94759b1194a150628556187c1fb455762671ada958c6a8a9e8e25849163e4564

Submit
Reports

Overview

overview

Static

static

Data/packa...64.dll

windows7-x64

Data/packa...64.dll

windows10-2004-x64

Data/packa...re.dll

windows7-x64

Data/packa...re.dll

windows10-2004-x64

Data/packa...ix.xml

windows7-x64

Data/packa...ix.xml

windows10-2004-x64

Data/packa...se.xml

windows7-x64

Data/packa...se.xml

windows10-2004-x64

Data/packa...80.xml

windows7-x64

Data/packa...80.xml

windows10-2004-x64

Data/packa...90.xml

windows7-x64

Data/packa...90.xml

windows10-2004-x64

Data/packa...01.xml

windows7-x64

Data/packa...01.xml

windows10-2004-x64

Data/packa...ve.xml

windows7-x64

Data/packa...ve.xml

windows10-2004-x64

Data/packa...et.xml

windows7-x64

Data/packa...et.xml

windows10-2004-x64

Data/packa...l7.xml

windows7-x64

Data/packa...l7.xml

windows10-2004-x64

Data/packa...00.xml

windows7-x64

Data/packa...00.xml

windows10-2004-x64

Data/packa...70.xml

windows7-x64

Data/packa...70.xml

windows10-2004-x64

Data/packa...90.xml

windows7-x64

Data/packa...90.xml

windows10-2004-x64

Data/packa...dw.xml

windows7-x64

Data/packa...dw.xml

windows10-2004-x64

Data/packa...41.xml

windows7-x64

Data/packa...41.xml

windows10-2004-x64

Data/packa...rv.dll

windows7-x64

Data/packa...rv.dll

windows10-2004-x64

Analysis

max time kernel
212s
max time network
455s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
04-10-2022 16:41

Sharing

Copy URL

Twitter E-mail

Static task

static1

pdf link

1 signatures

Behavioral task

behavioral1

Sample

Data/package/Program Files (x86)/ASIO4ALL v2/asio4all64.dll

Resource

win7-20220901-en

persistence

windows7-x64

2 signatures

300 seconds

Behavioral task

behavioral2

Sample

Data/package/Program Files (x86)/ASIO4ALL v2/asio4all64.dll

Resource

win10v2004-20220812-en

persistence

windows10-2004-x64

2 signatures

300 seconds

Behavioral task

behavioral3

Sample

Data/package/Program Files (x86)/Common Files/Propellerhead Software/ReWire/ReWire.dll

Resource

win7-20220812-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral4

Sample

Data/package/Program Files (x86)/Common Files/Propellerhead Software/ReWire/ReWire.dll

Resource

win10v2004-20220812-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral5

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Cartridges/Informix.xml

Resource

win7-20220812-en

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral6

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Cartridges/Informix.xml

Resource

win10v2004-20220812-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral7

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Cartridges/Sybase.xml

Resource

win7-20220901-en

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral8

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Cartridges/Sybase.xml

Resource

win10v2004-20220812-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral9

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Cartridges/as80.xml

Resource

win7-20220901-en

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral10

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Cartridges/as80.xml

Resource

win10v2004-20220812-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral11

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Cartridges/as90.xml

Resource

win7-20220812-en

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral12

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Cartridges/as90.xml

Resource

win10v2004-20220812-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral13

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Cartridges/db2v0801.xml

Resource

win7-20220812-en

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral14

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Cartridges/db2v0801.xml

Resource

win10v2004-20220812-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral15

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Cartridges/hive.xml

Resource

win7-20220812-en

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral16

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Cartridges/hive.xml

Resource

win10v2004-20220812-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral17

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Cartridges/msjet.xml

Resource

win7-20220812-en

windows7-x64

3 signatures

300 seconds

Behavioral task

behavioral18

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Cartridges/msjet.xml

Resource

win10v2004-20220901-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral19

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Cartridges/orcl7.xml

Resource

win7-20220812-en

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral20

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Cartridges/orcl7.xml

Resource

win10v2004-20220812-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral21

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Cartridges/sql2000.xml

Resource

win7-20220812-en

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral22

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Cartridges/sql2000.xml

Resource

win10v2004-20220812-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral23

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Cartridges/sql70.xml

Resource

win7-20220812-en

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral24

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Cartridges/sql70.xml

Resource

win10v2004-20220901-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral25

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Cartridges/sql90.xml

Resource

win7-20220901-en

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral26

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Cartridges/sql90.xml

Resource

win10v2004-20220901-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral27

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Cartridges/sqlpdw.xml

Resource

win7-20220812-en

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral28

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Cartridges/sqlpdw.xml

Resource

win10v2004-20220812-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral29

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Cartridges/trdtv2r41.xml

Resource

win7-20220812-en

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral30

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Cartridges/trdtv2r41.xml

Resource

win10v2004-20220812-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral31

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Resources/1049/msmdsrv.dll

Resource

win7-20220812-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral32

Sample

Data/package/Program Files (x86)/Microsoft Analysis Services/AS OLEDB/110/Resources/1049/msmdsrv.dll

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

300 seconds

Report Analysis Logs

General

Target

Data/package/Program Files (x86)/Common Files/Propellerhead Software/ReWire/ReWire.dll
Size

1.4MB
MD5

2f3f103405dec980cfa432ea93f92321
SHA1

4dc93f9aaba768a9c7d0473168831fe15d48fc85
SHA256

5b2c3a6727e4d1fcadec1e1ea0fa6055d1d041a52211cc75c2b0330f6a1754df
SHA512

4f7704bd77e336c11cc96f1dd45e2f4e98d78421b12696b89b887fec17027d543de0964177cc40114edb8c5b16b148ad24bb6e5bc9a09fce23f7daa34db5eb8f
SSDEEP

24576:uFxEKn67lrLcZNOHMpOn/rG6V0xmPyMbNzb:uo7Fg/pC2xm6yzb

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 7 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 1980 wrote to memory of 1908	1980	rundll32.exe	rundll32.exe
PID 1980 wrote to memory of 1908	1980	rundll32.exe	rundll32.exe
PID 1980 wrote to memory of 1908	1980	rundll32.exe	rundll32.exe
PID 1980 wrote to memory of 1908	1980	rundll32.exe	rundll32.exe
PID 1980 wrote to memory of 1908	1980	rundll32.exe	rundll32.exe
PID 1980 wrote to memory of 1908	1980	rundll32.exe	rundll32.exe
PID 1980 wrote to memory of 1908	1980	rundll32.exe	rundll32.exe

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Data\package\Program Files (x86)\Common Files\Propellerhead Software\ReWire\ReWire.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1980

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Data\package\Program Files (x86)\Common Files\Propellerhead Software\ReWire\ReWire.dll",#1
2⤵
PID:1908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1908-54-0x0000000000000000-mapping.dmp

Download
memory/1908-55-0x0000000075ED1000-0x0000000075ED3000-memory.dmp

Filesize
8KB

Download