Overview
overview
10Static
static
10Rdp Cracking tool.zip
windows7-x64
10Rdp Cracking tool.zip
windows10-2004-x64
1Rdp Cracki...g1.exe
windows7-x64
3Rdp Cracki...g1.exe
windows10-2004-x64
3Rdp Cracki...or.exe
windows7-x64
10Rdp Cracki...or.exe
windows10-2004-x64
10Rdp Cracki...e4.dll
windows7-x64
3Rdp Cracki...e4.dll
windows10-2004-x64
3Rdp Cracki...i4.dll
windows7-x64
3Rdp Cracki...i4.dll
windows10-2004-x64
3Rdp Cracki...k4.dll
windows7-x64
3Rdp Cracki...k4.dll
windows10-2004-x64
3Rdp Cracki...ts.txt
windows7-x64
1Rdp Cracki...ts.txt
windows10-2004-x64
1Rdp Cracki...ng.cfg
windows7-x64
1Rdp Cracki...ng.cfg
windows10-2004-x64
1Rdp Cracki...g1.jpg
windows7-x64
1Rdp Cracki...g1.jpg
windows10-2004-x64
1Rdp Cracki...g1.jpg
windows7-x64
1Rdp Cracki...g1.jpg
windows10-2004-x64
1Rdp Cracki...g1.exe
windows7-x64
9Rdp Cracki...g1.exe
windows10-2004-x64
9Rdp Cracki...or.exe
windows7-x64
10Rdp Cracki...or.exe
windows10-2004-x64
10Rdp Cracki...Me.txt
windows7-x64
1Rdp Cracki...Me.txt
windows10-2004-x64
1Rdp Cracki...ls.txt
windows7-x64
1Rdp Cracki...ls.txt
windows10-2004-x64
1Rdp Cracki...od.txt
windows7-x64
1Rdp Cracki...od.txt
windows10-2004-x64
1Rdp Cracki...rs.txt
windows7-x64
1Rdp Cracki...rs.txt
windows10-2004-x64
1Analysis
-
max time kernel
426s -
max time network
435s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
23-01-2025 20:19
Behavioral task
behavioral1
Sample
Rdp Cracking tool.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Rdp Cracking tool.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/KPortScan3 @virusbug1.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/KPortScan3 @virusbug1.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/Kport scan Activator.exe
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/Kport scan Activator.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/QtCore4.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/QtCore4.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/QtGui4.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/QtGui4.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/QtNetwork4.dll
Resource
win7-20240729-en
Behavioral task
behavioral12
Sample
Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/QtNetwork4.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/results.txt
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/results.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/results.txt.terabox.uploading.cfg
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Rdp Cracking tool @ virusbug1/KPortScan 3.0 @virusbug1/results.txt.terabox.uploading.cfg
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/@virusbug1.jpg
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/@virusbug1.jpg
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/@virusbug1.jpg
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/@virusbug1.jpg
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/NL Brute 1.2 @virusbug1.exe
Resource
win7-20240729-en
Behavioral task
behavioral22
Sample
Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/NL Brute 1.2 @virusbug1.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/NL Brute Activator.exe
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/NL Brute Activator.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/Read Me.txt
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/Read Me.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/credentials.txt
Resource
win7-20241010-en
Behavioral task
behavioral28
Sample
Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/credentials.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/good.txt
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/good.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/servers.txt
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
Rdp Cracking tool @ virusbug1/NL Brute @virusbug1/NL Brute @virusbug1/servers.txt
Resource
win10v2004-20241007-en
General
-
Target
Rdp Cracking tool.zip
-
Size
12.9MB
-
MD5
9ed3a65009cb13d215fa1de6e4dbdb0d
-
SHA1
6129d957e98a0d69e3a34871c811f7f63faa050b
-
SHA256
68b32fe3170689eaca32c53ebddcc60f6ded63b25ff20cc550b7bdf716bc5c02
-
SHA512
7fe97ffa1d9a0106091b3547a984e11f552d6b8874f4cff6e79373abe08264837bd6538f4629d95261845c49745c707a22aef41ceed23b4ea667178dbe95bec6
-
SSDEEP
393216:w0RA7GG0bk/mG8VRRfa657IAsA9me7RzXtC:VxG0b8mGCny6tFsA/m
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 540 7zFM.exe Token: 35 540 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 540 7zFM.exe