Overview

overview

8

Static

static

7

MatSploit.rar

windows7-x64

3

MatSploit.rar

windows10-2004-x64

3

BootsTrapperU.exe

windows7-x64

3

BootsTrapperU.exe

windows10-2004-x64

8

DiscordRPC.dll

windows7-x64

1

DiscordRPC.dll

windows10-2004-x64

1

ICSharpCod...it.dll

windows7-x64

1

ICSharpCod...it.dll

windows10-2004-x64

1

ICSharpCod...it.xml

windows7-x64

1

ICSharpCod...it.xml

windows10-2004-x64

1

MatSploit.exe

windows7-x64

6

MatSploit.exe

windows10-2004-x64

8

bin/Bootst...on.txt

windows7-x64

1

bin/Bootst...on.txt

windows10-2004-x64

1

bin/MatSploit.dll

windows7-x64

8

bin/MatSploit.dll

windows10-2004-x64

8

bin/UIVersion.txt

windows7-x64

1

bin/UIVersion.txt

windows10-2004-x64

1

bin/Zeus.exe

windows7-x64

1

bin/Zeus.exe

windows10-2004-x64

1

bin/lua.xml

windows7-x64

1

bin/lua.xml

windows10-2004-x64

1

bin/rbxfps...er.exe

windows7-x64

1

bin/rbxfps...er.exe

windows10-2004-x64

3

bin/version.txt

windows7-x64

1

bin/version.txt

windows10-2004-x64

1

bin/worksp...29.txt

windows7-x64

1

bin/worksp...29.txt

windows10-2004-x64

1

librarys/d...pc.dll

windows7-x64

3

librarys/d...pc.dll

windows10-2004-x64

3

scripts/LT2.js

windows7-x64

1

scripts/LT2.js

windows10-2004-x64

1

Analysis

  • max time kernel
    29s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    23/03/2023, 16:41

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ICSharpCode.AvalonEdit.dll

  • Size

    604KB

  • MD5

    85525afb01eafb7cd53e171344de4653

  • SHA1

    65e4609b6e1d9d0de5568049687edd84fda6d2d3

  • SHA256

    b5180b33e6bb8f215d69d91a6fab46e2e633b222095bcfcafba2530beb181eab

  • SHA512

    3b30b7b4b32ab72ac0903e2053613bf0cd33c8f54879ca012dee12b319aa598e84329e59fc0edb19ad2b4ba6b6d25c12c88cbb78f655e3e6d6396ce909b10799

  • SSDEEP

    6144:vYFY292KUWr402FLGPbZbhhJNE0YXOfM+kVsjXs+3lR0jqItEkjoM:Qm70Q271E0YXHClfK

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\ICSharpCode.AvalonEdit.dll,#1
    1⤵
      PID:1108

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads