Overview
overview
10Static
static
10R.E.P.O.v....1).rar
windows7-x64
1R.E.P.O.v....1).rar
windows10-2004-x64
1R.E.P.O.v....ss.dll
windows7-x64
1R.E.P.O.v....ss.dll
windows10-2004-x64
1R.E.P.O.v....rp.dll
windows7-x64
1R.E.P.O.v....rp.dll
windows10-2004-x64
1R.E.P.O.v....bx.dll
windows7-x64
1R.E.P.O.v....bx.dll
windows10-2004-x64
1R.E.P.O.v....64.dll
windows7-x64
1R.E.P.O.v....64.dll
windows10-2004-x64
1R.E.P.O.v....ts.dll
windows7-x64
1R.E.P.O.v....ts.dll
windows10-2004-x64
1R.E.P.O.v....th.dll
windows7-x64
1R.E.P.O.v....th.dll
windows10-2004-x64
1R.E.P.O.v....ty.dll
windows7-x64
1R.E.P.O.v....ty.dll
windows10-2004-x64
1R.E.P.O.v....on.dll
windows7-x64
1R.E.P.O.v....on.dll
windows10-2004-x64
1R.E.P.O.v....3D.dll
windows7-x64
1R.E.P.O.v....3D.dll
windows10-2004-x64
1R.E.P.O.v....at.dll
windows7-x64
1R.E.P.O.v....at.dll
windows10-2004-x64
1R.E.P.O.v....me.dll
windows7-x64
1R.E.P.O.v....me.dll
windows10-2004-x64
1R.E.P.O.v....es.dll
windows7-x64
1R.E.P.O.v....es.dll
windows10-2004-x64
1R.E.P.O.v....ng.dll
windows7-x64
1R.E.P.O.v....ng.dll
windows10-2004-x64
1R.E.P.O.v....PI.dll
windows7-x64
1R.E.P.O.v....PI.dll
windows10-2004-x64
1R.E.P.O.v....UN.dll
windows7-x64
1R.E.P.O.v....UN.dll
windows10-2004-x64
1Analysis
-
max time kernel
120s -
max time network
137s -
platform
windows7_x64 -
resource
win7-20250207-en -
resource tags
arch:x64arch:x86image:win7-20250207-enlocale:en-usos:windows7-x64system -
submitted
28/03/2025, 07:18
Behavioral task
behavioral1
Sample
R.E.P.O.v.0.1.2.co-op_02 (1).rar
Resource
win7-20250207-en
Behavioral task
behavioral2
Sample
R.E.P.O.v.0.1.2.co-op_02 (1).rar
Resource
win10v2004-20250314-en
Behavioral task
behavioral3
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/Assembly-CSharp-firstpass.dll
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/Assembly-CSharp-firstpass.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral5
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/Assembly-CSharp.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/Assembly-CSharp.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral7
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/Autodesk.Fbx.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/Autodesk.Fbx.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral9
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/Facepunch.Steamworks.Win64.dll
Resource
win7-20250207-en
Behavioral task
behavioral10
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/Facepunch.Steamworks.Win64.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral11
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/FbxBuildTestAssets.dll
Resource
win7-20241023-en
Behavioral task
behavioral12
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/FbxBuildTestAssets.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral13
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/Klattersynth.dll
Resource
win7-20241010-en
Behavioral task
behavioral14
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/Klattersynth.dll
Resource
win10v2004-20250313-en
Behavioral task
behavioral15
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/Mono.Security.dll
Resource
win7-20241010-en
Behavioral task
behavioral16
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/Mono.Security.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral17
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/Newtonsoft.Json.dll
Resource
win7-20241023-en
Behavioral task
behavioral18
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/Newtonsoft.Json.dll
Resource
win10v2004-20250313-en
Behavioral task
behavioral19
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/Photon3Unity3D.dll
Resource
win7-20241010-en
Behavioral task
behavioral20
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/Photon3Unity3D.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral21
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/PhotonChat.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/PhotonChat.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral23
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/PhotonRealtime.dll
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/PhotonRealtime.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral25
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/PhotonUnityNetworking.Utilities.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/PhotonUnityNetworking.Utilities.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral27
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/PhotonUnityNetworking.dll
Resource
win7-20241010-en
Behavioral task
behavioral28
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/PhotonUnityNetworking.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral29
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/PhotonVoice.API.dll
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/PhotonVoice.API.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral31
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/PhotonVoice.PUN.dll
Resource
win7-20241010-en
Behavioral task
behavioral32
Sample
R.E.P.O.v.0.1.2.co-op_02/REPO_Data/Managed/PhotonVoice.PUN.dll
Resource
win10v2004-20250314-en
General
-
Target
R.E.P.O.v.0.1.2.co-op_02 (1).rar
-
Size
358.0MB
-
MD5
c4f6bba19690b8eca8416aceab8eb6c4
-
SHA1
37cedee608cb68fff0d37c37924c3575ce292f7f
-
SHA256
67d1d7881e51d02af2ff5726bee7ea59a5b561cc9f9b91a4b1eaf5052e9c80b6
-
SHA512
81a4d7f0fb50d7c61159e99880b71cb6e0082f34382dc7c8f98607d2d3a8fe31e0efb63ba402790549da76ef7ffcc47d18a1e6527b9e32aab3704badfff07c01
-
SSDEEP
6291456:77N8CpCR0cxfYCyGXXvPp215QUvvLtXRnZbk6yULGbjWr2M/RZYiDewvto:7q0CR0CfY9GPPpOQsvL5/wULGb6lXYio
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1684 7zFM.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 1684 7zFM.exe Token: 35 1684 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1684 7zFM.exe