Overview

overview

7

Static

static

OBS/Config...gc.dll

windows7-x64

1

OBS/Config...gc.dll

windows10-2004-x64

OBS/Config...ck.dll

windows7-x64

OBS/Config...ck.dll

windows10-2004-x64

1

OBS/Config...xy.dll

windows7-x64

1

OBS/Config...xy.dll

windows10-2004-x64

OBS/Config...xe.dll

windows7-x64

OBS/Config...xe.dll

windows10-2004-x64

1

OBS/Config...ys.dll

windows7-x64

1

OBS/Config...ys.dll

windows10-2004-x64

1

OBS/Config...32.dll

windows7-x64

OBS/Config...32.dll

windows10-2004-x64

1

OBS/Config...32.dll

windows7-x64

OBS/Config...32.dll

windows10-2004-x64

OBS/Config...ms.dll

windows7-x64

OBS/Config...ms.dll

windows10-2004-x64

OBS/Config...ng.dll

windows7-x64

OBS/Config...ng.dll

windows10-2004-x64

1

OBS/Config...sg.dll

windows7-x64

OBS/Config...sg.dll

windows10-2004-x64

1

OBS/Config...vs.dll

windows7-x64

1

OBS/Config...vs.dll

windows10-2004-x64

OBS/Config...ml.dll

windows7-x64

1

OBS/Config...ml.dll

windows10-2004-x64

OBS/Config...lt.dll

windows7-x64

1

OBS/Config...lt.dll

windows10-2004-x64

OBS/Config...xe.dll

windows7-x64

OBS/Config...xe.dll

windows10-2004-x64

1

OBS/Config...xe.dll

windows7-x64

1

OBS/Config...xe.dll

windows10-2004-x64

1

OBS/Config...ys.dll

windows7-x64

OBS/Config...ys.dll

windows10-2004-x64

1

Analysis

  • max time network
    221s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15-01-2023 19:36

Sharing

Copy URL
Twitter E-mail

Errors

Reason
Reading agent response: read tcp 10.127.0.1:33126->10.127.0.21:8000: read: connection timed out
Report Analysis Logs

General

  • Target

    OBS/Configuration/About/cs-CZ/msprivs.dll

  • Size

    5KB

  • MD5

    7d4f6c3cdf91c4d7ee0b77d7397ef399

  • SHA1

    3aafc4a4730328724e33599ed5922a2aaec4ff47

  • SHA256

    6d01c46a5e7e5f4334c8caaa7b105b9b349831443f25b20cfb569f6531e50eb2

  • SHA512

    beb6c6d6dff9b1679c482807b75028f9ea798f51b3a75b2b3d8cf77db8ca4f9152158ee8321c1cfe29e722cb2eddfe4b9045b49dde3ba4c245f3582985e222ae

  • SSDEEP

    96:UgEME7BVd1zWWmVeeu6EPvj+xt+kNZnjo/nKU5suve4NWPw/8:UxMgVOWmAao+xBNlo/JeqWPw/8

Score
7/10

Malware Config

Signatures

  • Unexpected DNS network traffic destination 3 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads