b3d612f89df65b43f235f9f5471d2fac364b6fe77a88205e5b8625f3481b6c3c

Login
Reports

Overview

overview

Static

static

Reclaiming...rms.py

windows10-2004-x64

Reclaiming...rms.py

windows11-ltsc_2024-x64

Reclaiming...heLost

ubuntu-18.04-amd64

Reclaiming...hon.so

ubuntu-18.04-amd64

Reclaiming...python

ubuntu-18.04-amd64

Reclaiming...ythonw

ubuntu-18.04-amd64

Reclaiming.../zsync

ubuntu-18.04-amd64

Reclaiming...ncmake

ubuntu-18.04-amd64

Reclaiming...47.dll

windows10-2004-x64

Reclaiming...GL.dll

windows10-2004-x64

Reclaiming...GL.dll

windows11-ltsc_2024-x64

Reclaiming...v2.dll

windows10-2004-x64

Reclaiming...v2.dll

windows11-ltsc_2024-x64

Reclaiming....9.dll

windows10-2004-x64

Reclaiming....9.dll

windows11-ltsc_2024-x64

Reclaiming...on.dll

windows10-2004-x64

Reclaiming...on.dll

windows11-ltsc_2024-x64

Reclaiming...-1.dll

windows10-2004-x64

Reclaiming...-1.dll

windows11-ltsc_2024-x64

Reclaiming...rs.dll

windows10-2004-x64

Reclaiming...rs.dll

windows11-ltsc_2024-x64

Reclaiming...on.exe

windows10-2004-x64

Reclaiming...on.exe

windows11-ltsc_2024-x64

Reclaiming...nw.exe

windows10-2004-x64

Reclaiming...nw.exe

windows11-ltsc_2024-x64

Reclaiming...ay.vbs

windows10-2004-x64

Reclaiming...ay.vbs

windows11-ltsc_2024-x64

Reclaiming...nc.exe

windows10-2004-x64

Reclaiming...nc.exe

windows11-ltsc_2024-x64

Reclaiming...ke.exe

windows10-2004-x64

Reclaiming...ke.exe

windows11-ltsc_2024-x64

Reclaiming...__.pyc

windows10-2004-x64

Resubmissions

15/10/2026, 16:50

261015-vcpszatx2l5

15/10/2026, 15:19

261015-sql8wshv4l5

Analysis

max time kernel
298s
max time network
311s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/10/2026, 15:19

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ReclaimingtheLost-DEMO-pc/game/dynamic_transforms.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

300 seconds

execution

Behavioral task

behavioral2

Sample

ReclaimingtheLost-DEMO-pc/game/dynamic_transforms.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

300 seconds

execution

Behavioral task

behavioral3

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/ReclaimingtheLost

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

6 signatures

300 seconds

antivm discovery

Behavioral task

behavioral4

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/librenpython.so

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

300 seconds

Behavioral task

behavioral5

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/python

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

300 seconds

Behavioral task

behavioral6

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/pythonw

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

300 seconds

Behavioral task

behavioral7

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/zsync

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

300 seconds

Behavioral task

behavioral8

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/zsyncmake

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

300 seconds

Behavioral task

behavioral9

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/d3dcompiler_47.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral10

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libEGL.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral11

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libEGL.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral12

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libGLESv2.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral13

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libGLESv2.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral14

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libpython3.9.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral15

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libpython3.9.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral16

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/librenpython.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral17

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/librenpython.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral18

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libwinpthread-1.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral19

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libwinpthread-1.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral20

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/nvdrs.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral21

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/nvdrs.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral22

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/python.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral23

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/python.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral24

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/pythonw.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral25

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/pythonw.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral26

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/say.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

execution

Behavioral task

behavioral27

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/say.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

execution

Behavioral task

behavioral28

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/zsync.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

discovery

Behavioral task

behavioral29

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/zsync.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

discovery

Behavioral task

behavioral30

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/zsyncmake.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

discovery

Behavioral task

behavioral31

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/zsyncmake.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

discovery

Behavioral task

behavioral32

Sample

ReclaimingtheLost-DEMO-pc/lib/python3.9/__future__.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

300 seconds

execution

Report Analysis Logs

General

Target
ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libpython3.9.dll
Size 8.3MB
Sample261015-sql8wshv4l
SHA256 b3d612f89df65b43f235f9f5471d2fac364b6fe77a88205e5b8625f3481b6c3c
MD5 63c3f6560248ea6e177df61484a234bf
SHA1 c13871bad3e469092134719eb5f5074777505548
SHA512 cb1cae66255429f49ded93cd7aed5405aa20f20fcc0ed62441f92957ae928c44c4748848df8b991b2a1535983082b599389f74d0a110fee18b48f77daad35d19
SSDEEP 98304:lIJbP/eIyeXZ6SbBcaL6vO9eDxY6XO7dPlMBLa2THxM/UZ1c4fv3+opm9g0vHF6:qJDegpBEOBR/34fv3+opm9g0vHF
TLSH
T199967C23B19150EDD93AC13192975233BBB5BC501B21BBDB2154B7702F72B911FAEB28
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ReclaimingtheLost-DEMO-pc\lib\py3-windows-x86_64\libpython3.9.dll,#1
1⤵
PID:928

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1136

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads