68b32fe3170689eaca32c53ebddcc60f6ded63b25ff20cc550b7bdf716bc5c02

Submit
Reports

Overview

overview

Static

static

Rdp Cracking tool.zip

windows7-x64

Rdp Cracking tool.zip

windows10-2004-x64

Rdp Cracki...g1.exe

windows7-x64

Rdp Cracki...g1.exe

windows10-2004-x64

Rdp Cracki...or.exe

windows7-x64

Rdp Cracki...or.exe

windows10-2004-x64

Rdp Cracki...e4.dll

windows7-x64

Rdp Cracki...e4.dll

windows10-2004-x64

Rdp Cracki...i4.dll

windows7-x64

Rdp Cracki...i4.dll

windows10-2004-x64

Rdp Cracki...k4.dll

windows7-x64

Rdp Cracki...k4.dll

windows10-2004-x64

Rdp Cracki...ts.txt

windows7-x64

Rdp Cracki...ts.txt

windows10-2004-x64

Rdp Cracki...ng.cfg

windows7-x64

Rdp Cracki...ng.cfg

windows10-2004-x64

Rdp Cracki...g1.jpg

windows7-x64

Rdp Cracki...g1.jpg

windows10-2004-x64

Rdp Cracki...g1.jpg

windows7-x64

Rdp Cracki...g1.jpg

windows10-2004-x64

Rdp Cracki...g1.exe

windows7-x64

Rdp Cracki...g1.exe

windows10-2004-x64

Rdp Cracki...or.exe

windows7-x64

Rdp Cracki...or.exe

windows10-2004-x64

Rdp Cracki...Me.txt

windows7-x64

Rdp Cracki...Me.txt

windows10-2004-x64

Rdp Cracki...ls.txt

windows7-x64

Rdp Cracki...ls.txt

windows10-2004-x64

Rdp Cracki...od.txt

windows7-x64

Rdp Cracki...od.txt

windows10-2004-x64

Rdp Cracki...rs.txt

windows7-x64

Rdp Cracki...rs.txt

windows10-2004-x64

Analysis

max time kernel
357s
max time network
359s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
23-01-2025 20:19

Sharing

Copy URL

Twitter E-mail

Static task

static1

5 signatures

Behavioral task

behavioral1

Sample

Rdp Cracking tool.zip

Resource

win7-20240903-en

asyncrat stormkitty default discovery persistence privilege_escalation rat spyware stealer

windows7-x64

21 signatures

600 seconds

Behavioral task

behavioral2

Sample

Rdp Cracking tool.zip

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

600 seconds

Behavioral task

behavioral3

Sample

Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/KPortScan3 @virusbug1.exe

Resource

win7-20240903-en

discovery

windows7-x64

2 signatures

600 seconds

Behavioral task

behavioral4

Sample

Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/KPortScan3 @virusbug1.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral5

Sample

Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/Kport scan Activator.exe

Resource

win7-20241010-en

asyncrat stormkitty default discovery persistence privilege_escalation rat spyware stealer

windows7-x64

17 signatures

600 seconds

Behavioral task

behavioral6

Sample

Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/Kport scan Activator.exe

Resource

win10v2004-20241007-en

asyncrat stormkitty default discovery persistence privilege_escalation rat spyware stealer

windows10-2004-x64

17 signatures

600 seconds

Behavioral task

behavioral7

Sample

Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/QtCore4.dll

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

600 seconds

Behavioral task

behavioral8

Sample

Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/QtCore4.dll

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral9

Sample

Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/QtGui4.dll

Resource

win7-20240903-en

discovery

windows7-x64

3 signatures

600 seconds

Behavioral task

behavioral10

Sample

Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/QtGui4.dll

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral11

Sample

Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/QtNetwork4.dll

Resource

win7-20240729-en

discovery

windows7-x64

3 signatures

600 seconds

Behavioral task

behavioral12

Sample

Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/QtNetwork4.dll

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral13

Sample

Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/results.txt

Resource

win7-20240903-en

windows7-x64

0 signatures

600 seconds

Behavioral task

behavioral14

Sample

Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/results.txt

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral15

Sample

Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/results.txt.terabox.uploading.cfg

Resource

win7-20240903-en

windows7-x64

0 signatures

600 seconds

Behavioral task

behavioral16

Sample

Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/results.txt.terabox.uploading.cfg

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral17

Sample

Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/@virusbug1.jpg

Resource

win7-20240903-en

windows7-x64

0 signatures

600 seconds

Behavioral task

behavioral18

Sample

Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/@virusbug1.jpg

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral19

Sample

Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/@virusbug1.jpg

Resource

win7-20240903-en

windows7-x64

0 signatures

600 seconds

Behavioral task

behavioral20

Sample

Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/@virusbug1.jpg

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral21

Sample

Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/NL Brute 1.2 @virusbug1.exe

Resource

win7-20240729-en

defense_evasion discovery

windows7-x64

9 signatures

600 seconds

Behavioral task

behavioral22

Sample

Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/NL Brute 1.2 @virusbug1.exe

Resource

win10v2004-20241007-en

defense_evasion discovery

windows10-2004-x64

9 signatures

600 seconds

Behavioral task

behavioral23

Sample

Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/NL Brute Activator.exe

Resource

win7-20240903-en

asyncrat stormkitty default discovery persistence privilege_escalation rat spyware stealer

windows7-x64

17 signatures

600 seconds

Behavioral task

behavioral24

Sample

Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/NL Brute Activator.exe

Resource

win10v2004-20241007-en

asyncrat stormkitty default discovery persistence privilege_escalation rat spyware stealer

windows10-2004-x64

17 signatures

600 seconds

Behavioral task

behavioral25

Sample

Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/Read Me.txt

Resource

win7-20240903-en

windows7-x64

0 signatures

600 seconds

Behavioral task

behavioral26

Sample

Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/Read Me.txt

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral27

Sample

Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/credentials.txt

Resource

win7-20241010-en

windows7-x64

0 signatures

600 seconds

Behavioral task

behavioral28

Sample

Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/credentials.txt

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral29

Sample

Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/good.txt

Resource

win7-20240903-en

windows7-x64

0 signatures

600 seconds

Behavioral task

behavioral30

Sample

Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/good.txt

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral31

Sample

Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/servers.txt

Resource

win7-20240903-en

windows7-x64

0 signatures

600 seconds

Behavioral task

behavioral32

Sample

Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/servers.txt

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

600 seconds

Report Analysis Logs

General

Target

Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/@virusbug1.jpg
Size

52KB
MD5

5afc04f9cba4f9e8b19c3ae3a0358d4a
SHA1

24c18eb11e1eb9c3eb96081e0d6bdfa4c111b9ac
SHA256

06120964f26b03a500ce0ee0ec52ab34dac0a311366ba92c0080b162bc4a56b7
SHA512

9763d6c2630132f73fe07c9b8e417d9057693f82b55b00cbb2584de5190ab38bf45da21f626e3b0a2a8edbc7c014e1e16c4a56f70566b731c14dc0556ed79cd2
SSDEEP

1536:dShzs+hqtNy4icFNXBnoydTAv5X2RLsMLyJRX:gwVNXBRTAvnf

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe "C:\Program Files\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen "C:\Users\Admin\AppData\Local\Temp\Rdp Cracking tool @ virusbug1\NL Brute @virusbug1\NL Brute @virusbug1\@virusbug1.jpg"
1⤵
PID:2480

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads