00d784e7e002c1b01f3146c87f30030f169843988f87c9631cb2df211979286b

Login
Reports

Overview

overview

Static

static

Reclaiming...rms.py

windows10-2004-x64

Reclaiming...rms.py

windows11-ltsc_2024-x64

Reclaiming...heLost

ubuntu-18.04-amd64

Reclaiming...hon.so

ubuntu-18.04-amd64

Reclaiming...python

ubuntu-18.04-amd64

Reclaiming...ythonw

ubuntu-18.04-amd64

Reclaiming.../zsync

ubuntu-18.04-amd64

Reclaiming...ncmake

ubuntu-18.04-amd64

Reclaiming...47.dll

windows10-2004-x64

Reclaiming...GL.dll

windows10-2004-x64

Reclaiming...GL.dll

windows11-ltsc_2024-x64

Reclaiming...v2.dll

windows10-2004-x64

Reclaiming...v2.dll

windows11-ltsc_2024-x64

Reclaiming....9.dll

windows10-2004-x64

Reclaiming....9.dll

windows11-ltsc_2024-x64

Reclaiming...on.dll

windows10-2004-x64

Reclaiming...on.dll

windows11-ltsc_2024-x64

Reclaiming...-1.dll

windows10-2004-x64

Reclaiming...-1.dll

windows11-ltsc_2024-x64

Reclaiming...rs.dll

windows10-2004-x64

Reclaiming...rs.dll

windows11-ltsc_2024-x64

Reclaiming...on.exe

windows10-2004-x64

Reclaiming...on.exe

windows11-ltsc_2024-x64

Reclaiming...nw.exe

windows10-2004-x64

Reclaiming...nw.exe

windows11-ltsc_2024-x64

Reclaiming...ay.vbs

windows10-2004-x64

Reclaiming...ay.vbs

windows11-ltsc_2024-x64

Reclaiming...nc.exe

windows10-2004-x64

Reclaiming...nc.exe

windows11-ltsc_2024-x64

Reclaiming...ke.exe

windows10-2004-x64

Reclaiming...ke.exe

windows11-ltsc_2024-x64

Reclaiming...__.pyc

windows10-2004-x64

Resubmissions

15/10/2026, 16:50

261015-vcpszatx2l5

15/10/2026, 15:19

261015-sql8wshv4l5

Analysis

max time kernel
298s
max time network
326s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
15/10/2026, 15:19

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ReclaimingtheLost-DEMO-pc/game/dynamic_transforms.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

300 seconds

execution

Behavioral task

behavioral2

Sample

ReclaimingtheLost-DEMO-pc/game/dynamic_transforms.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

300 seconds

execution

Behavioral task

behavioral3

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/ReclaimingtheLost

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

6 signatures

300 seconds

antivm discovery

Behavioral task

behavioral4

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/librenpython.so

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

300 seconds

Behavioral task

behavioral5

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/python

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

300 seconds

Behavioral task

behavioral6

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/pythonw

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

300 seconds

Behavioral task

behavioral7

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/zsync

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

300 seconds

Behavioral task

behavioral8

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/zsyncmake

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

300 seconds

Behavioral task

behavioral9

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/d3dcompiler_47.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral10

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libEGL.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral11

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libEGL.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral12

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libGLESv2.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral13

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libGLESv2.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral14

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libpython3.9.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral15

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libpython3.9.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral16

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/librenpython.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral17

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/librenpython.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral18

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libwinpthread-1.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral19

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libwinpthread-1.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral20

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/nvdrs.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral21

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/nvdrs.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral22

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/python.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral23

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/python.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral24

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/pythonw.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral25

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/pythonw.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral26

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/say.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

execution

Behavioral task

behavioral27

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/say.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

execution

Behavioral task

behavioral28

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/zsync.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

discovery

Behavioral task

behavioral29

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/zsync.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

discovery

Behavioral task

behavioral30

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/zsyncmake.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

discovery

Behavioral task

behavioral31

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/zsyncmake.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

discovery

Behavioral task

behavioral32

Sample

ReclaimingtheLost-DEMO-pc/lib/python3.9/__future__.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

300 seconds

execution

Report Analysis Logs

General

Target
ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libwinpthread-1.dll
Size 344KB
Sample261015-sql8wshv4l
SHA256 00d784e7e002c1b01f3146c87f30030f169843988f87c9631cb2df211979286b
MD5 da67da022bbc1bb9409e3328c1cb64e1
SHA1 e1fd29f4256d7066f05d113cb8e96e1aebaa38e7
SHA512 24ba4936ff149f0875b3e4c7e36e80f941130faccd4d6296d68c8af8b0e647c37d0822d477218ab0b3d4b51f24cd1dfa1ace54adfbd175d122036c3a7e787ebf
SSDEEP 6144:Wo14rtZLc1fPm3YjZxgMOKSjkPDNjYBlplydMofn6cHqq85l:Wo14r/cBPm3Yg8SjoYvplydMofRHqq85
TLSH
T1E4744B8BE754DA7ACA1146318CBB0B097337D04067979F5BAB2CD2783D8BBC4DD99608
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ReclaimingtheLost-DEMO-pc\lib\py3-windows-x86_64\libwinpthread-1.dll,#1
1⤵
PID:1316

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads