ac926c92ccfc3789a5ae571cc4415eb1897d500a79604d8495241c19acdf01b9

Login
Reports

Overview

overview

Static

static

BtMob 4.5....ob.exe

windows11-21h2-x64

BtMob 4.5....rk.dll

windows11-21h2-x64

BtMob 4.5....ox.dll

windows11-21h2-x64

BtMob 4.5....PU.dll

windows11-21h2-x64

BtMob 4.5....es.dll

windows11-21h2-x64

BtMob 4.5....re.dll

windows11-21h2-x64

BtMob 4.5....ms.dll

windows11-21h2-x64

BtMob 4.5....pf.dll

windows11-21h2-x64

BtMob 4.5....on.dll

windows11-21h2-x64

BtMob 4.5....IO.dll

windows11-21h2-x64

BtMob 4.5....ew.dll

windows11-21h2-x64

BtMob 4.5....pi.dll

windows11-21h2-x64

BtMob 4.5....pi.dll

windows11-21h2-x64

BtMob 4.5....pt.exe

windows11-21h2-x64

BtMob 4.5....t2.exe

windows11-21h2-x64

BtMob 4.5....db.exe

windows11-21h2-x64

BtMob 4.5....ni.dll

windows11-21h2-x64

BtMob 4.5....-1.dll

windows11-21h2-x64

BtMob 4.5....ne.dll

windows11-21h2-x64

BtMob 4.5....rs.dll

windows11-21h2-x64

BtMob 4.5....es.dll

windows11-21h2-x64

BtMob 4.5....ry.dll

windows11-21h2-x64

BtMob 4.5....rs.dll

windows11-21h2-x64

BtMob 4.5....fe.dll

windows11-21h2-x64

BtMob 4.5....US.msi

windows11-21h2-x64

BtMob 4.5....de.pdf

windows11-21h2-x64

BtMob 4.5....er.bat

windows11-21h2-x64

BtMob 4.5....gen.py

windows11-21h2-x64

BtMob 4.5....min.js

windows11-21h2-x64

BtMob 4.5....on.svg

windows11-21h2-x64

BtMob 4.5....nt.svg

windows11-21h2-x64

BtMob 4.5....ck.svg

windows11-21h2-x64

Analysis

max time kernel
898s
max time network
423s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
05/06/2026, 12:10

Sharing

Copy URL Twitter E-mail

Static task

static1

8 signatures

Behavioral task

behavioral1

Sample

BtMob 4.5.5/BTMOB v4.5.5/BTMob.exe

Resource

win11-20260513-en

windows11-21h2-x64

10 signatures

900 seconds

agilenet defense_evasion discovery trojan

Behavioral task

behavioral2

Sample

BtMob 4.5.5/BTMOB v4.5.5/DrakeUI.Framework.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral3

Sample

BtMob 4.5.5/BTMOB v4.5.5/FastColoredTextBox.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral4

Sample

BtMob 4.5.5/BTMOB v4.5.5/Magick.NET-Q8-AnyCPU.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral5

Sample

BtMob 4.5.5/BTMOB v4.5.5/Microsoft.Bcl.AsyncInterfaces.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral6

Sample

BtMob 4.5.5/BTMOB v4.5.5/Microsoft.Web.WebView2.Core.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral7

Sample

BtMob 4.5.5/BTMOB v4.5.5/Microsoft.Web.WebView2.WinForms.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral8

Sample

BtMob 4.5.5/BTMOB v4.5.5/Microsoft.Web.WebView2.Wpf.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral9

Sample

BtMob 4.5.5/BTMOB v4.5.5/Newtonsoft.Json.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral10

Sample

BtMob 4.5.5/BTMOB v4.5.5/ObjectListView.IO.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral11

Sample

BtMob 4.5.5/BTMOB v4.5.5/ObjectListView.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral12

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/AdbWinApi.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

discovery

Behavioral task

behavioral13

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/AdbWinUsbApi.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

discovery

Behavioral task

behavioral14

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/aapt.exe

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

900 seconds

discovery

Behavioral task

behavioral15

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/aapt2.exe

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

900 seconds

discovery

Behavioral task

behavioral16

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/adb.exe

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

900 seconds

discovery

Behavioral task

behavioral17

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/libaapt2_jni.dll

Resource

win11-20260513-en

windows11-21h2-x64

2 signatures

900 seconds

discovery

Behavioral task

behavioral18

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/libwinpthread-1.dll

Resource

win11-20260513-en

windows11-21h2-x64

2 signatures

900 seconds

discovery

Behavioral task

behavioral19

Sample

BtMob 4.5.5/BTMOB v4.5.5/SuperSocket.ClientEngine.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral20

Sample

BtMob 4.5.5/BTMOB v4.5.5/System.Buffers.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral21

Sample

BtMob 4.5.5/BTMOB v4.5.5/System.IO.Pipelines.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral22

Sample

BtMob 4.5.5/BTMOB v4.5.5/System.Memory.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral23

Sample

BtMob 4.5.5/BTMOB v4.5.5/System.Numerics.Vectors.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral24

Sample

BtMob 4.5.5/BTMOB v4.5.5/System.Runtime.CompilerServices.Unsafe.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral25

Sample

BtMob 4.5.5/Requirements/rewrite_amd64_en-US.msi

Resource

win11-20260513-en

windows11-21h2-x64

4 signatures

900 seconds

Behavioral task

behavioral26

Sample

BtMob 4.5.5/Server Installation Guide (OLD)/BTMOB Server Installation Guide.pdf

Resource

win11-20260513-en

windows11-21h2-x64

7 signatures

900 seconds

adware discovery spyware

Behavioral task

behavioral27

Sample

BtMob 4.5.5/Server Pre Configured/Database/importer.bat

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral28

Sample

BtMob 4.5.5/Server Pre Configured/pas gen.py

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

Behavioral task

behavioral29

Sample

BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/assets/dist/js/dd.min.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral30

Sample

BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/assets/fonts/flexslider-icon.svg

Resource

win11-20260513-en

windows11-21h2-x64

11 signatures

900 seconds

adware discovery spyware

Behavioral task

behavioral31

Sample

BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/assets/fonts/fontawesome-webfont.svg

Resource

win11-20260513-en

windows11-21h2-x64

11 signatures

900 seconds

adware discovery spyware

Behavioral task

behavioral32

Sample

BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/assets/fonts/slick.svg

Resource

win11-20260513-en

windows11-21h2-x64

11 signatures

900 seconds

adware discovery spyware

Report Analysis Logs

General

Target
BtMob 4.5.5/BTMOB v4.5.5/FastColoredTextBox.dll
Size 323KB
Sample260605-pcb9zsf14m
SHA256 ac926c92ccfc3789a5ae571cc4415eb1897d500a79604d8495241c19acdf01b9
MD5 8610f4d3cdc6cc50022feddced9fdaeb
SHA1 4b60b87fd696b02d7fce38325c7adfc9e806f650
SHA512 693d1af1f89470eab659b4747fe344836affa0af8485b0c0635e2519815e5a498f4618ea08db9dcf421aac1069a04616046207ee05b9ed66c0a1c4a8f0bddd09
SSDEEP 6144:0R0J4lx4/7BA4xvNdcwCOg04j0y5mwZkdmsqmLDi5eNH+Dl1SIP0:0R0J48lAovNd7CO34D4b4eNO
TLSH
T16564391012F84659F27F47BDD4B9C01CC3FAB566A99FEB0E89A560DA2EF37409905233
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\BtMob 4.5.5\BTMOB v4.5.5\FastColoredTextBox.dll",#1
1⤵
PID:5184

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads