windows7-x64

8

Plugins/Wi...ld.exe

windows10-2004-x64

8

Plugins/ethminer.exe

windows7-x64

1

Plugins/ethminer.exe

windows10-2004-x64

1

Stub/Client.exe

windows7-x64

1

Stub/Client.exe

windows10-2004-x64

1

Stub/Criptor.exe

windows7-x64

1

Stub/Criptor.exe

windows10-2004-x64

1

Stub/Loader.exe

windows7-x64

1

Stub/Loader.exe

windows10-2004-x64

1

Stub/net5....fs.exe

windows7-x64

1

Stub/net5....fs.exe

windows10-2004-x64

1

Stub/netco...or.exe

windows7-x64

1

Stub/netco...or.exe

windows10-2004-x64

1

Stub/netco...or.exe

windows7-x64

1

Stub/netco...or.exe

windows10-2004-x64

1

Stub/netco...or.exe

windows7-x64

1

Stub/netco...or.exe

windows10-2004-x64

1

Stub/tempClient.exe

windows7-x64

1

Stub/tempClient.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    10-01-2025 15:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Stub/netcoreapp5.0/Obfuscator.exe

  • Size

    123KB

  • MD5

    696e8fa514a48b48582c7c1346105ab1

  • SHA1

    0ec9137a79a5a8f328ad61225c985f9bfa932d72

  • SHA256

    58ed4b876e1ab1410eb2b8a69f72d9e9e71d3ed99f5210f55d5a924fb3e6aa69

  • SHA512

    696cf6845bafd7296d73ad9a134821daf4867a033c28d15c56c69ed7ee9d186d3d0262c387b9b391f2f325a71ba8d1bab3500ece2e0749ff7438f0cb205e836c

  • SSDEEP

    3072:Nl0xIHQmEbGliHk29+E8Ufjo11NVG/sJ7xPzvfWC5:T9RPG/s/TfWC

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Stub\netcoreapp5.0\Obfuscator.exe
    "C:\Users\Admin\AppData\Local\Temp\Stub\netcoreapp5.0\Obfuscator.exe"
    1⤵
      PID:2252

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads