33461d788a33b88bed3d489826f9fb766cae421f322b81c5eb861718a1dea7bb | Triage

Submit
Reports

Overview

overview

Static

static

RGF-main.zip

windows7-x64

1

RGF-main.zip

windows10-2004-x64

1

RGF-main/Input.zip

windows7-x64

1

RGF-main/Input.zip

windows10-2004-x64

1

RoBrute-ma...ICENSE

windows7-x64

1

RoBrute-ma...ICENSE

windows10-2004-x64

1

RoBrute-ma...DME.md

windows7-x64

3

RoBrute-ma...DME.md

windows10-2004-x64

3

RoBrute-ma...Lib.py

windows7-x64

3

RoBrute-ma...Lib.py

windows10-2004-x64

3

RoBrute-ma...ib.pyc

windows7-x64

3

RoBrute-ma...ib.pyc

windows10-2004-x64

3

RoBrute-ma...ss.lst

windows7-x64

3

RoBrute-ma...ss.lst

windows10-2004-x64

3

RoBrute-ma...y.yaml

windows7-x64

3

RoBrute-ma...y.yaml

windows10-2004-x64

3

RoBrute-ma...ts.txt

windows7-x64

1

RoBrute-ma...ts.txt

windows10-2004-x64

1

RoBrute-ma...cks.py

windows7-x64

3

RoBrute-ma...cks.py

windows10-2004-x64

3

RoBrute-ma...ks.pyc

windows7-x64

3

RoBrute-ma...ks.pyc

windows10-2004-x64

3

RGF-main/RBF.exe

windows7-x64

RGF-main/RBF.exe

windows10-2004-x64

RGF-main/README.md

windows7-x64

3

RGF-main/README.md

windows10-2004-x64

3

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
12-05-2024 17:46

Sharing

Static task

static1

mercurialgrabber

2 signatures

Behavioral task

behavioral1

Sample

RGF-main.zip

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

RGF-main.zip

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

RGF-main/Input.zip

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

RGF-main/Input.zip

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

RoBrute-master/LICENSE

Resource

win7-20240419-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

RoBrute-master/LICENSE

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

RoBrute-master/README.md

Resource

win7-20240221-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral8

Sample

RoBrute-master/README.md

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

RoBrute-master/mainLib.py

Resource

win7-20231129-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral10

Sample

RoBrute-master/mainLib.py

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

RoBrute-master/mainLib.pyc

Resource

win7-20240220-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral12

Sample

RoBrute-master/mainLib.pyc

Resource

win10v2004-20240426-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

RoBrute-master/pass.lst

Resource

win7-20240508-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

RoBrute-master/pass.lst

Resource

win10v2004-20240426-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

RoBrute-master/proxy.yaml

Resource

win7-20240221-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral16

Sample

RoBrute-master/proxy.yaml

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

RoBrute-master/requirements.txt

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

RoBrute-master/requirements.txt

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

RoBrute-master/socks.py

Resource

win7-20240221-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral20

Sample

RoBrute-master/socks.py

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

RoBrute-master/socks.pyc

Resource

win7-20240221-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral22

Sample

RoBrute-master/socks.pyc

Resource

win10v2004-20240226-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

RGF-main/RBF.exe

Resource

win7-20231129-en

mercurialgrabber evasion spyware stealer

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral24

Sample

RGF-main/RBF.exe

Resource

win10v2004-20240426-en

mercurialgrabber evasion spyware stealer

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral25

Sample

RGF-main/README.md

Resource

win7-20240508-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral26

Sample

RGF-main/README.md

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

RGF-main/Input.zip
Size

36KB
MD5

45102f2509fb9913e768c47a8a7700e5
SHA1

f853f5b887bba4aab056400fc4cfa09aa77dae26
SHA256

f1db00cc9a4d36920d6d360187e36f96e649ed9e8543e3941773b3c5df4bf9a6
SHA512

e2571fa2085b34ab28b5a75908222c3c00b6a398349bde0aaf52d5f5fc66f03a9e010ca7be72bced5eff00a050a5fc02e78abeb748df0ecd8e48f798fd72a66a
SSDEEP

768:0CER7pNX8nL9XhVCbS3O7hCPWLp7BKgRfIa700K/2x6qKEEa6:5ER7jMnxXhwbS3iKWLp7BTeilEa6

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\RGF-main\Input.zip
1⤵
PID:3048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy