Overview

overview

10

Static

static

10

RS.7z

windows7-x64

RS.7z

windows10-2004-x64

RS.7z

android-11-x64

RS.7z

android-13-x64

RS.7z

macos-10.15-amd64

RS.7z

ubuntu-18.04-amd64

RS.7z

debian-9-armhf

RS.7z

debian-9-mips

RS.7z

debian-9-mipsel

Ransomware...KB.exe

windows7-x64

10

Ransomware...KB.exe

windows10-2004-x64

10

Ransomware...KB.exe

android-9-x86

Ransomware...KB.exe

android-13-x64

Ransomware...KB.exe

macos-10.15-amd64

Ransomware...KB.exe

ubuntu-18.04-amd64

Ransomware...KB.exe

debian-9-armhf

Ransomware...KB.exe

debian-9-mips

Ransomware...KB.exe

debian-9-mipsel

$PLUGINSDI...em.dll

windows7-x64

$PLUGINSDI...em.dll

windows10-2004-x64

$PLUGINSDI...em.dll

android-11-x64

$PLUGINSDI...em.dll

android-13-x64

$PLUGINSDI...em.dll

macos-10.15-amd64

$PLUGINSDI...em.dll

ubuntu-18.04-amd64

$PLUGINSDI...em.dll

debian-9-armhf

$PLUGINSDI...em.dll

debian-9-mips

$PLUGINSDI...em.dll

debian-9-mipsel

Ransomware...KB.ps1

windows7-x64

Ransomware...KB.ps1

windows10-2004-x64

Ransomware...KB.ps1

android-11-x64

Ransomware...KB.ps1

android-13-x64

Ransomware...KB.ps1

macos-10.15-amd64

Resubmissions

05-02-2025 10:25

250205-mgcefaslhw 10

05-02-2025 10:17

250205-mbs51atmbk 10

05-02-2025 09:15

250205-k785zs1pfn 10

05-02-2025 08:48

250205-kqq8vayph1 10

05-02-2025 06:31

250205-hae5jatqgt 10

05-02-2025 06:29

250205-g8xlsstqax 10

28-07-2024 16:38

240728-t5tryssgmm 10

07-07-2024 14:07

240707-rfgd8atekm 10

07-07-2024 14:07

240707-re689awdpe 10

13-09-2022 17:54

220913-wg1lpsgbg7 10

Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    05-02-2025 08:48

Sharing

Copy URL
Twitter E-mail

Errors

Reason
Payload did not run: payload error: fork/exec /tmp/$PLUGINSDIR/System.dll: exec format error
Report Analysis Logs

General

  • Target

    $PLUGINSDIR/System.dll

  • Size

    11KB

  • MD5

    fccff8cb7a1067e23fd2e2b63971a8e1

  • SHA1

    30e2a9e137c1223a78a0f7b0bf96a1c361976d91

  • SHA256

    6fcea34c8666b06368379c6c402b5321202c11b00889401c743fb96c516c679e

  • SHA512

    f4335e84e6f8d70e462a22f1c93d2998673a7616c868177cac3e8784a3be1d7d0bb96f2583fa0ed82f4f2b6b8f5d9b33521c279a42e055d80a94b4f3f1791e0c

  • SSDEEP

    192:xPtkiQJr7V9r3HcU17S8g1w5xzWxy6j2V7i77blbTc4v:g7VpNo8gmOyRsVc4

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/$PLUGINSDIR/System.dll
    "/tmp/\$PLUGINSDIR/System.dll" dsrm -subtree -noprompt -c "user\"http://+:443\""
    1⤵
      PID:655

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads