af97a584e89accec6d86656092b551dc668f3042ded63e09dd032a6f3e41b5d0

Login
Reports

Overview

overview

Static

static

DDLCExpans...32.exe

windows11-21h2-x64

DDLCExpans...onPack

windows11-21h2-x64

DDLCExpans...hon.so

windows11-21h2-x64

DDLCExpans...python

windows11-21h2-x64

DDLCExpans...ythonw

windows11-21h2-x64

DDLCExpans.../zsync

windows11-21h2-x64

DDLCExpans...ncmake

windows11-21h2-x64

DDLCExpans...onPack

windows11-21h2-x64

DDLCExpans...hon.so

windows11-21h2-x64

DDLCExpans...python

windows11-21h2-x64

DDLCExpans...ythonw

windows11-21h2-x64

DDLCExpans.../zsync

windows11-21h2-x64

DDLCExpans...ncmake

windows11-21h2-x64

DDLCExpans...er.pyo

windows11-21h2-x64

DDLCExpans...er.pyo

windows11-21h2-x64

DDLCExpans...kie.js

windows11-21h2-x64

DDLCExpans...ue.pyo

windows11-21h2-x64

DDLCExpans...er.pyo

windows11-21h2-x64

DDLCExpans...er.pyo

windows11-21h2-x64

DDLCExpans...IO.pyo

windows11-21h2-x64

DDLCExpans...ct.pyo

windows11-21h2-x64

DDLCExpans...st.pyo

windows11-21h2-x64

DDLCExpans...ng.pyo

windows11-21h2-x64

DDLCExpans...ar.pyo

windows11-21h2-x64

DDLCExpans...ar.pyo

windows11-21h2-x64

DDLCExpans...__.pyo

windows11-21h2-x64

DDLCExpans...ll.pyo

windows11-21h2-x64

DDLCExpans...me.pyo

windows11-21h2-x64

DDLCExpans...al.pyo

windows11-21h2-x64

Resubmissions

30/06/2026, 10:50

30/06/2026, 10:43

30/06/2026, 10:33

30/06/2026, 10:24

Analysis

max time kernel
899s
max time network
490s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
30/06/2026, 10:50

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/DDLCExpansionPack-32.exe

Resource

win11-20260513-en

windows11-21h2-x64

2 signatures

900 seconds

discovery

Behavioral task

behavioral2

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/linux-i686/DDLCExpansionPack

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral3

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/linux-i686/librenpython.so

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

Behavioral task

behavioral4

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/linux-i686/python

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral5

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/linux-i686/pythonw

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral6

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/linux-i686/zsync

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral7

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/linux-i686/zsyncmake

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral8

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/linux-x86_64/DDLCExpansionPack

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral9

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/linux-x86_64/librenpython.so

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

Behavioral task

behavioral10

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/linux-x86_64/python

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral11

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/linux-x86_64/pythonw

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral12

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/linux-x86_64/zsync

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral13

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/linux-x86_64/zsyncmake

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral14

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/python2.7/BaseHTTPServer.pyo

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

Behavioral task

behavioral15

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/python2.7/CGIHTTPServer.pyo

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

Behavioral task

behavioral16

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/python2.7/Cookie.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

900 seconds

execution

Behavioral task

behavioral17

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/python2.7/Queue.pyo

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

Behavioral task

behavioral18

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/python2.7/SimpleHTTPServer.pyo

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

Behavioral task

behavioral19

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/python2.7/SocketServer.pyo

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

Behavioral task

behavioral20

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/python2.7/StringIO.pyo

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

Behavioral task

behavioral21

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/python2.7/UserDict.pyo

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

Behavioral task

behavioral22

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/python2.7/UserList.pyo

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

Behavioral task

behavioral23

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/python2.7/UserString.pyo

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

Behavioral task

behavioral24

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/python2.7/_LWPCookieJar.pyo

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

Behavioral task

behavioral25

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/python2.7/_MozillaCookieJar.pyo

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

Behavioral task

behavioral26

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/python2.7/__future__.pyo

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

Behavioral task

behavioral27

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/python2.7/_abcoll.pyo

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

Behavioral task

behavioral28

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/python2.7/_strptime.pyo

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

Behavioral task

behavioral29

Sample

DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/python2.7/_threading_local.pyo

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

900 seconds

Report Analysis Logs

General

Target
DDLCExpansionPack-1.3-pc/DDLCExpansionPack-1.3-pc/lib/python2.7/Cookie.js
Size 23KB
Sample260630-mxff2ads2w
SHA256 af97a584e89accec6d86656092b551dc668f3042ded63e09dd032a6f3e41b5d0
MD5 8a34f899ba2930c8374088129617a0f0
SHA1 2efec4f18cdb5b986d841c6f2c32b602edb8f3a0
SHA512 332a85d5ee672b307b8c86a796783068f3b041e8b81ef71041f4956d9d5d197330131215961ea37ee3b03ee96d8c5fd952f5e64bb3fa00bd94d6db3902573039
SSDEEP 384:y9plO9pyxiuPnsmpD5aciBdfGPREgxX5hGiXFh:QpEqlkmpDRQfGPZX58iv
TLSH
T1CBB251D0F790451ACD7751B990BE823EEA71F4730140766161ACE6390ED8A9DCB3EACB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\DDLCExpansionPack-1.3-pc\DDLCExpansionPack-1.3-pc\lib\python2.7\Cookie.js
1⤵
PID:2640

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads