70e72477f7fe0018e043ce8fe2228a289459058ee41caecd6f05855898bc5b80

Login
Reports

Overview

overview

Static

static

BtMob 4.5....ob.exe

windows11-21h2-x64

BtMob 4.5....rk.dll

windows11-21h2-x64

BtMob 4.5....ox.dll

windows11-21h2-x64

BtMob 4.5....PU.dll

windows11-21h2-x64

BtMob 4.5....es.dll

windows11-21h2-x64

BtMob 4.5....re.dll

windows11-21h2-x64

BtMob 4.5....ms.dll

windows11-21h2-x64

BtMob 4.5....pf.dll

windows11-21h2-x64

BtMob 4.5....on.dll

windows11-21h2-x64

BtMob 4.5....IO.dll

windows11-21h2-x64

BtMob 4.5....ew.dll

windows11-21h2-x64

BtMob 4.5....pi.dll

windows11-21h2-x64

BtMob 4.5....pi.dll

windows11-21h2-x64

BtMob 4.5....pt.exe

windows11-21h2-x64

BtMob 4.5....t2.exe

windows11-21h2-x64

BtMob 4.5....db.exe

windows11-21h2-x64

BtMob 4.5....ni.dll

windows11-21h2-x64

BtMob 4.5....-1.dll

windows11-21h2-x64

BtMob 4.5....ne.dll

windows11-21h2-x64

BtMob 4.5....rs.dll

windows11-21h2-x64

BtMob 4.5....es.dll

windows11-21h2-x64

BtMob 4.5....ry.dll

windows11-21h2-x64

BtMob 4.5....rs.dll

windows11-21h2-x64

BtMob 4.5....fe.dll

windows11-21h2-x64

BtMob 4.5....US.msi

windows11-21h2-x64

BtMob 4.5....de.pdf

windows11-21h2-x64

BtMob 4.5....er.bat

windows11-21h2-x64

BtMob 4.5....gen.py

windows11-21h2-x64

BtMob 4.5....min.js

windows11-21h2-x64

BtMob 4.5....on.svg

windows11-21h2-x64

BtMob 4.5....nt.svg

windows11-21h2-x64

BtMob 4.5....ck.svg

windows11-21h2-x64

Analysis

max time kernel
898s
max time network
391s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
05/06/2026, 12:10

Sharing

Copy URL Twitter E-mail

Static task

static1

8 signatures

Behavioral task

behavioral1

Sample

BtMob 4.5.5/BTMOB v4.5.5/BTMob.exe

Resource

win11-20260513-en

windows11-21h2-x64

10 signatures

900 seconds

agilenet defense_evasion discovery trojan

Behavioral task

behavioral2

Sample

BtMob 4.5.5/BTMOB v4.5.5/DrakeUI.Framework.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral3

Sample

BtMob 4.5.5/BTMOB v4.5.5/FastColoredTextBox.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral4

Sample

BtMob 4.5.5/BTMOB v4.5.5/Magick.NET-Q8-AnyCPU.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral5

Sample

BtMob 4.5.5/BTMOB v4.5.5/Microsoft.Bcl.AsyncInterfaces.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral6

Sample

BtMob 4.5.5/BTMOB v4.5.5/Microsoft.Web.WebView2.Core.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral7

Sample

BtMob 4.5.5/BTMOB v4.5.5/Microsoft.Web.WebView2.WinForms.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral8

Sample

BtMob 4.5.5/BTMOB v4.5.5/Microsoft.Web.WebView2.Wpf.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral9

Sample

BtMob 4.5.5/BTMOB v4.5.5/Newtonsoft.Json.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral10

Sample

BtMob 4.5.5/BTMOB v4.5.5/ObjectListView.IO.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral11

Sample

BtMob 4.5.5/BTMOB v4.5.5/ObjectListView.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral12

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/AdbWinApi.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

discovery

Behavioral task

behavioral13

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/AdbWinUsbApi.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

discovery

Behavioral task

behavioral14

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/aapt.exe

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

900 seconds

discovery

Behavioral task

behavioral15

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/aapt2.exe

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

900 seconds

discovery

Behavioral task

behavioral16

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/adb.exe

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

900 seconds

discovery

Behavioral task

behavioral17

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/libaapt2_jni.dll

Resource

win11-20260513-en

windows11-21h2-x64

2 signatures

900 seconds

discovery

Behavioral task

behavioral18

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/libwinpthread-1.dll

Resource

win11-20260513-en

windows11-21h2-x64

2 signatures

900 seconds

discovery

Behavioral task

behavioral19

Sample

BtMob 4.5.5/BTMOB v4.5.5/SuperSocket.ClientEngine.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral20

Sample

BtMob 4.5.5/BTMOB v4.5.5/System.Buffers.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral21

Sample

BtMob 4.5.5/BTMOB v4.5.5/System.IO.Pipelines.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral22

Sample

BtMob 4.5.5/BTMOB v4.5.5/System.Memory.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral23

Sample

BtMob 4.5.5/BTMOB v4.5.5/System.Numerics.Vectors.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral24

Sample

BtMob 4.5.5/BTMOB v4.5.5/System.Runtime.CompilerServices.Unsafe.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral25

Sample

BtMob 4.5.5/Requirements/rewrite_amd64_en-US.msi

Resource

win11-20260513-en

windows11-21h2-x64

4 signatures

900 seconds

Behavioral task

behavioral26

Sample

BtMob 4.5.5/Server Installation Guide (OLD)/BTMOB Server Installation Guide.pdf

Resource

win11-20260513-en

windows11-21h2-x64

7 signatures

900 seconds

adware discovery spyware

Behavioral task

behavioral27

Sample

BtMob 4.5.5/Server Pre Configured/Database/importer.bat

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral28

Sample

BtMob 4.5.5/Server Pre Configured/pas gen.py

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

Behavioral task

behavioral29

Sample

BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/assets/dist/js/dd.min.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral30

Sample

BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/assets/fonts/flexslider-icon.svg

Resource

win11-20260513-en

windows11-21h2-x64

11 signatures

900 seconds

adware discovery spyware

Behavioral task

behavioral31

Sample

BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/assets/fonts/fontawesome-webfont.svg

Resource

win11-20260513-en

windows11-21h2-x64

11 signatures

900 seconds

adware discovery spyware

Behavioral task

behavioral32

Sample

BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/assets/fonts/slick.svg

Resource

win11-20260513-en

windows11-21h2-x64

11 signatures

900 seconds

adware discovery spyware

Report Analysis Logs

General

Target
BtMob 4.5.5/BTMOB v4.5.5/DrakeUI.Framework.dll
Size 1.6MB
Sample260605-pcb9zsf14m
SHA256 70e72477f7fe0018e043ce8fe2228a289459058ee41caecd6f05855898bc5b80
MD5 0562b4c97f643306df491a938ae636da
SHA1 0807c37b711374ed4814a9518c9e264517de89a0
SHA512 c969cd274b6bf65a34f1d129b6531616a3485a1f153088609ad2369d380fdec37c3e88a423495912715a26e353dd5498f7f9e73c895e9f3f18fc7d1e65d2ecaf
SSDEEP 24576:nYyUyUxws47SDJ+wfa3ZsacYwzhmT5LOMobxqFFnM9Pv1w+Fus:nYyUyUueD001YwzhmVSMoNqFF
TLSH
T1D085AE4527A88E1EE57E87FED4321420D7B49601B1DEE74FEEC1B4E92CA77888C09587
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\BtMob 4.5.5\BTMOB v4.5.5\DrakeUI.Framework.dll",#1
1⤵
PID:3180

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads