be8c72e77bd4a9453a3ffbf89383ca1487c650c3eb006b8c58e5e6490089b38c | Triage

Submit
Reports

Overview

overview

Static

static

BlitzedPrem.7z

windows7-x64

3

BlitzedPrem.7z

windows10-2004-x64

3

APIFOR.dll

windows7-x64

1

APIFOR.dll

windows10-2004-x64

1

BlitzedGrabberV14.exe

windows7-x64

BlitzedGrabberV14.exe

windows10-2004-x64

BlitzedGrabberV14.pdb

windows7-x64

3

BlitzedGrabberV14.pdb

windows10-2004-x64

3

Costura.dll

windows7-x64

1

Costura.dll

windows10-2004-x64

1

DiscordRPC.dll

windows7-x64

1

DiscordRPC.dll

windows10-2004-x64

1

Guna.UI2.dll

windows7-x64

1

Guna.UI2.dll

windows10-2004-x64

1

Newtonsoft.Json.dll

windows7-x64

1

Newtonsoft.Json.dll

windows10-2004-x64

1

Sodium.dll

windows7-x64

1

Sodium.dll

windows10-2004-x64

1

System.Dia...ce.dll

windows7-x64

1

System.Dia...ce.dll

windows10-2004-x64

1

Vestris.Re...ib.dll

windows7-x64

1

Vestris.Re...ib.dll

windows10-2004-x64

1

dnlib.dll

windows7-x64

1

dnlib.dll

windows10-2004-x64

1

libsodium-64.dll

windows7-x64

1

libsodium-64.dll

windows10-2004-x64

1

libsodium.dll

windows7-x64

1

libsodium.dll

windows10-2004-x64

1

Analysis

max time kernel
93s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
23-04-2023 15:14

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

BlitzedPrem.7z

Resource

win7-20230220-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

BlitzedPrem.7z

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

APIFOR.dll

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

APIFOR.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

BlitzedGrabberV14.exe

Resource

win7-20230220-en

xworm rat trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral6

Sample

BlitzedGrabberV14.exe

Resource

win10v2004-20230220-en

xworm persistence rat trojan

windows10-2004-x64

14 signatures

150 seconds

Behavioral task

behavioral7

Sample

BlitzedGrabberV14.pdb

Resource

win7-20230220-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

BlitzedGrabberV14.pdb

Resource

win10v2004-20230220-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

Costura.dll

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Costura.dll

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

DiscordRPC.dll

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

DiscordRPC.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Guna.UI2.dll

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Guna.UI2.dll

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Newtonsoft.Json.dll

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Newtonsoft.Json.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Sodium.dll

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Sodium.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

System.Diagnostics.DiagnosticSource.dll

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

System.Diagnostics.DiagnosticSource.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Vestris.ResourceLib.dll

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Vestris.ResourceLib.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

dnlib.dll

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

dnlib.dll

Resource

win10v2004-20230221-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

libsodium-64.dll

Resource

win7-20230220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

libsodium-64.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

libsodium.dll

Resource

win7-20230220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

libsodium.dll

Resource

win10v2004-20230220-en

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

Vestris.ResourceLib.dll
Size

75KB
MD5

6ceb6c2788498c18d43deff634a7cbe4
SHA1

bf13d97c49552fa35b0fc5550f4dd3442cf9fe7a
SHA256

6d4df46db20da580ca269ae94bbecb93ae1162da1c6b4cbc86850185f8ae156c
SHA512

8573376f7a93e116773e0cfc186b6b79c834537e2d2c2c32512f1edf684dc1bb7a71b23be074eabceaabe54025c74e877fd46ffd6fa4806e82cf418b89a2673e
SSDEEP

1536:4SHviIDAqoPf5lYvBE7+IXIKr/3RxOcVVG3vKZYgmC8ITPzw3fowk6drYMOHaJIp:4SHvPDAqoPf5lYvBE7+IXXr/hxOcVVGE

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Vestris.ResourceLib.dll,#1
1⤵
PID:2924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy