Overview

overview

3

Static

static

3

Config/Plu...64.dll

windows7-x64

1

Config/Plu...64.dll

windows10-2004-x64

1

Config/Plu...64.dll

windows7-x64

1

Config/Plu...64.dll

windows10-2004-x64

1

Config/Plu...86.dll

windows7-x64

1

Config/Plu...86.dll

windows10-2004-x64

1

Config/Plu...es.dll

windows7-x64

1

Config/Plu...es.dll

windows10-2004-x64

1

Config/amd...st.dll

windows7-x64

3

Config/amd...st.dll

windows10-2004-x64

3

Config/amd...er.dll

windows7-x64

1

Config/amd...er.dll

windows10-2004-x64

1

Config/amd...ot.exe

windows7-x64

1

Config/amd...ot.exe

windows10-2004-x64

1

Config/amd...pi.dll

windows7-x64

1

Config/amd...pi.dll

windows10-2004-x64

1

Config/amd...dk.exe

windows7-x64

Config/amd...dk.exe

windows10-2004-x64

Config/arm...st.dll

windows7-x64

1

Config/arm...st.dll

windows10-2004-x64

1

Config/arm...er.dll

windows7-x64

1

Config/arm...er.dll

windows10-2004-x64

1

Config/x86...st.dll

windows7-x64

3

Config/x86...st.dll

windows10-2004-x64

3

Config/x86...er.dll

windows7-x64

1

Config/x86...er.dll

windows10-2004-x64

1

Config/x86...ot.exe

windows7-x64

1

Config/x86...ot.exe

windows10-2004-x64

1

Config/x86...pi.dll

windows7-x64

1

Config/x86...pi.dll

windows10-2004-x64

1

Config/x86/wofadk.exe

windows7-x64

Config/x86/wofadk.exe

windows10-2004-x64

Analysis

  • max time kernel
    145s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230831-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/09/2023, 01:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Config/arm64/NCleaner.dll

  • Size

    39KB

  • MD5

    6f7a31f96e95d9467f755ec806b768ec

  • SHA1

    c38bdd8ac000818ceb90efd6a7b4f3d387a94fe2

  • SHA256

    62bf4bcd3b3207e9bb8a4097684605a732e820968a9a8835a0f39e9bb67b26f7

  • SHA512

    dcd8aabe6ac35f8ed6ebf12b7706fc56a58d372a8d1458a912b19b63353a14a68a973fcb3eee8fdb964cf10f5aeddd5f33286c2c1f59f1ccbac7730b0b731098

  • SSDEEP

    768:msQs5YSGuwYGCdVOKYSZZ87+02iVJ4TJTLu+Vdx/hL8Zz+fK7:mUTwRCnRYSZf02iVJ0tF78I0

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Config\arm64\NCleaner.dll,#1
    1⤵
      PID:3544

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads