Overview
overview
10Static
static
10PolarisTri...ip.dll
windows10-2004-x64
1PolarisTri...I2.dll
windows10-2004-x64
1PolarisTri...ge.exe
windows10-2004-x64
1PolarisTri...er.dll
windows10-2004-x64
1PolarisTri...al.exe
windows10-2004-x64
10PolarisTri...es.dll
windows10-2004-x64
1PolarisTri...er.dll
windows10-2004-x64
1PolarisTri...on.dll
windows10-2004-x64
1PolarisTri...rs.dll
windows10-2004-x64
1PolarisTri...ce.dll
windows10-2004-x64
1PolarisTri...ta.dll
windows10-2004-x64
1PolarisTri...ry.dll
windows10-2004-x64
1PolarisTri...rs.dll
windows10-2004-x64
1PolarisTri...fe.dll
windows10-2004-x64
1PolarisTri...eb.dll
windows10-2004-x64
1PolarisTri...on.dll
windows10-2004-x64
1PolarisTri...ls.dll
windows10-2004-x64
1PolarisTri...ns.dll
windows10-2004-x64
1PolarisTri...le.dll
windows10-2004-x64
1PolarisTri...as.dll
windows10-2004-x64
1Analysis
-
max time kernel
17s -
max time network
26s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-es -
resource tags
arch:x64arch:x86image:win10v2004-20221111-eslocale:es-esos:windows10-2004-x64systemwindows -
submitted
21-01-2023 10:51
Behavioral task
behavioral1
Sample
PolarisTrial/DotNetZip.dll
Resource
win10v2004-20221111-es
Behavioral task
behavioral2
Sample
PolarisTrial/Guna.UI2.dll
Resource
win10v2004-20220812-es
Behavioral task
behavioral3
Sample
PolarisTrial/ILMerge.exe
Resource
win10v2004-20220812-es
Behavioral task
behavioral4
Sample
PolarisTrial/Microsoft.Win32.TaskScheduler.dll
Resource
win10v2004-20221111-es
Behavioral task
behavioral5
Sample
PolarisTrial/PolarisTrial.exe
Resource
win10v2004-20221111-es
Behavioral task
behavioral6
Sample
PolarisTrial/Tools/Microsoft.Bcl.AsyncInterfaces.dll
Resource
win10v2004-20220812-es
Behavioral task
behavioral7
Sample
PolarisTrial/Tools/Microsoft.Win32.TaskScheduler.dll
Resource
win10v2004-20220812-es
Behavioral task
behavioral8
Sample
PolarisTrial/Tools/Newtonsoft.Json.dll
Resource
win10v2004-20221111-es
Behavioral task
behavioral9
Sample
PolarisTrial/Tools/System.Buffers.dll
Resource
win10v2004-20220812-es
Behavioral task
behavioral10
Sample
PolarisTrial/Tools/System.Diagnostics.DiagnosticSource.dll
Resource
win10v2004-20221111-es
Behavioral task
behavioral11
Sample
PolarisTrial/Tools/System.Memory.Data.dll
Resource
win10v2004-20221111-es
Behavioral task
behavioral12
Sample
PolarisTrial/Tools/System.Memory.dll
Resource
win10v2004-20220812-es
Behavioral task
behavioral13
Sample
PolarisTrial/Tools/System.Numerics.Vectors.dll
Resource
win10v2004-20221111-es
Behavioral task
behavioral14
Sample
PolarisTrial/Tools/System.Runtime.CompilerServices.Unsafe.dll
Resource
win10v2004-20220812-es
Behavioral task
behavioral15
Sample
PolarisTrial/Tools/System.Text.Encodings.Web.dll
Resource
win10v2004-20221111-es
Behavioral task
behavioral16
Sample
PolarisTrial/Tools/System.Text.Json.dll
Resource
win10v2004-20221111-es
Behavioral task
behavioral17
Sample
PolarisTrial/Tools/System.Threading.Channels.dll
Resource
win10v2004-20220812-es
Behavioral task
behavioral18
Sample
PolarisTrial/Tools/System.Threading.Tasks.Extensions.dll
Resource
win10v2004-20220812-es
Behavioral task
behavioral19
Sample
PolarisTrial/Tools/System.ValueTuple.dll
Resource
win10v2004-20221111-es
Behavioral task
behavioral20
Sample
PolarisTrial/Tools/yas.dll
Resource
win10v2004-20220812-es
General
-
Target
PolarisTrial/DotNetZip.dll
-
Size
461KB
-
MD5
a999d7f3807564cc816c16f862a60bbe
-
SHA1
1ee724daaf70c6b0083bf589674b6f6d8427544f
-
SHA256
8e9c0362e9bfb3c49af59e1b4d376d3e85b13aed0fbc3f5c0e1ebc99c07345f3
-
SHA512
6f1f73314d86ae324cc7f55d8e6352e90d4a47f0200671f7069daa98592daaceea34cf89b47defbecdda7d3b3e4682de70e80a5275567b82aa81b002958e4414
-
SSDEEP
6144:DuCInHLhJI4FY/ixjci6ychf8xalGQGtSV41kJDsTDDpBnse6OVxLV/W:3QL32ikCaUS4csRBse6sfW
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\PolarisTrial\DotNetZip.dll,#11⤵
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