Overview

overview

10

Static

static

3

perm/mac/R...64.dll

windows7-x64

1

perm/mac/R...64.dll

windows10-2004-x64

1

perm/mac/R...sh.exe

windows7-x64

1

perm/mac/R...sh.exe

windows10-2004-x64

1

perm/mac/rtkio64.sys

windows7-x64

1

perm/mac/rtkio64.sys

windows10-2004-x64

1

perm/mac/r...64.sys

windows10-2004-x64

1

perm/mac/spoof.bat

windows7-x64

1

perm/mac/spoof.bat

windows10-2004-x64

1

perm/seria...64.exe

windows7-x64

1

perm/seria...64.exe

windows10-2004-x64

1

perm/seria...of.bat

windows7-x64

10

perm/seria...of.bat

windows10-2004-x64

10

perm/seria...er.bat

windows7-x64

1

perm/seria...er.bat

windows10-2004-x64

1

perm/seria...64.sys

windows7-x64

1

perm/seria...64.sys

windows10-2004-x64

1

perm/seria...64.sys

windows10-2004-x64

1

Analysis

  • max time kernel
    93s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-01-2025 00:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    perm/mac/rtkiow10x64.sys

  • Size

    63KB

  • MD5

    96a8b535b5e14b582ca5679a3e2a5946

  • SHA1

    f6b3577ea4b1a5641ae3421151a26268434c3db8

  • SHA256

    ab8f2217e59319b88080e052782e559a706fa4fb7b8b708f709ff3617124da89

  • SHA512

    ca8ec4cec41e47560cc4d3b3af7bffa5c27455a1f55cc6ca1f3b1553ceda93b501a62a3f3599db1c88fd20fdeb48630973255ca23129b7036e938c7faaaf0376

  • SSDEEP

    1536:+OsdGoYvrhm0Kxu4RN496QOxsbXgkUfQOLf:Rm0K321OcoLf

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\perm\mac\rtkiow10x64.sys
    1⤵
      PID:3124
      • C:\Users\Admin\AppData\Local\Temp\perm\mac\rtkiow10x64.sys
        C:\Users\Admin\AppData\Local\Temp\perm\mac\rtkiow10x64.sys
        2⤵
          PID:216

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads