6715c0eff16eb7fb62b4e3c5f355b0548c695e5b12705a731a9abb4f8c7fef31

Submit
Reports

Overview

overview

Static

static

Serilog.dll

windows7-x64

Serilog.dll

windows10-2004-x64

Setup.exe

windows7-x64

Setup.exe

windows10-2004-x64

Seven.dll

windows7-x64

Seven.dll

windows10-2004-x64

V2.dll

windows7-x64

V2.dll

windows10-2004-x64

d2.dll

windows7-x64

d2.dll

windows10-2004-x64

data/App/D...p2.scr

windows7-x64

data/App/D...p2.scr

windows10-2004-x64

data/App/D...p3.scr

windows7-x64

data/App/D...p3.scr

windows10-2004-x64

data/App/D...p5.scr

windows7-x64

data/App/D...p5.scr

windows10-2004-x64

data/App/D...p7.scr

windows7-x64

data/App/D...p7.scr

windows10-2004-x64

data/App/D...p8.scr

windows7-x64

data/App/D...p8.scr

windows10-2004-x64

data/App/D...p9.scr

windows7-x64

data/App/D...p9.scr

windows10-2004-x64

data/App/P...re.dll

windows7-x64

data/App/P...re.dll

windows10-2004-x64

data/App/P...pa.exe

windows7-x64

data/App/P...pa.exe

windows10-2004-x64

data/App/x...al.pdf

windows7-x64

data/App/x...al.pdf

windows10-2004-x64

data/App/x...ll.dll

windows7-x64

data/App/x...ll.dll

windows10-2004-x64

data/App/x...64.dll

windows7-x64

data/App/x...64.dll

windows10-2004-x64

Analysis

max time kernel
63s
max time network
181s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
24-10-2022 13:25

Sharing

Copy URL

Twitter E-mail

Static task

static1

pdf link

2 signatures

Behavioral task

behavioral1

Sample

Serilog.dll

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Serilog.dll

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Setup.exe

Resource

win7-20220901-en

discovery spyware upx

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral4

Sample

Setup.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

Seven.dll

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Seven.dll

Resource

win10v2004-20220901-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

V2.dll

Resource

win7-20220812-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

V2.dll

Resource

win10v2004-20220812-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

d2.dll

Resource

win7-20220812-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

d2.dll

Resource

win10v2004-20220901-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

data/App/Documents/Image-Line/FL Studio/Settings/Browser/Snap2.scr

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

data/App/Documents/Image-Line/FL Studio/Settings/Browser/Snap2.scr

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

data/App/Documents/Image-Line/FL Studio/Settings/Browser/Snap3.scr

Resource

win7-20220901-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

data/App/Documents/Image-Line/FL Studio/Settings/Browser/Snap3.scr

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

data/App/Documents/Image-Line/FL Studio/Settings/Browser/Snap5.scr

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

data/App/Documents/Image-Line/FL Studio/Settings/Browser/Snap5.scr

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

data/App/Documents/Image-Line/FL Studio/Settings/Browser/Snap7.scr

Resource

win7-20220901-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

data/App/Documents/Image-Line/FL Studio/Settings/Browser/Snap7.scr

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

data/App/Documents/Image-Line/FL Studio/Settings/Browser/Snap8.scr

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

data/App/Documents/Image-Line/FL Studio/Settings/Browser/Snap8.scr

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

data/App/Documents/Image-Line/FL Studio/Settings/Browser/Snap9.scr

Resource

win7-20220901-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

data/App/Documents/Image-Line/FL Studio/Settings/Browser/Snap9.scr

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

data/App/Program Files/Common Files/VST2/Propellerhead Software/ReWire/ReWire.dll

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

data/App/Program Files/Common Files/VST2/Propellerhead Software/ReWire/ReWire.dll

Resource

win10v2004-20220901-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

data/App/Program Files/Common Files/VST2/zalupa.exe

Resource

win7-20220812-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

data/App/Program Files/Common Files/VST2/zalupa.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

data/App/x64/ASIO4ALL v2/ASIO4ALL v2 Instruction Manual.pdf

Resource

win7-20220812-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

data/App/x64/ASIO4ALL v2/ASIO4ALL v2 Instruction Manual.pdf

Resource

win10v2004-20220901-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral29

Sample

data/App/x64/ASIO4ALL v2/asio4all.dll

Resource

win7-20220812-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

data/App/x64/ASIO4ALL v2/asio4all.dll

Resource

win10v2004-20220812-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral31

Sample

data/App/x64/ASIO4ALL v2/asio4all64.dll

Resource

win7-20220812-en

persistence

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

data/App/x64/ASIO4ALL v2/asio4all64.dll

Resource

win10v2004-20220812-en

persistence

windows10-2004-x64

2 signatures

150 seconds

Report Analysis Logs

General

Target

d2.dll
Size

976KB
MD5

b6dde6f8a1b88fe4aae962064a6f5271
SHA1

177543d5128191e4eabeabd4e99041ff4d193652
SHA256

a9f8f9c014a760b568212c99f17f2c1b4e0e4d6082f9971d04bd3250fa931927
SHA512

8c28819c5fc8c449b1ca6b395ff35deb099a44f857be35323347834c3285c87d65067b547eb6dead26183a06499f0324445103f03ca35935a2016e2e0af09115
SSDEEP

24576:2jveAn9tcCk5sYGKbqKmKVHIhMkVdyfcoET3qU/1+:2R9tcCEsd69GoAc

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 2264 wrote to memory of 2376	2264	rundll32.exe	rundll32.exe
PID 2264 wrote to memory of 2376	2264	rundll32.exe	rundll32.exe
PID 2264 wrote to memory of 2376	2264	rundll32.exe	rundll32.exe

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\d2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2264
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\d2.dll,#1
  2⤵
  PID:2376

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads