Overview
overview
8Static
static
6LA PLATANE...OT.exe
windows10-2004-x64
7LA PLATANE...OT.exe
windows11-ltsc_2024-x64
7LA PLATANE...re.apk
android-11-x64
LAPLATANER...OT.exe
windows10-2004-x64
7LAPLATANER...OT.exe
windows11-ltsc_2024-x64
7LAPLATANER...es.exe
windows10-2004-x64
7LAPLATANER...es.exe
windows11-ltsc_2024-x64
7LAPLATANER...es.exe
windows10-2004-x64
7LAPLATANER...es.exe
windows11-ltsc_2024-x64
7LAPLATANER...or.apk
android-9-x86
LAPLATANER...or.apk
android-10-x64
LAPLATANER...or.apk
android-11-x64
com.dish.w...ne.apk
android-9-x86
8com.dish.w...ne.apk
android-10-x64
8com.dish.w...ne.apk
android-11-x64
8config.ar.jar
windows10-2004-x64
1config.ar.jar
windows11-ltsc_2024-x64
1config.arm64_v8a.jar
windows10-2004-x64
1config.arm64_v8a.jar
windows11-ltsc_2024-x64
1config.de.jar
windows10-2004-x64
1config.de.jar
windows11-ltsc_2024-x64
1config.en.jar
windows10-2004-x64
1config.en.jar
windows11-ltsc_2024-x64
1config.es.jar
windows10-2004-x64
1config.es.jar
windows11-ltsc_2024-x64
1config.fr.jar
windows10-2004-x64
1config.fr.jar
windows11-ltsc_2024-x64
1config.hi.jar
windows10-2004-x64
1config.hi.jar
windows11-ltsc_2024-x64
1config.in.jar
windows10-2004-x64
1config.in.jar
windows11-ltsc_2024-x64
1config.it.jar
windows10-2004-x64
1Analysis
- max time kernel
150s - max time network
137s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/09/2026, 19:42
Behavioral task
behavioral1
Sample
LA PLATANERA RD/LA PLANATERA BOT/LAPLATANERABOT.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
LA PLATANERA RD/LA PLANATERA BOT/LAPLATANERABOT.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
LA PLATANERA RD/SocksDroid_1.0.4_APKPure.apk
Resource
android-x64-arm64-20260325-en
android-11-x64
Behavioral task
behavioral4
Sample
LAPLATANERAV4/LAPLATANERABOT.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
LAPLATANERAV4/LAPLATANERABOT.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral6
Sample
LAPLATANERAV4/abriremuladores.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
LAPLATANERAV4/abriremuladores.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral8
Sample
LAPLATANERAV4/acomodaremuladores.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
LAPLATANERAV4/acomodaremuladores.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral10
Sample
LAPLATANERAV4/apks/app-uiautomator.apk
Resource
android-x86-arm-20260721-en
android-9-x86
Behavioral task
behavioral11
Sample
LAPLATANERAV4/apks/app-uiautomator.apk
Resource
android-x64-20260721-en
android-10-x64
Behavioral task
behavioral12
Sample
LAPLATANERAV4/apks/app-uiautomator.apk
Resource
android-x64-arm64-20260325-en
android-11-x64
Behavioral task
behavioral13
Sample
com.dish.wireless.boostone.apk
Resource
android-x86-arm-20260721-en
android-9-x86
Behavioral task
behavioral14
Sample
com.dish.wireless.boostone.apk
Resource
android-x64-20260325-en
android-10-x64
Behavioral task
behavioral15
Sample
com.dish.wireless.boostone.apk
Resource
android-x64-arm64-20260721-en
android-11-x64
Behavioral task
behavioral16
Sample
config.ar.jar
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
config.ar.jar
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral18
Sample
config.arm64_v8a.jar
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
config.arm64_v8a.jar
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral20
Sample
config.de.jar
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
config.de.jar
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral22
Sample
config.en.jar
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
config.en.jar
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral24
Sample
config.es.jar
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
config.es.jar
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral26
Sample
config.fr.jar
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
config.fr.jar
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral28
Sample
config.hi.jar
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
config.hi.jar
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral30
Sample
config.in.jar
Resource
win10v2004-20260911-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
config.in.jar
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
Behavioral task
behavioral32
Sample
config.it.jar
Resource
win10v2004-20260911-en
windows10-2004-x64
General
- Target LAPLATANERAV4/abriremuladores.exe
- Size 8.3MB
- Sample260923-ye5trabc76
- SHA256 ed8476ac2c306509641d532973456a91be27284a8f95ef1f1d24a0b5c5a96784
- MD5 89f5347c8c4982a44e2ed1f5e89b0bb0
- SHA1 1104ed55835a34d8ebe76b7e4adee4abc39817fa
- SHA512 e4cdbc200ea625fcbf88ab43bef185502298ea1a75520035996ebdc8a86e530a50274d7a6d5967bde798e8f71e2ba9ac0a276fea5a3e183df16c4e531a8fdfe5
- SSDEEP 196608:WaBjtbW897Gax7eovq5XMP6PzFcsDHsoqsbRjMFb:zj1tdq1B7LDHsoqsbpib
- TLSH T13A96339912D105D7E4B7E23C0BA2A2A6C2727C106B22C99F1760737E2E7B3F15D36B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Loads dropped DLL 7 IoCs
pid Process 840 abriremuladores.exe 840 abriremuladores.exe 840 abriremuladores.exe 840 abriremuladores.exe 840 abriremuladores.exe 840 abriremuladores.exe 840 abriremuladores.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 3392 wrote to memory of 840 3392 abriremuladores.exe 89
Processes
-
C:\Users\Admin\AppData\Local\Temp\LAPLATANERAV4\abriremuladores.exe"C:\Users\Admin\AppData\Local\Temp\LAPLATANERAV4\abriremuladores.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:3392 -
C:\Users\Admin\AppData\Local\Temp\LAPLATANERAV4\abriremuladores.exe"C:\Users\Admin\AppData\Local\Temp\LAPLATANERAV4\abriremuladores.exe"2⤵
- Loads dropped DLL
PID:840
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\_MEI33922\VCRUNTIME140.dll
- Size 117KB
- SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
- MD5 32da96115c9d783a0769312c0482a62d
- SHA1 2ea840a5faa87a2fe8d7e5cb4367f2418077d66b
- SHA512 616c78b4a24761d4640ae2377b873f7779322ef7bc26f8de7da0d880b227c577ed6f5ed794fc733468477b2fcdb7916def250e5dc63e79257616f99768419087
- SSDEEP 1536:Z9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyaXYaNxoecbdhUoaLjTz164zEd:ZEnsvReGsWyxLizXFkecbd1aPTzW
- TLSH T10DC38C8572A002FBD16AC274C1A36A17FB75B94487B0A7CF03B58A650F53BE09E3D356
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI33922\_bz2.pyd
- Size 85KB
- SHA256 a4be36fffeefa8b24c1234d548da8f05558aba53c2ea7d1d2614776eaad8fbf4
- MD5 a0946ac3236b70d27de6046ccc467977
- SHA1 84f2aa56e58849cf30e632e7eaab4901a681f08c
- SHA512 02429781f017b534918657e5c152ea022b52bcddd15ecca7f8b4629940dd4367a09af4d86a1f05d946ca97f2709718b136003693088c480d9b791e4d18361174
- SSDEEP 1536:vZAVNz7DkEvkmFfR/l/kM4KPkM/gg8IWRbG3II13VAyvcvR9qfIk2:vGVNzUERn9R4KRg7NlSII13Vk
- TLSH T1A2838E96F3B552B6F59B91B886840793F730BB860750A3AFF14882853F13BD06E5C369
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI33922\_ctypes.pyd
- Size 139KB
- SHA256 f8a9f7831e81b2bfba12456e589f8198114f24986bd527ac231a844565afcddb
- MD5 03fb3055ed0c56155bbf030596726e03
- SHA1 fba03bbf844c08ccf20854d717a84fa62ab291fd
- SHA512 9ba8f50f75b37858b3d81d6f7323ae981ae21f57a9897955142bc53098ad74c8ae119e61ccd0bb5cd0071e092e8c2bbb5c146688e29f2cf7d1d3740f47ec9117
- SSDEEP 3072:HDpx2Lp7KRmFrkdOJWWcovIMzTF4FyxpEI1GPny:jpxCdK8r8WDvIMn+8xpx
- TLSH T160D37E4B736841A6DA678138C6739E47EBB1F452261087CF4264C99B1F633A2AF3F315
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI33922\_lzma.pyd
- Size 157KB
- SHA256 f7ad11fbbb7aeaf7b6566a532a3243e3ae5f92bac480dbe5c2ef300fe2c1dabe
- MD5 1dfaf924b4576f551f6dfe3cae50b230
- SHA1 ef19846989f337e600c8f9ccacbd4276cc4d35f0
- SHA512 2df6a600ecd03de76f066f87a8dd13bf138a51f89fe745813d7a00418fb716c670cb04a9b5573d2b852fc8885acac8b960ba4c42d38fcb7e9a1d2aa2e84f90a9
- SSDEEP 3072:z+0m6DKDYtwipfxAbDcoAL+Uznfx9mNoV+dREOII1I1+ZgTT:iTCKDYvNoopYOyGOjeT
- TLSH T182F34C86B794F0D6F3628C78D6618F53E7F5781A0320929A01CC976D2B1FB759A2B313
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI33922\_zstd.pyd
- Size 491KB
- SHA256 536a3b521a3c42d2827ece0ccfbe40b83a2fd96a0f5496cd60b943b10e1266d4
- MD5 b89f5d1345ef95f80ddcbe5b3e4e5bb3
- SHA1 2daee236009cc3efe02dc9bbbd8c6faa8ac56478
- SHA512 fc925424ad4bd8bdfae04b95fdadfcdbffcac76270997b4ce365be8a47d4c636b7e0b31e78d785a3dc6c9b2dd0f108aa716a92ee4f0506f3a0329e4a424b48e9
- SSDEEP 12288:X/WcJlzAwk9mH+65GRRfODoHWDTrWl93mFgR:X/WcJywk9mH+KGRRf2o2YR
- TLSH T1A5B48D43F29983EDE17BC4B8CF465A53FBB1780B1214565B93A5CB943F07B309A6A308
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI33922\base_library.zip
- Size 1.3MB
- SHA256 8e9d94517dc640f75cadfd8ef7d85bfc5bd12218866195d837263ed3eb562422
- MD5 35c4f35781dd9aa532f4f647d258bd23
- SHA1 6375b438ba639bb35b18edb000298b2df494074f
- SHA512 96684bcb1cda37e73d22afb910478e34da76128adf92e49229a92ec65fc88695822f3414d1b264b92a1dad99abf43f34b4600d8768387aab341f43ee0761d863
- SSDEEP 24576:TRUuUF4dkL+QeOdP2m2dfO3lb63/FKRpAc:T2uUF4dn/t3ERj
- TLSH T1BC552AA1B9917867FEC9F37A35775A0CA715C0109B20D303B4A98DAC6FDF260AE158DC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI33922\libffi-8.dll
- Size 38KB
- SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
- MD5 0f8e4992ca92baaf54cc0b43aaccce21
- SHA1 c7300975df267b1d6adcbac0ac93fd7b1ab49bd2
- SHA512 6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978
- SSDEEP 768:NiQfxQemQJNrPN+moyijAc5YiSyvkIPxWEqG:dfxIQvPkmoyijP7SytPxF
- TLSH T10B037C0B458418A4E657D53D97A64A2AC335B9240B60F2CB03D4C2BA3F6B7D6FB7C358
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI33922\python314.dll
- Size 6.4MB
- SHA256 1ac15e2224581fc678bbd17728b9aa538d47b891b72c76499ef07e54cd74f151
- MD5 5bc0adc1fed509f353832bde6b2add62
- SHA1 b2204b0bc93877fcd186d72fbe5006130aa0fb88
- SHA512 7b1e52aff81e5e79872d9a22c0218dd8fc46e99cb33adb69d277ea07b21eee0399f0a6a72d190b91f26a96e69aa63a23a06384b9d93db44355f3eb1d7f727650
- SSDEEP 98304:YvvKimE4QWS5v+kr/YFboltx9E8rDvQHDMiE2hx0S:qdcQWS5v+kLMolGmidx0S
- TLSH T107668D26737505A5D8BB8076C9034647DBB1BC00AB30D34B49A4B6DA3F733635BAEB85
- MD5 SHA1 SHA512 SSDEEP TLSH