File name:

2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn

Full analysis: https://app.any.run/tasks/d11111db-060a-4ad0-a54f-550213abf28e
Verdict: Malicious activity
Analysis date: May 18, 2025, 21:15:19
OS: Windows 10 Professional (build: 19044, 64 bit)
Tags:
jeefo
auto-reg
api-base64
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections
MD5:

E64057CC4AE304CDA37B2514AC0497F6

SHA1:

833198CB037A8A39CF2D7E415BDBAC3F6A4EE464

SHA256:

8C30070338DAF1481AE49F3DA7C8D7D21FA74E035784979CED70D4916B68098D

SSDEEP:

49152:5cfhSJJ3BDsVX7Td8gV90Ng3NhazTorCYbff/QLLQxiukGsOzjR1oX8mMU2z0H3A:5cfhSJJ3BQVX7h8gRPITo77f/QLLQEuT

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • JEEFO has been detected

      • 2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe (PID: 7808)
      • icsys.icn.exe (PID: 7856)
      • explorer.exe (PID: 7876)
      • svchost.exe (PID: 7932)

    • Changes the autorun value in the registry

      • svchost.exe (PID: 7932)
      • explorer.exe (PID: 7876)

  • SUSPICIOUS

    • Executable content was dropped or overwritten

      • 2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe (PID: 7808)
      • spoolsv.exe (PID: 7900)
      • icsys.icn.exe (PID: 7856)
      • explorer.exe (PID: 7876)

    • Starts application with an unusual extension

      • 2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe (PID: 7808)

    • Starts itself from another location

      • 2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe (PID: 7808)
      • spoolsv.exe (PID: 7900)
      • icsys.icn.exe (PID: 7856)
      • explorer.exe (PID: 7876)
      • svchost.exe (PID: 7932)

    • The process creates files with name similar to system file names

      • spoolsv.exe (PID: 7900)
      • icsys.icn.exe (PID: 7856)

    • There is functionality for taking screenshot (YARA)

      • 2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe  (PID: 7832)

    • Creates or modifies Windows services

      • svchost.exe (PID: 7932)

  • INFO

    • Checks supported languages

      • 2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe  (PID: 7832)
      • 2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe (PID: 7808)
      • icsys.icn.exe (PID: 7856)
      • spoolsv.exe (PID: 7900)
      • svchost.exe (PID: 7932)
      • explorer.exe (PID: 7876)
      • spoolsv.exe (PID: 7960)

    • Create files in a temporary directory

      • 2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe (PID: 7808)
      • icsys.icn.exe (PID: 7856)
      • spoolsv.exe (PID: 7900)
      • svchost.exe (PID: 7932)
      • explorer.exe (PID: 7876)
      • spoolsv.exe (PID: 7960)

    • The sample compiled with english language support

      • 2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe (PID: 7808)

    • Reads the computer name

      • 2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe  (PID: 7832)
      • svchost.exe (PID: 7932)

    • Auto-launch of the file from Registry key

      • svchost.exe (PID: 7932)
      • explorer.exe (PID: 7876)

    • Manual execution by a user

      • explorer.exe (PID: 8132)
      • svchost.exe (PID: 8148)

    • Potential remote process memory interaction (Base64 Encoded 'VirtualAllocEx')

      • 2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe  (PID: 7832)

    • Potential remote process memory writing (Base64 Encoded 'WriteProcessMemory')

      • 2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe  (PID: 7832)

    • Potential access to remote process (Base64 Encoded 'OpenProcess')

      • 2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe  (PID: 7832)

    • Potential library load (Base64 Encoded 'LoadLibrary')

      • 2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe  (PID: 7832)

    • Potential remote process memory reading (Base64 Encoded 'ReadProcessMemory')

      • 2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe  (PID: 7832)

    • Checks proxy server information

      • slui.exe (PID: 7284)

    • Reads the software policy settings

      • slui.exe (PID: 7284)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win32 Executable (generic) (52.9)
.exe | Generic Win/DOS Executable (23.5)
.exe | DOS Executable Generic (23.5)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2013:04:01 07:08:22+00:00
ImageFileCharacteristics: No relocs, Executable, No line numbers, No symbols, 32-bit
PEType: PE32
LinkerVersion: 6
CodeSize: 106496
InitializedDataSize: 12288
UninitializedDataSize: -
EntryPoint: 0x290c
OSVersion: 4
ImageVersion: 1
SubsystemVersion: 4
Subsystem: Windows GUI
FileVersionNumber: 1.0.0.0
ProductVersionNumber: 1.0.0.0
FileFlagsMask: 0x0000
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: English (U.S.)
CharacterSet: Unicode
ProductName: Project1
FileVersion: 1
ProductVersion: 1
InternalName: TJprojMain
OriginalFileName: TJprojMain.exe
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
133
Monitored processes
11
Malicious processes
5
Suspicious processes
0

Behavior graph

Click at the process to see the details
start #JEEFO 2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe 2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe  no specs #JEEFO icsys.icn.exe #JEEFO explorer.exe spoolsv.exe #JEEFO svchost.exe spoolsv.exe no specs explorer.exe no specs svchost.exe no specs slui.exe 2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
7284C:\WINDOWS\System32\slui.exe -EmbeddingC:\Windows\System32\slui.exe
svchost.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Activation Client
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\slui.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\user32.dll
7704"C:\Users\admin\Desktop\2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe" C:\Users\admin\Desktop\2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe—explorer.exe
User:
admin
Integrity Level:
MEDIUM
Exit code:
3221226540
Version:
1.00
Modules
Images
c:\users\admin\desktop\2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
7808"C:\Users\admin\Desktop\2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe" C:\Users\admin\Desktop\2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe
explorer.exe
User:
admin
Integrity Level:
HIGH
Exit code:
0
Version:
1.00
Modules
Images
c:\users\admin\desktop\2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
7832c:\users\admin\desktop\2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe  C:\Users\admin\Desktop\2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe —2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe
User:
admin
Company:
3DMGAME
Integrity Level:
HIGH
Description:
FLiNG@3DMGAME Presents - Assassins Creed III Remastered v1.0 Plus 10 Trainer
Version:
1.0.0.1
Modules
Images
c:\users\admin\desktop\2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe 
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\user32.dll
c:\windows\system32\win32u.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\gdi32full.dll
c:\windows\system32\msvcp_win.dll
7856C:\Windows\Resources\Themes\icsys.icn.exeC:\Windows\Resources\Themes\icsys.icn.exe
2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe
User:
admin
Integrity Level:
HIGH
Exit code:
0
Version:
1.00
Modules
Images
c:\windows\resources\themes\icsys.icn.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
7876c:\windows\resources\themes\explorer.exeC:\Windows\Resources\Themes\explorer.exe
icsys.icn.exe
User:
admin
Integrity Level:
HIGH
Version:
1.00
Modules
Images
c:\windows\resources\themes\explorer.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
7900c:\windows\resources\spoolsv.exe SEC:\Windows\Resources\spoolsv.exe
explorer.exe
User:
admin
Integrity Level:
HIGH
Exit code:
0
Version:
1.00
Modules
Images
c:\windows\resources\spoolsv.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
7932c:\windows\resources\svchost.exeC:\Windows\Resources\svchost.exe
spoolsv.exe
User:
admin
Integrity Level:
HIGH
Version:
1.00
Modules
Images
c:\windows\resources\svchost.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
7960c:\windows\resources\spoolsv.exe PRC:\Windows\Resources\spoolsv.exe—svchost.exe
User:
admin
Integrity Level:
HIGH
Exit code:
0
Version:
1.00
Modules
Images
c:\windows\resources\spoolsv.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\msvbvm60.dll
8132c:\windows\resources\themes\explorer.exe ROC:\Windows\Resources\Themes\explorer.exe—explorer.exe
User:
admin
Integrity Level:
MEDIUM
Exit code:
3221226540
Version:
1.00
Modules
Images
c:\windows\resources\themes\explorer.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
Total events
4 248
Read events
4 227
Write events
16
Delete events
5

Modification events

(PID) Process:(7832) 2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe Key:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Multimedia\ActiveMovie\Filter Cache64
Operation:writeName:0
Value:
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
(PID) Process:(7832) 2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe Key:HKEY_CURRENT_USER\SOFTWARE\Microsoft\Multimedia\ActiveMovie\Filter Cache64
Operation:delete valueName:1
Value:
(PID) Process:(7856) icsys.icn.exeKey:HKEY_CURRENT_USER\SOFTWARE\VB and VBA Program Settings\Explorer\Process
Operation:writeName:LO
Value:
1
(PID) Process:(7876) explorer.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce
Operation:writeName:Explorer
Value:
c:\windows\resources\themes\explorer.exe RO
(PID) Process:(7876) explorer.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce
Operation:writeName:Svchost
Value:
c:\windows\resources\svchost.exe RO
(PID) Process:(7876) explorer.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run
Operation:delete valueName:Explorer
Value:
(PID) Process:(7876) explorer.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run
Operation:delete valueName:Svchost
Value:
(PID) Process:(7932) svchost.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce
Operation:writeName:Explorer
Value:
c:\windows\resources\themes\explorer.exe RO
(PID) Process:(7932) svchost.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce
Operation:writeName:Svchost
Value:
c:\windows\resources\svchost.exe RO
(PID) Process:(7932) svchost.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run
Operation:delete valueName:Explorer
Value:
Executable files
5
Suspicious files
4
Text files
1
Unknown types
0

Dropped files

PID
Process
Filename
Type
7856icsys.icn.exeC:\Windows\Resources\Themes\explorer.exeexecutable
MD5:3F42B91BD3EBC5FD8DE338EB9DD10DDD
SHA256:20C097F73887C4F1A2F7EB615E06B64BEA3E261CB9122A7579441A2A9C12C8A9
7876explorer.exeC:\Windows\Resources\spoolsv.exeexecutable
MD5:19496035675ECA92B2A7F8AF2581526D
SHA256:6CC108607DA37044F0AF37E31CE404A8677042A79770FEC162CFA66DE48949B3
78082025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exeC:\Windows\Resources\Themes\icsys.icn.exeexecutable
MD5:22B3A0254A270EA46AADEA3A9A392B92
SHA256:58789BE9ABA4B90B570AD3A95BDC199A02C224138FC0C84135F95730B4294B88
7900spoolsv.exeC:\Windows\Resources\svchost.exeexecutable
MD5:0504D84BB3A1E75A09C02407A9AE17C3
SHA256:972C7CDA9204CD4F1ADE43A17EC5AB289061C193FE069B75AE4894185BF3DC16
78082025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exeC:\Users\admin\Desktop\2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe executable
MD5:FF4EBB5D46DCE11EB0F8648D5218AC2E
SHA256:05DBD73BE629173149D22FBAE3E6A6B3A53BEF66C7954F64E97E12FCB80FB72C
7900spoolsv.exeC:\Users\admin\AppData\Local\Temp\~DF7D5A6F4C6CECFA72.TMPbinary
MD5:EC83F82DD0A933408F8B3997B2D983F5
SHA256:E72CD9C479C9DF1E630777210690EF6F999AA97EA29BDEB29B0330E12866CE3F
78322025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exe C:\Users\admin\Documents\FLiNGTrainer\TrainerSettings.initext
MD5:100AD43A6E39D44013FAD7F3AA343E3B
SHA256:A7B15EE77DD0DB946E7FDBF574889BD30C23FA3D7BFF6D509DF118595EE14EC5
7960spoolsv.exeC:\Users\admin\AppData\Local\Temp\~DF1F80A6637C5FED1A.TMPbinary
MD5:478EE75AA73D2FDF4D2E4F084E33832F
SHA256:1B299F63A5FC4C21C6960EE258F301E2872F6BA15B78581CFC0ACDA4FEA65952
7856icsys.icn.exeC:\Users\admin\AppData\Local\Temp\~DF43B84EEF1B979494.TMPbinary
MD5:531C5F77A83533640EFAB99BF04B5741
SHA256:E42314F2E5C254AB77C6CA10FE87DA528844B1B1CDC9F42313DFA1F319F0F3B2
78082025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn.exeC:\Users\admin\AppData\Local\Temp\~DFD83C98325B5F95F0.TMPbinary
MD5:FDBD4FB2234A62BA026F6A6200D2060F
SHA256:2281E4943A1465E1CF30558928C760025490253EF25B72E32D8E87B8EBA96161
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
0
TCP/UDP connections
19
DNS requests
5
Threats
0

HTTP requests

No HTTP requests
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
—
—
4.231.128.59:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
4
System
192.168.100.255:137
—
—
—
whitelisted
4
System
192.168.100.255:138
—
—
—
whitelisted
7376
slui.exe
40.91.76.224:443
activation-v2.sls.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
whitelisted
7284
slui.exe
40.91.76.224:443
activation-v2.sls.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
whitelisted

DNS requests

Domain
IP
Reputation
settings-win.data.microsoft.com
  • 4.231.128.59
whitelisted
google.com
  • 142.250.186.46
whitelisted
activation-v2.sls.microsoft.com
  • 40.91.76.224
whitelisted

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
2025-05-18_e64057cc4ae304cda37b2514ac0497f6_black-basta_elex_swisyn