Overview

overview

9

Static

static

7

first rele...am.exe

windows10-1703-x64

9

first rele...or.exe

windows10-1703-x64

1

first rele...om.dll

windows10-1703-x64

3

first rele...x.html

windows10-1703-x64

1

first rele...4c6.js

windows10-1703-x64

1

first rele...ff5.js

windows10-1703-x64

1

first rele...6c2.js

windows10-1703-x64

1

first rele...139.js

windows10-1703-x64

1

first rele...f4a.js

windows10-1703-x64

1

first rele...3ed.js

windows10-1703-x64

1

first rele...2cd.js

windows10-1703-x64

1

first rele...6c6.js

windows10-1703-x64

1

first rele...927.js

windows10-1703-x64

1

first rele...563.js

windows10-1703-x64

1

first rele...d05.js

windows10-1703-x64

1

first rele...1cc.js

windows10-1703-x64

1

first rele...ffe.js

windows10-1703-x64

1

first rele...dc1.js

windows10-1703-x64

1

first rele...de8.js

windows10-1703-x64

1

first rele...ll.bat

windows10-1703-x64

1

first rele...ver.py

windows10-1703-x64

3

first rele...rt.bat

windows10-1703-x64

1

Analysis

  • max time kernel
    143s
  • max time network
    148s
  • platform
    windows10-1703_x64
  • resource
    win10-20220901-en
  • resource tags

    arch:x64arch:x86image:win10-20220901-enlocale:en-usos:windows10-1703-x64system
  • submitted
    10-02-2023 18:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    first release/client/vroom.dll

  • Size

    240KB

  • MD5

    7f0fffa941f0023e712e206f41a0a007

  • SHA1

    a94bf2fc9b5cb4905f1c7aa48264691f9b6e989e

  • SHA256

    afef6425e53b671cf3aa440735c91ab3d467f1d95cd7f0c77eefe4f01bb97379

  • SHA512

    0cbf98368eaef48bf6258a78b2f75d7af0529b87870c068486612cf0c845cd26032221e64ffa0b89aae41d55628be31c9553eb870b059df81e1378e495a50ab5

  • SSDEEP

    3072:OHoyJqA3Jq/06BfOICuOyi2Pqq/+xdAerJgGsLByxX5OpoY46yvkve6jTIoBWa:OZqoJ006BmhuOyixqoOeyZoh+IoBv

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\first release\client\vroom.dll",#1
    1⤵
      PID:2688
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 2688 -s 440
        2⤵
        • Program crash
        PID:4868

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads