f27dcef62182f02049c47a2560ac800a3eb6b9fae2ce95fc074c596251b960db

Login
Reports

Overview

overview

Static

static

BtMob 4.5....ob.exe

windows11-21h2-x64

BtMob 4.5....rk.dll

windows11-21h2-x64

BtMob 4.5....ox.dll

windows11-21h2-x64

BtMob 4.5....PU.dll

windows11-21h2-x64

BtMob 4.5....es.dll

windows11-21h2-x64

BtMob 4.5....re.dll

windows11-21h2-x64

BtMob 4.5....ms.dll

windows11-21h2-x64

BtMob 4.5....pf.dll

windows11-21h2-x64

BtMob 4.5....on.dll

windows11-21h2-x64

BtMob 4.5....IO.dll

windows11-21h2-x64

BtMob 4.5....ew.dll

windows11-21h2-x64

BtMob 4.5....pi.dll

windows11-21h2-x64

BtMob 4.5....pi.dll

windows11-21h2-x64

BtMob 4.5....pt.exe

windows11-21h2-x64

BtMob 4.5....t2.exe

windows11-21h2-x64

BtMob 4.5....db.exe

windows11-21h2-x64

BtMob 4.5....ni.dll

windows11-21h2-x64

BtMob 4.5....-1.dll

windows11-21h2-x64

BtMob 4.5....ne.dll

windows11-21h2-x64

BtMob 4.5....rs.dll

windows11-21h2-x64

BtMob 4.5....es.dll

windows11-21h2-x64

BtMob 4.5....ry.dll

windows11-21h2-x64

BtMob 4.5....rs.dll

windows11-21h2-x64

BtMob 4.5....fe.dll

windows11-21h2-x64

BtMob 4.5....US.msi

windows11-21h2-x64

BtMob 4.5....de.pdf

windows11-21h2-x64

BtMob 4.5....er.bat

windows11-21h2-x64

BtMob 4.5....gen.py

windows11-21h2-x64

BtMob 4.5....min.js

windows11-21h2-x64

BtMob 4.5....on.svg

windows11-21h2-x64

BtMob 4.5....nt.svg

windows11-21h2-x64

BtMob 4.5....ck.svg

windows11-21h2-x64

Analysis

max time kernel
898s
max time network
394s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
05/06/2026, 12:10

Sharing

Copy URL Twitter E-mail

Static task

static1

8 signatures

Behavioral task

behavioral1

Sample

BtMob 4.5.5/BTMOB v4.5.5/BTMob.exe

Resource

win11-20260513-en

windows11-21h2-x64

10 signatures

900 seconds

agilenet defense_evasion discovery trojan

Behavioral task

behavioral2

Sample

BtMob 4.5.5/BTMOB v4.5.5/DrakeUI.Framework.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral3

Sample

BtMob 4.5.5/BTMOB v4.5.5/FastColoredTextBox.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral4

Sample

BtMob 4.5.5/BTMOB v4.5.5/Magick.NET-Q8-AnyCPU.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral5

Sample

BtMob 4.5.5/BTMOB v4.5.5/Microsoft.Bcl.AsyncInterfaces.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral6

Sample

BtMob 4.5.5/BTMOB v4.5.5/Microsoft.Web.WebView2.Core.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral7

Sample

BtMob 4.5.5/BTMOB v4.5.5/Microsoft.Web.WebView2.WinForms.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral8

Sample

BtMob 4.5.5/BTMOB v4.5.5/Microsoft.Web.WebView2.Wpf.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral9

Sample

BtMob 4.5.5/BTMOB v4.5.5/Newtonsoft.Json.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral10

Sample

BtMob 4.5.5/BTMOB v4.5.5/ObjectListView.IO.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral11

Sample

BtMob 4.5.5/BTMOB v4.5.5/ObjectListView.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral12

