a135c624af7aba4da0128dc5e870d37f2a7b206576d592c94660a416dac2d117 | Triage

Submit
Reports

Overview

overview

3

Static

static

3

BouncyCast...to.dll

windows7-x64

1

BouncyCast...to.dll

windows10-2004-x64

1

BrotliSharpLib.dll

windows7-x64

1

BrotliSharpLib.dll

windows10-2004-x64

1

DiscordRPC.dll

windows7-x64

1

DiscordRPC.dll

windows10-2004-x64

1

Downloader.dll

windows7-x64

1

Downloader.dll

windows10-2004-x64

1

ICSharpCod...ib.dll

windows7-x64

1

ICSharpCod...ib.dll

windows10-2004-x64

1

Memory.dll

windows7-x64

1

Memory.dll

windows10-2004-x64

1

MetadataConverter.dll

windows7-x64

1

MetadataConverter.dll

windows10-2004-x64

1

Newtonsoft.Json.dll

windows7-x64

1

Newtonsoft.Json.dll

windows10-2004-x64

1

RestSharp.dll

windows7-x64

1

RestSharp.dll

windows10-2004-x64

1

System.Management.dll

windows7-x64

1

System.Management.dll

windows10-2004-x64

1

Titanium.W...xy.dll

windows7-x64

1

Titanium.W...xy.dll

windows10-2004-x64

1

YuukiPS.exe

windows7-x64

1

YuukiPS.exe

windows10-2004-x64

1

YuukiPS.exe

windows7-x64

1

YuukiPS.exe

windows10-2004-x64

1

runtimes/w...nt.dll

windows7-x64

1

runtimes/w...nt.dll

windows10-2004-x64

1

Analysis

max time kernel
182s
max time network
198s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
11-10-2023 13:26

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

BouncyCastle.Crypto.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

BouncyCastle.Crypto.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

BrotliSharpLib.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

BrotliSharpLib.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

DiscordRPC.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

DiscordRPC.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Downloader.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Downloader.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

ICSharpCode.SharpZipLib.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

ICSharpCode.SharpZipLib.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Memory.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Memory.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

MetadataConverter.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

MetadataConverter.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Newtonsoft.Json.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Newtonsoft.Json.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

RestSharp.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

RestSharp.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

System.Management.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

System.Management.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Titanium.Web.Proxy.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Titanium.Web.Proxy.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

YuukiPS.exe

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

YuukiPS.exe

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

YuukiPS.exe

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

YuukiPS.exe

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

runtimes/win/lib/net6.0/System.Management.dll

Resource

win7-20230831-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

runtimes/win/lib/net6.0/System.Management.dll

Resource

win10v2004-20230915-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

RestSharp.dll
Size

156KB
MD5

828194f6e9fe4f51c08415e457288479
SHA1

5982d431ee6737c1f56b96321bfe558a491c467c
SHA256

066a06b48f291d9ac27ce85a530f53a89ca2e2c26e5ec3916f22bf165941ce62
SHA512

26f7d639da30eaa8ce0e901386f3b7761b03d23bd9984dbbb6dfff87d5b7ecf9ad86e95e386fe2f9d66a3fe5c652b30faca01bd3561e40d80070feefd45c1c15
SSDEEP

3072:pLI4ri9X6c8rcCUUyzKkrexZjexjNZoYMLbZF/jqpkMdNBwMNw:q4rm6dMzPexGgLtMdNBnN

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\RestSharp.dll,#1
1⤵
PID:5084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy