Overview

overview

10

Static

static

10

R.E.P.O/Mo...tor.js

windows7-x64

3

R.E.P.O/Mo...tor.js

windows10-2004-x64

3

R.E.P.O/OnlineFix.url

windows7-x64

6

R.E.P.O/OnlineFix.url

windows10-2004-x64

6

R.E.P.O/On...64.dll

windows7-x64

1

R.E.P.O/On...64.dll

windows10-2004-x64

1

R.E.P.O/REPO.exe

windows7-x64

1

R.E.P.O/REPO.exe

windows10-2004-x64

1

R.E.P.O/RE...ss.dll

windows7-x64

1

R.E.P.O/RE...ss.dll

windows10-2004-x64

1

R.E.P.O/RE...rp.dll

windows7-x64

1

R.E.P.O/RE...rp.dll

windows10-2004-x64

1

R.E.P.O/RE...bx.dll

windows7-x64

1

R.E.P.O/RE...bx.dll

windows10-2004-x64

1

R.E.P.O/RE...64.dll

windows7-x64

1

R.E.P.O/RE...64.dll

windows10-2004-x64

1

R.E.P.O/RE...ts.dll

windows7-x64

1

R.E.P.O/RE...ts.dll

windows10-2004-x64

1

R.E.P.O/RE...th.dll

windows7-x64

1

R.E.P.O/RE...th.dll

windows10-2004-x64

1

R.E.P.O/RE...ty.dll

windows7-x64

1

R.E.P.O/RE...ty.dll

windows10-2004-x64

1

R.E.P.O/RE...on.dll

windows7-x64

1

R.E.P.O/RE...on.dll

windows10-2004-x64

1

R.E.P.O/RE...3D.dll

windows7-x64

1

R.E.P.O/RE...3D.dll

windows10-2004-x64

1

R.E.P.O/RE...at.dll

windows7-x64

1

R.E.P.O/RE...at.dll

windows10-2004-x64

1

R.E.P.O/RE...me.dll

windows7-x64

1

R.E.P.O/RE...me.dll

windows10-2004-x64

1

R.E.P.O/RE...es.dll

windows7-x64

1

R.E.P.O/RE...es.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    104s
  • max time network
    171s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250314-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/03/2025, 08:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    R.E.P.O/REPO.exe

  • Size

    651KB

  • MD5

    37e2e7e012343ccef500133286fcbf27

  • SHA1

    4b7e66039d04b14ddcfb580a6e6a395ea52222be

  • SHA256

    1643ff9ed131adde7a22363f26d36308b4b4fb8f9ba61e5afce3b6803c5cb302

  • SHA512

    418dcb69e506f42248c00459eb3fa5a576006fead83cb5372e5710a8e95265654c316bbb314e4b8afa69e393a7cdf01219b7e17095d1990ab418f0aed68c687e

  • SSDEEP

    12288:c/744aOD8GVma8Vk2WbYq5qL7Lp4SKpRUzfBI4xa7iKXS:m9aO/Vma72z9KY7BID7iKi

Score
1/10

Malware Config

Signatures

  • Checks SCSI registry key(s) 3 TTPs 3 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Runs regedit.exe 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 3 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 5 IoCs
  • Suspicious use of FindShellTrayWindow 29 IoCs
  • Suspicious use of SendNotifyMessage 29 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\R.E.P.O\REPO.exe
    "C:\Users\Admin\AppData\Local\Temp\R.E.P.O\REPO.exe"
    1⤵
      PID:4352
    • C:\Windows\regedit.exe
      "C:\Windows\regedit.exe"
      1⤵
      • Runs regedit.exe
      • Suspicious behavior: GetForegroundWindowSpam
      PID:2132
    • C:\Windows\system32\taskmgr.exe
      "C:\Windows\system32\taskmgr.exe" /4
      1⤵
      • Checks SCSI registry key(s)
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:724

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/724-0-0x000001C6C7240000-0x000001C6C7241000-memory.dmp

      Filesize

      4KB

      Download

    • memory/724-2-0x000001C6C7240000-0x000001C6C7241000-memory.dmp

      Filesize

      4KB

      Download

    • memory/724-1-0x000001C6C7240000-0x000001C6C7241000-memory.dmp

      Filesize

      4KB

      Download

    • memory/724-12-0x000001C6C7240000-0x000001C6C7241000-memory.dmp

      Filesize

      4KB

      Download

    • memory/724-11-0x000001C6C7240000-0x000001C6C7241000-memory.dmp

      Filesize

      4KB

      Download

    • memory/724-10-0x000001C6C7240000-0x000001C6C7241000-memory.dmp

      Filesize

      4KB

      Download

    • memory/724-9-0x000001C6C7240000-0x000001C6C7241000-memory.dmp

      Filesize

      4KB

      Download

    • memory/724-8-0x000001C6C7240000-0x000001C6C7241000-memory.dmp

      Filesize

      4KB

      Download

    • memory/724-7-0x000001C6C7240000-0x000001C6C7241000-memory.dmp

      Filesize

      4KB

      Download

    • memory/724-6-0x000001C6C7240000-0x000001C6C7241000-memory.dmp

      Filesize

      4KB

      Download