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/AdbWinApi.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

discovery

Behavioral task

behavioral13

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/AdbWinUsbApi.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

discovery

Behavioral task

behavioral14

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/aapt.exe

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

900 seconds

discovery

Behavioral task

behavioral15

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/aapt2.exe

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

900 seconds

discovery

Behavioral task

behavioral16

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/adb.exe

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

900 seconds

discovery

Behavioral task

behavioral17

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/libaapt2_jni.dll

Resource

win11-20260513-en

windows11-21h2-x64

2 signatures

900 seconds

discovery

Behavioral task

behavioral18

Sample

BtMob 4.5.5/BTMOB v4.5.5/Resources/tools/libwinpthread-1.dll

Resource

win11-20260513-en

windows11-21h2-x64

2 signatures

900 seconds

discovery

Behavioral task

behavioral19

Sample

BtMob 4.5.5/BTMOB v4.5.5/SuperSocket.ClientEngine.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral20

Sample

BtMob 4.5.5/BTMOB v4.5.5/System.Buffers.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral21

Sample

BtMob 4.5.5/BTMOB v4.5.5/System.IO.Pipelines.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral22

Sample

BtMob 4.5.5/BTMOB v4.5.5/System.Memory.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral23

Sample

BtMob 4.5.5/BTMOB v4.5.5/System.Numerics.Vectors.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral24

Sample

BtMob 4.5.5/BTMOB v4.5.5/System.Runtime.CompilerServices.Unsafe.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral25

Sample

BtMob 4.5.5/Requirements/rewrite_amd64_en-US.msi

Resource

win11-20260513-en

windows11-21h2-x64

4 signatures

900 seconds

Behavioral task

behavioral26

Sample

BtMob 4.5.5/Server Installation Guide (OLD)/BTMOB Server Installation Guide.pdf

Resource

win11-20260513-en

windows11-21h2-x64

7 signatures

900 seconds

adware discovery spyware

Behavioral task

behavioral27

Sample

BtMob 4.5.5/Server Pre Configured/Database/importer.bat

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral28

Sample

BtMob 4.5.5/Server Pre Configured/pas gen.py

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

Behavioral task

behavioral29

Sample

BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/assets/dist/js/dd.min.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral30

Sample

BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/assets/fonts/flexslider-icon.svg

Resource

win11-20260513-en

windows11-21h2-x64

11 signatures

900 seconds

adware discovery spyware

Behavioral task

behavioral31

Sample

BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/assets/fonts/fontawesome-webfont.svg

Resource

win11-20260513-en

windows11-21h2-x64

11 signatures

900 seconds

adware discovery spyware

Behavioral task

behavioral32

Sample

BtMob 4.5.5/Server Pre Configured/yaarsa/yaarsa/assets/fonts/slick.svg

Resource

win11-20260513-en

windows11-21h2-x64

11 signatures

900 seconds

adware discovery spyware

Report Analysis Logs

General

Target
BtMob 4.5.5/BTMOB v4.5.5/Microsoft.Web.WebView2.WinForms.dll
Size 38KB
Sample260605-pcb9zsf14m
SHA256 f27dcef62182f02049c47a2560ac800a3eb6b9fae2ce95fc074c596251b960db
MD5 121f8032fc91330170c8f3a5e6e14b86
SHA1 15444bfabb105e792bc512d01cd59fae074301b5
SHA512 3b5e4c4df6e842461c5f918f5dc2f3fdf87c83476d818fafecd2be2fc14b22866e4dfb78d4cabcf8aafc84227117cf1bd3a095e30558f4d9146bbb88106cfd48
SSDEEP 768:7lN2oOMtBtKljdCyXK8c2QYZDgcEST3p4Jjrjh2jeFSUyauTv1JKia5/Zi/ZGQSe:32oOrsIrc2QYZDgcEST3p4JjrjaeFSUU
TLSH
T163034B0082EC8517EAEB2FB8B97481611BBABEC37E71C3591D89B1DA0C737A0551077B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\BtMob 4.5.5\BTMOB v4.5.5\Microsoft.Web.WebView2.WinForms.dll",#1
1⤵
PID:2216

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads