0c2f259c6a1588a2ed6e00b5dd471611c029bbc9fd3bcae01000e38882594fbc

Login
Reports

Overview

overview

Static

static

Reclaiming...rms.py

windows10-2004-x64

Reclaiming...rms.py

windows11-ltsc_2024-x64

Reclaiming...heLost

ubuntu-18.04-amd64

Reclaiming...hon.so

ubuntu-18.04-amd64

Reclaiming...python

ubuntu-18.04-amd64

Reclaiming...ythonw

ubuntu-18.04-amd64

Reclaiming.../zsync

ubuntu-18.04-amd64

Reclaiming...ncmake

ubuntu-18.04-amd64

Reclaiming...47.dll

windows10-2004-x64

Reclaiming...GL.dll

windows10-2004-x64

Reclaiming...GL.dll

windows11-ltsc_2024-x64

Reclaiming...v2.dll

windows10-2004-x64

Reclaiming...v2.dll

windows11-ltsc_2024-x64

Reclaiming....9.dll

windows10-2004-x64

Reclaiming....9.dll

windows11-ltsc_2024-x64

Reclaiming...on.dll

windows10-2004-x64

Reclaiming...on.dll

windows11-ltsc_2024-x64

Reclaiming...-1.dll

windows10-2004-x64

Reclaiming...-1.dll

windows11-ltsc_2024-x64

Reclaiming...rs.dll

windows10-2004-x64

Reclaiming...rs.dll

windows11-ltsc_2024-x64

Reclaiming...on.exe

windows10-2004-x64

Reclaiming...on.exe

windows11-ltsc_2024-x64

Reclaiming...nw.exe

windows10-2004-x64

Reclaiming...nw.exe

windows11-ltsc_2024-x64

Reclaiming...ay.vbs

windows10-2004-x64

Reclaiming...ay.vbs

windows11-ltsc_2024-x64

Reclaiming...nc.exe

windows10-2004-x64

Reclaiming...nc.exe

windows11-ltsc_2024-x64

Reclaiming...ke.exe

windows10-2004-x64

Reclaiming...ke.exe

windows11-ltsc_2024-x64

Reclaiming...__.pyc

windows10-2004-x64

Resubmissions

15/10/2026, 16:50

261015-vcpszatx2l5

15/10/2026, 15:19

261015-sql8wshv4l5

Analysis

max time kernel
298s
max time network
277s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/10/2026, 15:19

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ReclaimingtheLost-DEMO-pc/game/dynamic_transforms.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

300 seconds

execution

Behavioral task

behavioral2

Sample

ReclaimingtheLost-DEMO-pc/game/dynamic_transforms.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

300 seconds

execution

Behavioral task

behavioral3

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/ReclaimingtheLost

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

6 signatures

300 seconds

antivm discovery

Behavioral task

behavioral4

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/librenpython.so

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

300 seconds

Behavioral task

behavioral5

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/python

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

300 seconds

Behavioral task

behavioral6

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/pythonw

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

300 seconds

Behavioral task

behavioral7

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/zsync

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

300 seconds

Behavioral task

behavioral8

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-linux-x86_64/zsyncmake

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

300 seconds

Behavioral task

behavioral9

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/d3dcompiler_47.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral10

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libEGL.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral11

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libEGL.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral12

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libGLESv2.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral13

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libGLESv2.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral14

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libpython3.9.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral15

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libpython3.9.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral16

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/librenpython.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral17

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/librenpython.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral18

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libwinpthread-1.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral19

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/libwinpthread-1.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral20

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/nvdrs.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral21

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/nvdrs.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral22

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/python.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral23

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/python.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral24

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/pythonw.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral25

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/pythonw.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral26

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/say.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

execution

Behavioral task

behavioral27

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/say.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

execution

Behavioral task

behavioral28

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/zsync.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

discovery

Behavioral task

behavioral29

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/zsync.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

discovery

Behavioral task

behavioral30

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/zsyncmake.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

discovery

Behavioral task

behavioral31

Sample

ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/zsyncmake.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

discovery

Behavioral task

behavioral32

Sample

ReclaimingtheLost-DEMO-pc/lib/python3.9/__future__.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

300 seconds

execution

Report Analysis Logs

General

Target
ReclaimingtheLost-DEMO-pc/lib/py3-windows-x86_64/nvdrs.dll
Size 14KB
Sample261015-sql8wshv4l
SHA256 0c2f259c6a1588a2ed6e00b5dd471611c029bbc9fd3bcae01000e38882594fbc
MD5 49fa278aa122678d71fefbb7ce89754b
SHA1 71b346018938bcd823c7ac739645ca89b46197b2
SHA512 acf53a2397af2539db1f73313058cdab3a1283f71e667eb54078b73c93ee757ecf5f35bfcde136cf3c709779bef9a8f9c12e5edefd0839784ff2fd47df6ea285
SSDEEP 192:kKFj3Az2SjQ0bnUdPIPKPpCxeELcNiTw/dUfYa2GzEfw9vnQ:kKejQ07KPUKueELcNiM/dyDzCw9vQ
TLSH
T12962D6069B5524BEDE4AC17FC2771762FAA0B950076218C70331F2650E71FD4273D8AD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ReclaimingtheLost-DEMO-pc\lib\py3-windows-x86_64\nvdrs.dll,#1
1⤵
PID:3984

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5960

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads