Overview
overview
10Static
static
10Languages/...es.dll
windows10-2004-x64
1Languages/...es.dll
windows10-2004-x64
1Languages/...es.dll
windows10-2004-x64
1MegaApiClient.dll
windows10-2004-x64
1Microsoft....am.dll
windows10-2004-x64
1Microsoft....er.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1Recorder-d...up.exe
windows10-2004-x64
8Renci.SshNet.dll
windows10-2004-x64
1Scheduler.dll
windows10-2004-x64
1ShareX.HelpersLib.dll
windows10-2004-x64
1ShareX.HistoryLib.dll
windows10-2004-x64
1ShareX.Ima...ib.dll
windows10-2004-x64
1ShareX.IndexerLib.dll
windows10-2004-x64
1ShareX.MediaLib.dll
windows10-2004-x64
1ShareX.Scr...ib.dll
windows10-2004-x64
1ShareX.Upl...ib.dll
windows10-2004-x64
1ShareX.exe
windows10-2004-x64
6ShareX.exe.xml
windows10-2004-x64
1ShareX_Nat...st.exe
windows10-2004-x64
1System.Buffers.dll
windows10-2004-x64
1System.Memory.dll
windows10-2004-x64
1System.Num...rs.dll
windows10-2004-x64
1System.Run...fe.dll
windows10-2004-x64
1Telerik.Wi...or.dll
windows10-2004-x64
1Telerik.Wi...UI.dll
windows10-2004-x64
1Telerik.Wi...ls.dll
windows10-2004-x64
1Telerik.Wi...re.dll
windows10-2004-x64
1Telerik.Wi...ip.dll
windows10-2004-x64
1TelerikCommon.dll
windows10-2004-x64
1zxing.dll
windows10-2004-x64
1zxing.pres...on.dll
windows10-2004-x64
1Analysis
-
max time kernel
88s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
14-12-2022 11:47
Behavioral task
behavioral1
Sample
Languages/zh-TW/ShareX.ScreenCaptureLib.resources.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral2
Sample
Languages/zh-TW/ShareX.UploadersLib.resources.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
Languages/zh-TW/ShareX.resources.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral4
Sample
MegaApiClient.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
Microsoft.IO.RecyclableMemoryStream.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral6
Sample
Microsoft.Win32.TaskScheduler.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral8
Sample
Recorder-devices-setup.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral9
Sample
Renci.SshNet.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral10
Sample
Scheduler.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
ShareX.HelpersLib.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral12
Sample
ShareX.HistoryLib.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral13
Sample
ShareX.ImageEffectsLib.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral14
Sample
ShareX.IndexerLib.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral15
Sample
ShareX.MediaLib.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral16
Sample
ShareX.ScreenCaptureLib.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
ShareX.UploadersLib.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral18
Sample
ShareX.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
ShareX.exe.xml
Resource
win10v2004-20220901-en
Behavioral task
behavioral20
Sample
ShareX_NativeMessagingHost.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral21
Sample
System.Buffers.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral22
Sample
System.Memory.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
System.Numerics.Vectors.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral24
Sample
System.Runtime.CompilerServices.Unsafe.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral25
Sample
Telerik.WinControls.RichTextEditor.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral26
Sample
Telerik.WinControls.UI.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral27
Sample
Telerik.WinControls.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral28
Sample
Telerik.Windows.Documents.Core.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral29
Sample
Telerik.Windows.Zip.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral30
Sample
TelerikCommon.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral31
Sample
zxing.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral32
Sample
zxing.presentation.dll
Resource
win10v2004-20221111-en
General
-
Target
ShareX_NativeMessagingHost.exe
-
Size
6KB
-
MD5
bd3beb5c29aa4b130c5a14f92105f08d
-
SHA1
2d5d88da1d97ab278405041c664196be8722bcbb
-
SHA256
c20d712950bbb5d5c96524532225846685c0e2531dfc52215de030673c125a38
-
SHA512
32840e97c4abc1625e147ca868a3fc2d34c9720ffe3743986ed723c8c657ec93977c7e332f172859ada6c2f2f8495d0d51393cf05e6244d5cd831320848a8b55
-
SSDEEP
48:6bi5wicAbSWWBSg+RpMmAv5RtUXHb8wiV18zdhGF1lZx+AqbDoqcluWW8kmxe0NY:IicAbSWxgy45RLwQYdoPl+A8c2KzNt
Malware Config
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4292-132-0x00000136AE210000-0x00000136AE218000-memory.dmpFilesize
32KB
-
memory/4292-133-0x00000136C86C0000-0x00000136C87D8000-memory.dmpFilesize
1.1MB
-
memory/4292-134-0x00007FFDC06F0000-0x00007FFDC11B1000-memory.dmpFilesize
10.8MB
-
memory/4292-135-0x00007FFDC06F0000-0x00007FFDC11B1000-memory.dmpFilesize
10.8MB