Overview

overview

4

Static

static

1

mode/Sentry.dll

windows10-1703-x64

1

mode/Syste...rs.dll

windows10-1703-x64

1

mode/Syste...le.dll

windows10-1703-x64

1

mode/Syste...ry.dll

windows10-1703-x64

1

mode/Syste...rs.dll

windows10-1703-x64

1

mode/Syste...ta.dll

windows10-1703-x64

1

mode/Syste...fe.dll

windows10-1703-x64

1

mode/Syste...ol.dll

windows10-1703-x64

1

mode/Syste...ws.dll

windows10-1703-x64

1

mode/Syste...eb.dll

windows10-1703-x64

1

mode/Syste...on.dll

windows10-1703-x64

1

mode/Syste...ns.dll

windows10-1703-x64

1

mode/Syste...le.dll

windows10-1703-x64

1

mode/Syste...ty.dll

windows10-1703-x64

1

mode/TapIn...CA.dll

windows10-1703-x64

4

mode/TapInstaller.dll

windows10-1703-x64

1

mode/de-DE...es.dll

windows10-1703-x64

1

mode/en-US...es.dll

windows10-1703-x64

1

mode/es-41...es.dll

windows10-1703-x64

1

mode/es-ES...es.dll

windows10-1703-x64

1

mode/fa-IR...es.dll

windows10-1703-x64

1

mode/fr-FR...es.dll

windows10-1703-x64

1

mode/hr-HR...es.dll

windows10-1703-x64

1

mode/id-ID...es.dll

windows10-1703-x64

1

mode/it-IT...es.dll

windows10-1703-x64

1

mode/log4net.dll

windows10-1703-x64

1

mode/nl-NL...es.dll

windows10-1703-x64

1

mode/pl-PL...es.dll

windows10-1703-x64

1

mode/pt-BR...es.dll

windows10-1703-x64

1

mode/pt-PT...es.dll

windows10-1703-x64

1

mode/ru-RU...es.dll

windows10-1703-x64

1

mode/runti...er.dll

windows10-1703-x64

1

Analysis

  • max time kernel
    124s
  • max time network
    135s
  • platform
    windows10-1703_x64
  • resource
    win10-20230915-en
  • resource tags

    arch:x64arch:x86image:win10-20230915-enlocale:en-usos:windows10-1703-x64system
  • submitted
    13/10/2023, 18:02

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    mode/fa-IR/ProtonVPN.Translations.resources.dll

  • Size

    106KB

  • MD5

    67b44f2030c55591f5caa476fb7b5eb0

  • SHA1

    723a7bdc1592554dd3dfe6e6c1721a822c99cef2

  • SHA256

    8abe7dd26fa0e6f1fa44f1d57d9dfc7ba5bbc57cc1b4efb4d47791440947ef49

  • SHA512

    90a25dc32612d8fece391749720836cf73fecc8f95f4d3fd4b8050b19c6ea483890e8c733511c0d9736245bed66477fd701cdded86cd30cb4ff404b827ed7a37

  • SSDEEP

    1536:lHF3z6ra67w/7yNwsh4ZMvw2/fj9ftEkYGzxdXWBT4SmIr:hFD6ra6k/7yNheyV5fb4T4SmI

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\mode\fa-IR\ProtonVPN.Translations.resources.dll,#1
    1⤵
      PID:2440

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads