1edfaa0f15c8dd928f3925dddd72c1572f8025b75c34305e128b001e1daf9cb1

Login
Reports

Overview

overview

Static

static

BtMob 4.5....ob.exe

windows11-21h2-x64

BtMob 4.5....rk.dll

windows11-21h2-x64

BtMob 4.5....ox.dll

windows11-21h2-x64

BtMob 4.5....PU.dll

windows11-21h2-x64

BtMob 4.5....es.dll

windows11-21h2-x64

BtMob 4.5....re.dll

windows11-21h2-x64

BtMob 4.5....ms.dll

windows11-21h2-x64

BtMob 4.5....pf.dll

windows11-21h2-x64

BtMob 4.5....on.dll

windows11-21h2-x64

BtMob 4.5....IO.dll

windows11-21h2-x64

BtMob 4.5....ew.dll

windows11-21h2-x64

BtMob 4.5....pi.dll

windows11-21h2-x64

BtMob 4.5....pi.dll

windows11-21h2-x64

BtMob 4.5....pt.exe

windows11-21h2-x64

BtMob 4.5....t2.exe

windows11-21h2-x64

BtMob 4.5....db.exe

windows11-21h2-x64

BtMob 4.5....ni.dll

windows11-21h2-x64

BtMob 4.5....-1.dll

windows11-21h2-x64

BtMob 4.5....ne.dll

windows11-21h2-x64

BtMob 4.5....rs.dll

windows11-21h2-x64

BtMob 4.5....es.dll

windows11-21h2-x64

BtMob 4.5....ry.dll

windows11-21h2-x64

BtMob 4.5....rs.dll

windows11-21h2-x64

BtMob 4.5....fe.dll

windows11-21h2-x64

BtMob 4.5....US.msi

windows11-21h2-x64

BtMob 4.5....de.pdf

windows11-21h2-x64

BtMob 4.5....er.bat

windows11-21h2-x64

BtMob 4.5....gen.py

windows11-21h2-x64

BtMob 4.5....min.js

windows11-21h2-x64

BtMob 4.5....on.svg

windows11-21h2-x64

BtMob 4.5....nt.svg

windows11-21h2-x64

BtMob 4.5....ck.svg

windows11-21h2-x64

Analysis

max time kernel
898s
max time network
537s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
05/06/2026, 12:10

Sharing

Copy URL Twitter E-mail

Static task

static1

8 signatures

Behavioral task

behavioral1

Sample

BtMob 4.5.5/BTMOB v4.5.5/BTMob.exe

Resource

win11-20260513-en

windows11-21h2-x64

10 signatures

900 seconds

agilenet defense_evasion discovery trojan

Behavioral task

behavioral2

Sample

BtMob 4.5.5/BTMOB v4.5.5/DrakeUI.Framework.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral3

Sample

BtMob 4.5.5/BTMOB v4.5.5/FastColoredTextBox.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral4

Sample

BtMob 4.5.5/BTMOB v4.5.5/Magick.NET-Q8-AnyCPU.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral5

Sample

BtMob 4.5.5/BTMOB v4.5.5/Microsoft.Bcl.AsyncInterfaces.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral6

Sample

BtMob 4.5.5/BTMOB v4.5.5/Microsoft.Web.WebView2.Core.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral7

Sample

BtMob 4.5.5/BTMOB v4.5.5/Microsoft.Web.WebView2.WinForms.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral8

Sample

BtMob 4.5.5/BTMOB v4.5.5/Microsoft.Web.WebView2.Wpf.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral9

Sample

BtMob 4.5.5/BTMOB v4.5.5/Newtonsoft.Json.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral10

Sample

BtMob 4.5.5/BTMOB v4.5.5/ObjectListView.IO.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral11

Sample

BtMob 4.5.5/BTMOB v4.5.5/ObjectListView.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral12

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/AdbWinApi.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

discovery

Behavioral task

behavioral13

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/AdbWinUsbApi.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

discovery

Behavioral task

behavioral14

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/aapt.exe

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

900 seconds

discovery

Behavioral task

behavioral15

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/aapt2.exe

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

900 seconds

discovery

Behavioral task

behavioral16

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/adb.exe

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

900 seconds

discovery

Behavioral task

behavioral17

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/libaapt2_jni.dll

Resource

win11-20260513-en

windows11-21h2-x64

2 signatures

900 seconds

discovery

Behavioral task

behavioral18

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/libwinpthread-1.dll

Resource

win11-20260513-en

windows11-21h2-x64

2 signatures

900 seconds

discovery

Behavioral task

behavioral19

Sample

BtMob 4.5.5/BTMOB v4.5.5/SuperSocket.ClientEngine.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral20

Sample

BtMob 4.5.5/BTMOB v4.5.5/System.Buffers.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral21

Sample

BtMob 4.5.5/BTMOB v4.5.5/System.IO.Pipelines.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral22

Sample

BtMob 4.5.5/BTMOB v4.5.5/System.Memory.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral23

Sample

BtMob 4.5.5/BTMOB v4.5.5/System.Numerics.Vectors.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral24

Sample

BtMob 4.5.5/BTMOB v4.5.5/System.Runtime.CompilerServices.Unsafe.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral25

Sample

BtMob 4.5.5/Requirements/rewrite_amd64_en-US.msi

Resource

win11-20260513-en

windows11-21h2-x64

4 signatures

900 seconds

Behavioral task

behavioral26

Sample

BtMob 4.5.5/Server Installation Guide (OLD)/BTMOB Server Installation Guide.pdf

Resource

win11-20260513-en

windows11-21h2-x64

7 signatures

900 seconds

adware discovery spyware

Behavioral task

behavioral27

Sample

BtMob 4.5.5/Server Pre Configured/Database/importer.bat

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral28

Sample

BtMob 4.5.5/Server Pre Configured/pas gen.py

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

Behavioral task

behavioral29

Sample

BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/assets/dist/js/dd.min.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral30

Sample

BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/assets/fonts/flexslider-icon.svg

Resource

win11-20260513-en

windows11-21h2-x64

11 signatures

900 seconds

adware discovery spyware

Behavioral task

behavioral31

Sample

BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/assets/fonts/fontawesome-webfont.svg

Resource

win11-20260513-en

windows11-21h2-x64

11 signatures

900 seconds

adware discovery spyware

Behavioral task

behavioral32

Sample

BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/assets/fonts/slick.svg

Resource

win11-20260513-en

windows11-21h2-x64

11 signatures

900 seconds

adware discovery spyware

Report Analysis Logs

General

Target
BtMob 4.5.5/BTMOB v4.5.5/Magick.NET-Q8-AnyCPU.dll
Size 12.2MB
Sample260605-pcb9zsf14m
SHA256 1edfaa0f15c8dd928f3925dddd72c1572f8025b75c34305e128b001e1daf9cb1
MD5 99b2d5cab05810fc0db0719bc575cd26
SHA1 3dbefe3fafc1be5a36f2af14a57b853104d41598
SHA512 4fabc8aba88dc604af008100fc7b40bd02e76737c891ad7e77f8e207abc96f1a32f46fcf1546e7f928eef4a75bf5614e0485748e24e9abcbec7be322257eb73f
SSDEEP 393216:Q67N0uoMrQH5lL+R+1Hle7C23axYHFKVKUcx1+:Q6S4MHvp1Hle7C2eaFIc+
TLSH
T1C7D62252ABC4DC0AC93F463925505538CDB1EC6BA111AB43B9DC7DBA3F7B7885E03262
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\BtMob 4.5.5\BTMOB v4.5.5\Magick.NET-Q8-AnyCPU.dll",#1
1⤵
PID:3360

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads