Overview
overview
5Static
static
3Four_Eleme...hon.so
ubuntu-18.04-amd64
1Four_Eleme...python
ubuntu-18.04-amd64
Four_Eleme...ythonw
ubuntu-18.04-amd64
Four_Eleme.../zsync
ubuntu-18.04-amd64
Four_Eleme...ncmake
ubuntu-18.04-amd64
Four_Eleme...rainer
ubuntu-18.04-amd64
4Four_Eleme...hon.so
ubuntu-18.04-amd64
1Four_Eleme...python
ubuntu-18.04-amd64
3Four_Eleme...ythonw
ubuntu-18.04-amd64
3Four_Eleme.../zsync
ubuntu-18.04-amd64
1Four_Eleme...ncmake
ubuntu-18.04-amd64
1Four_Eleme...47.dll
windows10-2004-x64
3Four_Eleme...GL.dll
windows10-2004-x64
3Four_Eleme...GL.dll
windows11-ltsc_2024-x64
3Four_Eleme...v2.dll
windows10-2004-x64
3Four_Eleme...v2.dll
windows11-ltsc_2024-x64
3Four_Eleme...-1.dll
windows10-2004-x64
3Four_Eleme...-1.dll
windows11-ltsc_2024-x64
3Four_Eleme....7.dll
windows10-2004-x64
3Four_Eleme....7.dll
windows11-ltsc_2024-x64
3Four_Eleme...on.dll
windows10-2004-x64
3Four_Eleme...on.dll
windows11-ltsc_2024-x64
3Four_Eleme...-1.dll
windows10-2004-x64
3Four_Eleme...-1.dll
windows11-ltsc_2024-x64
3Four_Eleme...rs.dll
windows10-2004-x64
3Four_Eleme...rs.dll
windows11-ltsc_2024-x64
3Four_Eleme...on.exe
windows10-2004-x64
3Four_Eleme...on.exe
windows11-ltsc_2024-x64
3Four_Eleme...nw.exe
windows10-2004-x64
3Four_Eleme...nw.exe
windows11-ltsc_2024-x64
3Four_Eleme...ay.vbs
windows10-2004-x64
5Four_Eleme...ay.vbs
windows11-ltsc_2024-x64
5Analysis
- max time kernel
152s - max time network
211s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/08/2026, 05:39
Static task
static1
Behavioral task
behavioral1
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-linux-i686/librenpython.so
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-linux-i686/python
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral3
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-linux-i686/pythonw
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral4
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-linux-i686/zsync
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral5
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-linux-i686/zsyncmake
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral6
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-linux-x86_64/Four Elements Trainer
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral7
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-linux-x86_64/librenpython.so
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral8
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-linux-x86_64/python
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral9
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-linux-x86_64/pythonw
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral10
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-linux-x86_64/zsync
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral11
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-linux-x86_64/zsyncmake
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral12
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-windows-i686/d3dcompiler_47.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-windows-i686/libEGL.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-windows-i686/libEGL.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-windows-i686/libGLESv2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-windows-i686/libGLESv2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-windows-i686/libgcc_s_dw2-1.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-windows-i686/libgcc_s_dw2-1.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-windows-i686/libpython2.7.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-windows-i686/libpython2.7.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-windows-i686/librenpython.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-windows-i686/librenpython.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral23
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-windows-i686/libwinpthread-1.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-windows-i686/libwinpthread-1.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-windows-i686/nvdrs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-windows-i686/nvdrs.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-windows-i686/python.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-windows-i686/python.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-windows-i686/pythonw.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-windows-i686/pythonw.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-windows-i686/say.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-windows-i686/say.vbs
Resource
win11ltsc2024-20260709-en
General
- Target Four_Elements_Trainer_v.1.1.8b-pc/lib/py2-windows-i686/python.exe
- Size 101KB
- Sample260810-gcmfysbr2t
- SHA256 9159f67f551f9c15f392cde77d6cf0183abf203f54437fd3bf95869f600ef0eb
- MD5 37ef96d746d04d78e6f9cd62cf24382f
- SHA1 021ae8797f3c5d3e9927097dd1c130e7c38f8cf2
- SHA512 5348c596c2406580cdd1d835f6cfd112f13b500f77a794ce5ffe995dd8de9e8883a63d637266edaf28044b3e66a28c315f9ce27a898ff280941e88284afe6501
- SSDEEP 3072:x3Yj+8JlFCumUbyJlKP8HRvkduTK5Nrh2o9Dj0fmoQZ:tQ+IFCumUGekHRvEuO3go9kfnQZ
- TLSH T1EAA3F106FF07153EF22145759EEB5FBACB72FBA3A4E14818D610A2345F677809E32225
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language python.exe