3fb7315786ca0509d9474f42492805fff4374cd46fbaee960ceb96686798e6cd

Submit
Reports

Overview

overview

Static

static

Spoofer/RecClean.exe

windows7-x64

Spoofer/RecClean.exe

windows10-2004-x64

Spoofer/ru...on.bat

windows7-x64

Spoofer/ru...on.bat

windows10-2004-x64

Spoofer/ru...te.vbs

windows7-x64

Spoofer/ru...te.vbs

windows10-2004-x64

Spoofer/ru...ss.bat

windows7-x64

Spoofer/ru...ss.bat

windows10-2004-x64

Spoofer/ru...ut.exe

windows7-x64

Spoofer/ru...ut.exe

windows10-2004-x64

Spoofer/ru...en.bat

windows7-x64

Spoofer/ru...en.bat

windows10-2004-x64

Spoofer/ru...ox.exe

windows7-x64

Spoofer/ru...ox.exe

windows10-2004-x64

Spoofer/ru...id.ps1

windows7-x64

Spoofer/ru...id.ps1

windows10-2004-x64

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
24-01-2025 09:06

Sharing

Copy URL

Twitter E-mail

Static task

static1

blankgrabber

3 signatures

Behavioral task

behavioral1

Sample

Spoofer/RecClean.exe

Resource

win7-20241010-en

upx

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

Spoofer/RecClean.exe

Resource

win10v2004-20241007-en

defense_evasion discovery execution spyware stealer upx

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral3

Sample

Spoofer/run after cleaner/Monotone-HWID-Spoofer-0.0.1/Button.bat

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Spoofer/run after cleaner/Monotone-HWID-Spoofer-0.0.1/Button.bat

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Spoofer/run after cleaner/Monotone-HWID-Spoofer-0.0.1/Commands/Hidden/UnbanComplete.vbs

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Spoofer/run after cleaner/Monotone-HWID-Spoofer-0.0.1/Commands/Hidden/UnbanComplete.vbs

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Spoofer/run after cleaner/Monotone-HWID-Spoofer-0.0.1/Commands/Hidden/process.bat

Resource

win7-20241023-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral8

Sample

Spoofer/run after cleaner/Monotone-HWID-Spoofer-0.0.1/Commands/Hidden/process.bat

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral9

Sample

Spoofer/run after cleaner/Monotone-HWID-Spoofer-0.0.1/GetInput.exe

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Spoofer/run after cleaner/Monotone-HWID-Spoofer-0.0.1/GetInput.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

Spoofer/run after cleaner/Monotone-HWID-Spoofer-0.0.1/Getlen.bat

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Spoofer/run after cleaner/Monotone-HWID-Spoofer-0.0.1/Getlen.bat

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Spoofer/run after cleaner/Monotone-HWID-Spoofer-0.0.1/batbox.exe

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Spoofer/run after cleaner/Monotone-HWID-Spoofer-0.0.1/batbox.exe

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

Spoofer/run after cleaner/Monotone-HWID-Spoofer-0.0.1/hwid.ps1

Resource

win7-20240903-en

execution

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

Spoofer/run after cleaner/Monotone-HWID-Spoofer-0.0.1/hwid.ps1

Resource

win10v2004-20241007-en

execution

windows10-2004-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

Spoofer/run after cleaner/Monotone-HWID-Spoofer-0.0.1/Getlen.bat
Size

1KB
MD5

8c1812e76ba7bf09cb87384089a0ab7f
SHA1

d3edf2ba081073139960a955e812e6bb7f63817b
SHA256

83ce5342710a2f2e385a363402661e3426728dd6bcfe9d87e22f2fb858b07bde
SHA512

618abe11f65fe95cdc1f1834bf24ddbbea789c971788af7d2248b880e53d11a3c4302bd8e3c3c36b934f5f7d975d1b142fae8fd23c9ed6cfa118c97e01f6fd14

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Spoofer\run after cleaner\Monotone-HWID-Spoofer-0.0.1\Getlen.bat"
1⤵
PID:3064

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads