6cf21313d2a45c908c3afd86516c348f36fce7836617382c1ca967a1a71be779

Login
Reports

Overview

overview

Static

static

Reclaiming...rms.py

windows10-2004-x64

Reclaiming...rms.py

windows11-ltsc_2024-x64

Reclaiming...heLost

ubuntu-18.04-amd64

Reclaiming...hon.so

ubuntu-18.04-amd64

Reclaiming...python

ubuntu-18.04-amd64

Reclaiming...ythonw

ubuntu-18.04-amd64

Reclaiming.../zsync

ubuntu-18.04-amd64

Reclaiming...ncmake

ubuntu-18.04-amd64

Reclaiming...47.dll

windows10-2004-x64

Reclaiming...GL.dll

windows10-2004-x64

Reclaiming...GL.dll

windows11-ltsc_2024-x64

Reclaiming...v2.dll

windows10-2004-x64

Reclaiming...v2.dll

windows11-ltsc_2024-x64

Reclaiming....9.dll

windows10-2004-x64

Reclaiming....9.dll

windows11-ltsc_2024-x64

Reclaiming...on.dll

windows10-2004-x64

Reclaiming...on.dll

windows11-ltsc_2024-x64

Reclaiming...-1.dll

windows10-2004-x64

Reclaiming...-1.dll

windows11-ltsc_2024-x64

Reclaiming...rs.dll

windows10-2004-x64

Reclaiming...rs.dll

windows11-ltsc_2024-x64

Reclaiming...on.exe

windows10-2004-x64

Reclaiming...on.exe

windows11-ltsc_2024-x64

Reclaiming...nw.exe

windows10-2004-x64

Reclaiming...nw.exe

windows11-ltsc_2024-x64

Reclaiming...ay.vbs

windows10-2004-x64

Reclaiming...ay.vbs

windows11-ltsc_2024-x64

Reclaiming...nc.exe

windows10-2004-x64

Reclaiming...nc.exe

windows11-ltsc_2024-x64

Reclaiming...ke.exe

windows10-2004-x64

Reclaiming...ke.exe

windows11-ltsc_2024-x64

Reclaiming...__.pyc

windows10-2004-x64

Resubmissions

15/10/2026, 16:50

261015-vcpszatx2l5

15/10/2026, 15:19

261015-sql8wshv4l5

Analysis

max time kernel
298s
max time network
309s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/10/2026, 15:19

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ReclaimingtheLost-DEMO-pc/game/dynamic_transforms.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

300 seconds

execution

Behavioral task

behavioral2

Sample

ReclaimingtheLost-DEMO-pc/game/dynamic_transforms.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

300 seconds

execution

Behavioral task

behavioral3

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/ReclaimingtheLost

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

6 signatures

300 seconds

antivm discovery

Behavioral task

behavioral4

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/librenpython.so

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

300 seconds

Behavioral task

behavioral5

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/python

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

300 seconds

Behavioral task

behavioral6

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/pythonw

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

300 seconds

Behavioral task

behavioral7

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/zsync

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

300 seconds

Behavioral task

behavioral8

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/zsyncmake

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

300 seconds

Behavioral task

behavioral9

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/d3dcompiler_47.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral10

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libEGL.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral11

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libEGL.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral12

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libGLESv2.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral13

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libGLESv2.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral14

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libpython3.9.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral15

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libpython3.9.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral16

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/librenpython.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral17

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/librenpython.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral18

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libwinpthread-1.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral19

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libwinpthread-1.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral20

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/nvdrs.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral21

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/nvdrs.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral22

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/python.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral23

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/python.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral24

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/pythonw.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral25

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/pythonw.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral26

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/say.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

execution

Behavioral task

behavioral27

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/say.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

execution

Behavioral task

behavioral28

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/zsync.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

discovery

Behavioral task

behavioral29

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/zsync.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

discovery

Behavioral task

behavioral30

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/zsyncmake.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

discovery

Behavioral task

behavioral31

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/zsyncmake.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

discovery

Behavioral task

behavioral32

Sample

ReclaimingtheLost-DEMO-pc/lib/python3.9/__future__.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

300 seconds

execution

Report Analysis Logs

General

Target
ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/librenpython.dll
Size 20.8MB
Sample261015-sql8wshv4l
SHA256 6cf21313d2a45c908c3afd86516c348f36fce7836617382c1ca967a1a71be779
MD5 78b30211ee85aacd05c7322cef48d7ad
SHA1 d299b6ebdf757fc7b1f25f8210bb3ed97c20ab32
SHA512 7f4ad96c7801dfcd9a654978b724934aa8c40e6ad21924a9c0db68a55e4c3b669e9cebaea465b811712ba3e5872162423861ecb2c74770370001edb3042e8b71
SSDEEP 196608:f05Dolsx6gj6xVeyf88Bly/70bWUaGDn09pxabd4e0:85DolM6gj6Ley0x/I/Dnwpxw0
TLSH
T139277C4BF05254ACC586D174CE2BEB22FBA5784C4672799F329457B03F61BC0AB2AF44
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ReclaimingtheLost-DEMO-pc\lib\py3-windows-x86_64\librenpython.dll,#1
1⤵
PID:412

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5580

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads