Overview
overview
10Static
static
10REPO-Steam...1).rar
windows7-x64
7REPO-Steam...1).rar
windows10-2004-x64
1R.E.P.O/Mo...tor.js
windows7-x64
3R.E.P.O/Mo...tor.js
windows10-2004-x64
3R.E.P.O/OnlineFix.url
windows7-x64
6R.E.P.O/OnlineFix.url
windows10-2004-x64
6R.E.P.O/On...64.dll
windows7-x64
1R.E.P.O/On...64.dll
windows10-2004-x64
1R.E.P.O/REPO.exe
windows7-x64
1R.E.P.O/REPO.exe
windows10-2004-x64
1R.E.P.O/RE...ss.dll
windows7-x64
1R.E.P.O/RE...ss.dll
windows10-2004-x64
1R.E.P.O/RE...rp.dll
windows7-x64
1R.E.P.O/RE...rp.dll
windows10-2004-x64
1R.E.P.O/RE...bx.dll
windows7-x64
1R.E.P.O/RE...bx.dll
windows10-2004-x64
1R.E.P.O/RE...64.dll
windows7-x64
1R.E.P.O/RE...64.dll
windows10-2004-x64
1R.E.P.O/RE...ts.dll
windows7-x64
1R.E.P.O/RE...ts.dll
windows10-2004-x64
1R.E.P.O/RE...th.dll
windows7-x64
1R.E.P.O/RE...th.dll
windows10-2004-x64
1R.E.P.O/RE...ty.dll
windows7-x64
1R.E.P.O/RE...ty.dll
windows10-2004-x64
1R.E.P.O/RE...on.dll
windows7-x64
1R.E.P.O/RE...on.dll
windows10-2004-x64
1R.E.P.O/RE...3D.dll
windows7-x64
1R.E.P.O/RE...3D.dll
windows10-2004-x64
1R.E.P.O/RE...at.dll
windows7-x64
1R.E.P.O/RE...at.dll
windows10-2004-x64
1R.E.P.O/RE...me.dll
windows7-x64
1R.E.P.O/RE...me.dll
windows10-2004-x64
1Analysis
-
max time kernel
98s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20250313-en -
resource tags
arch:x64arch:x86image:win10v2004-20250313-enlocale:en-usos:windows10-2004-x64system -
submitted
20/03/2025, 06:05
Behavioral task
behavioral1
Sample
REPO-SteamRIP.com (1).rar
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral2
Sample
REPO-SteamRIP.com (1).rar
Resource
win10v2004-20250313-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
R.E.P.O/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.js
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral4
Sample
R.E.P.O/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.js
Resource
win10v2004-20250314-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
R.E.P.O/OnlineFix.url
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral6
Sample
R.E.P.O/OnlineFix.url
Resource
win10v2004-20250314-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
R.E.P.O/OnlineFix64.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral8
Sample
R.E.P.O/OnlineFix64.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
R.E.P.O/REPO.exe
Resource
win7-20250207-en
windows7-x64
Behavioral task
behavioral10
Sample
R.E.P.O/REPO.exe
Resource
win10v2004-20250314-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
R.E.P.O/REPO_Data/Managed/Assembly-CSharp-firstpass.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral12
Sample
R.E.P.O/REPO_Data/Managed/Assembly-CSharp-firstpass.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
R.E.P.O/REPO_Data/Managed/Assembly-CSharp.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral14
Sample
R.E.P.O/REPO_Data/Managed/Assembly-CSharp.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
R.E.P.O/REPO_Data/Managed/Autodesk.Fbx.dll
Resource
win7-20241023-en
windows7-x64
Behavioral task
behavioral16
Sample
R.E.P.O/REPO_Data/Managed/Autodesk.Fbx.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
R.E.P.O/REPO_Data/Managed/Facepunch.Steamworks.Win64.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral18
Sample
R.E.P.O/REPO_Data/Managed/Facepunch.Steamworks.Win64.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
R.E.P.O/REPO_Data/Managed/FbxBuildTestAssets.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral20
Sample
R.E.P.O/REPO_Data/Managed/FbxBuildTestAssets.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
R.E.P.O/REPO_Data/Managed/Klattersynth.dll
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral22
Sample
R.E.P.O/REPO_Data/Managed/Klattersynth.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
R.E.P.O/REPO_Data/Managed/Mono.Security.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral24
Sample
R.E.P.O/REPO_Data/Managed/Mono.Security.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
R.E.P.O/REPO_Data/Managed/Newtonsoft.Json.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral26
Sample
R.E.P.O/REPO_Data/Managed/Newtonsoft.Json.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
R.E.P.O/REPO_Data/Managed/Photon3Unity3D.dll
Resource
win7-20250207-en
windows7-x64
Behavioral task
behavioral28
Sample
R.E.P.O/REPO_Data/Managed/Photon3Unity3D.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
R.E.P.O/REPO_Data/Managed/PhotonChat.dll
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral30
Sample
R.E.P.O/REPO_Data/Managed/PhotonChat.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
R.E.P.O/REPO_Data/Managed/PhotonRealtime.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral32
Sample
R.E.P.O/REPO_Data/Managed/PhotonRealtime.dll
Resource
win10v2004-20250314-en
windows10-2004-x64
General
-
Target
REPO-SteamRIP.com (1).rar
-
Size
356.1MB
-
MD5
0e2f2ffb11368a49808761920c589ca2
-
SHA1
988e2e12c6dca8a30f12ab9ff0a013aa26fe2759
-
SHA256
58de43fc39f4b70767e21d0b11091fbb9c164ac33fee5374bffa4fbc94b54de1
-
SHA512
12d317dfa4356220b315e900e1605bb0439fc8e45a14d948d7fd45d6dcc5e31069c8e6bfb34e4023745cca15bf1bc1fe27977474dd61b93373f4bc24edcdafbb
-
SSDEEP
6291456:F+OmJ+KJsh82HcvufaTW6Z8QtrlxBn3soLhG0pHvcwt8zx+/+qJY5U3ykh2MtM:F+OmJJshrHN6Z8Gxh8ocYbtixfiYYlhm
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3100 7zFM.exe Token: 35 3100 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3100 7zFM.exe