33461d788a33b88bed3d489826f9fb766cae421f322b81c5eb861718a1dea7bb | Triage

Submit
Reports

Overview

overview

Static

static

RGF-main.zip

windows7-x64

1

RGF-main.zip

windows10-2004-x64

1

RGF-main/Input.zip

windows7-x64

1

RGF-main/Input.zip

windows10-2004-x64

1

RoBrute-ma...ICENSE

windows7-x64

1

RoBrute-ma...ICENSE

windows10-2004-x64

1

RoBrute-ma...DME.md

windows7-x64

3

RoBrute-ma...DME.md

windows10-2004-x64

3

RoBrute-ma...Lib.py

windows7-x64

3

RoBrute-ma...Lib.py

windows10-2004-x64

3

RoBrute-ma...ib.pyc

windows7-x64

3

RoBrute-ma...ib.pyc

windows10-2004-x64

3

RoBrute-ma...ss.lst

windows7-x64

3

RoBrute-ma...ss.lst

windows10-2004-x64

3

RoBrute-ma...y.yaml

windows7-x64

3

RoBrute-ma...y.yaml

windows10-2004-x64

3

RoBrute-ma...ts.txt

windows7-x64

1

RoBrute-ma...ts.txt

windows10-2004-x64

1

RoBrute-ma...cks.py

windows7-x64

3

RoBrute-ma...cks.py

windows10-2004-x64

3

RoBrute-ma...ks.pyc

windows7-x64

3

RoBrute-ma...ks.pyc

windows10-2004-x64

3

RGF-main/RBF.exe

windows7-x64

RGF-main/RBF.exe

windows10-2004-x64

RGF-main/README.md

windows7-x64

3

RGF-main/README.md

windows10-2004-x64

3

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
12-05-2024 17:46

Sharing

Static task

static1

mercurialgrabber

2 signatures

Behavioral task

behavioral1

Sample

RGF-main.zip

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

RGF-main.zip

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

RGF-main/Input.zip

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

RGF-main/Input.zip

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

RoBrute-master/LICENSE

Resource

win7-20240419-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

RoBrute-master/LICENSE

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

RoBrute-master/README.md

Resource

win7-20240221-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral8

Sample

RoBrute-master/README.md

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

RoBrute-master/mainLib.py

Resource

win7-20231129-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral10

Sample

RoBrute-master/mainLib.py

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

RoBrute-master/mainLib.pyc

Resource

win7-20240220-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral12

Sample

RoBrute-master/mainLib.pyc

Resource

win10v2004-20240426-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

RoBrute-master/pass.lst

Resource

win7-20240508-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

RoBrute-master/pass.lst

Resource

win10v2004-20240426-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

RoBrute-master/proxy.yaml

Resource

win7-20240221-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral16

Sample

RoBrute-master/proxy.yaml

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

RoBrute-master/requirements.txt

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

RoBrute-master/requirements.txt

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

RoBrute-master/socks.py

Resource

win7-20240221-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral20

Sample

RoBrute-master/socks.py

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

RoBrute-master/socks.pyc

Resource

win7-20240221-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral22

Sample

RoBrute-master/socks.pyc

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

RGF-main/RBF.exe

Resource

win7-20231129-en

mercurialgrabber evasion spyware stealer

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral24

Sample

RGF-main/RBF.exe

Resource

win10v2004-20240426-en

mercurialgrabber evasion spyware stealer

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral25

Sample

RGF-main/README.md

Resource

win7-20240508-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral26

Sample

RGF-main/README.md

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

RGF-main.zip
Size

54KB
MD5

7bcc565dfb0ce789f9a984870a64414c
SHA1

7918e05800b7d02be5aa3670259709fde7f5c268
SHA256

33461d788a33b88bed3d489826f9fb766cae421f322b81c5eb861718a1dea7bb
SHA512

0490c139cd781e827fa35e55d21d887990febb2ab158baac005755ae1825904cf8f2971a10e75e135fa350c40ac841815ddeb2fd5c9da2d7b350e9c509f027b0
SSDEEP

768:C2wkbG+ulfxDBcy7hCPWLp7BKgRfIa700K/2x6qKDcqVQ1WEx7HyWKpIpTtKP1ZC:CN1LPBcmKWLp7BTei/qVgRHfKJLYd9vr

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\RGF-main.zip
1⤵
PID:2820

C:\Windows\explorer.exe
"C:\Windows\explorer.exe"
1⤵
PID:2584

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy