b20c1e14e42da55c13dad3c23a5060ca086eaf5b18b12ef5c60cd7e80276a9f2

Login
Reports

Overview

overview

Static

static

Reclaiming...rms.py

windows10-2004-x64

Reclaiming...rms.py

windows11-ltsc_2024-x64

Reclaiming...heLost

ubuntu-18.04-amd64

Reclaiming...hon.so

ubuntu-18.04-amd64

Reclaiming...python

ubuntu-18.04-amd64

Reclaiming...ythonw

ubuntu-18.04-amd64

Reclaiming.../zsync

ubuntu-18.04-amd64

Reclaiming...ncmake

ubuntu-18.04-amd64

Reclaiming...47.dll

windows10-2004-x64

Reclaiming...GL.dll

windows10-2004-x64

Reclaiming...GL.dll

windows11-ltsc_2024-x64

Reclaiming...v2.dll

windows10-2004-x64

Reclaiming...v2.dll

windows11-ltsc_2024-x64

Reclaiming....9.dll

windows10-2004-x64

Reclaiming....9.dll

windows11-ltsc_2024-x64

Reclaiming...on.dll

windows10-2004-x64

Reclaiming...on.dll

windows11-ltsc_2024-x64

Reclaiming...-1.dll

windows10-2004-x64

Reclaiming...-1.dll

windows11-ltsc_2024-x64

Reclaiming...rs.dll

windows10-2004-x64

Reclaiming...rs.dll

windows11-ltsc_2024-x64

Reclaiming...on.exe

windows10-2004-x64

Reclaiming...on.exe

windows11-ltsc_2024-x64

Reclaiming...nw.exe

windows10-2004-x64

Reclaiming...nw.exe

windows11-ltsc_2024-x64

Reclaiming...ay.vbs

windows10-2004-x64

Reclaiming...ay.vbs

windows11-ltsc_2024-x64

Reclaiming...nc.exe

windows10-2004-x64

Reclaiming...nc.exe

windows11-ltsc_2024-x64

Reclaiming...ke.exe

windows10-2004-x64

Reclaiming...ke.exe

windows11-ltsc_2024-x64

Reclaiming...__.pyc

windows10-2004-x64

Resubmissions

15/10/2026, 16:50

261015-vcpszatx2l5

15/10/2026, 15:19

261015-sql8wshv4l5

Analysis

max time kernel
298s
max time network
233s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/10/2026, 15:19

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ReclaimingtheLost-DEMO-pc/game/dynamic_transforms.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

300 seconds

execution

Behavioral task

behavioral2

Sample

ReclaimingtheLost-DEMO-pc/game/dynamic_transforms.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

300 seconds

execution

Behavioral task

behavioral3

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/ReclaimingtheLost

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

6 signatures

300 seconds

antivm discovery

Behavioral task

behavioral4

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/librenpython.so

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

300 seconds

Behavioral task

behavioral5

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/python

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

300 seconds

Behavioral task

behavioral6

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/pythonw

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

300 seconds

Behavioral task

behavioral7

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/zsync

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

300 seconds

Behavioral task

behavioral8

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/zsyncmake

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

300 seconds

Behavioral task

behavioral9

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/d3dcompiler_47.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral10

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libEGL.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral11

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libEGL.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral12

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libGLESv2.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral13

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libGLESv2.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral14

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libpython3.9.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral15

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libpython3.9.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral16

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/librenpython.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral17

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/librenpython.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral18

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libwinpthread-1.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral19

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libwinpthread-1.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral20

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/nvdrs.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral21

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/nvdrs.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral22

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/python.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral23

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/python.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral24

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/pythonw.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral25

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/pythonw.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral26

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/say.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

execution

Behavioral task

behavioral27

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/say.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

execution

Behavioral task

behavioral28

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/zsync.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

discovery

Behavioral task

behavioral29

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/zsync.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

discovery

Behavioral task

behavioral30

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/zsyncmake.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

discovery

Behavioral task

behavioral31

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/zsyncmake.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

discovery

Behavioral task

behavioral32

Sample

ReclaimingtheLost-DEMO-pc/lib/python3.9/__future__.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

300 seconds

execution

Report Analysis Logs

General

Target
ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libEGL.dll
Size 436KB
Sample261015-sql8wshv4l
SHA256 b20c1e14e42da55c13dad3c23a5060ca086eaf5b18b12ef5c60cd7e80276a9f2
MD5 1090bf4c5495697a1416cd77481cf7d0
SHA1 94452eed4fa88dcb0a5b3c503a12f3a3b5f23ee8
SHA512 d205dd98260d033300afe3f2a1c0c06f3bfbf158067fc3290e10ddf6f51eb80b57af56fb0e75a56b82dc3ec49190c5d2c296aa548b64e39b4b004f60a7da89a6
SSDEEP 6144:CrHQz/GL44uCWgSqTpyGRxyB5EdpmMB6cm+p4HRw0FlA1Qu4P:uudhGDyB5Xa4HRw0FlCQ
TLSH
T182947C29B2A448A9D036C038CA174A72DB31B89A0F75F7DF12E5D2692F773D45B39720
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ReclaimingtheLost-DEMO-pc\lib\py3-windows-x86_64\libEGL.dll,#1
1⤵
PID:6008

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads