Overview

overview

4

Static

static

1

mode/Sentry.dll

windows10-1703-x64

1

mode/Syste...rs.dll

windows10-1703-x64

1

mode/Syste...le.dll

windows10-1703-x64

1

mode/Syste...ry.dll

windows10-1703-x64

1

mode/Syste...rs.dll

windows10-1703-x64

1

mode/Syste...ta.dll

windows10-1703-x64

1

mode/Syste...fe.dll

windows10-1703-x64

1

mode/Syste...ol.dll

windows10-1703-x64

1

mode/Syste...ws.dll

windows10-1703-x64

1

mode/Syste...eb.dll

windows10-1703-x64

1

mode/Syste...on.dll

windows10-1703-x64

1

mode/Syste...ns.dll

windows10-1703-x64

1

mode/Syste...le.dll

windows10-1703-x64

1

mode/Syste...ty.dll

windows10-1703-x64

1

mode/TapIn...CA.dll

windows10-1703-x64

4

mode/TapInstaller.dll

windows10-1703-x64

1

mode/de-DE...es.dll

windows10-1703-x64

1

mode/en-US...es.dll

windows10-1703-x64

1

mode/es-41...es.dll

windows10-1703-x64

1

mode/es-ES...es.dll

windows10-1703-x64

1

mode/fa-IR...es.dll

windows10-1703-x64

1

mode/fr-FR...es.dll

windows10-1703-x64

1

mode/hr-HR...es.dll

windows10-1703-x64

1

mode/id-ID...es.dll

windows10-1703-x64

1

mode/it-IT...es.dll

windows10-1703-x64

1

mode/log4net.dll

windows10-1703-x64

1

mode/nl-NL...es.dll

windows10-1703-x64

1

mode/pl-PL...es.dll

windows10-1703-x64

1

mode/pt-BR...es.dll

windows10-1703-x64

1

mode/pt-PT...es.dll

windows10-1703-x64

1

mode/ru-RU...es.dll

windows10-1703-x64

1

mode/runti...er.dll

windows10-1703-x64

1

Analysis

  • max time kernel
    126s
  • max time network
    138s
  • platform
    windows10-1703_x64
  • resource
    win10-20230915-en
  • resource tags

    arch:x64arch:x86image:win10-20230915-enlocale:en-usos:windows10-1703-x64system
  • submitted
    13/10/2023, 18:02

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    mode/fr-FR/ProtonVPN.Translations.resources.dll

  • Size

    95KB

  • MD5

    8bbcfa1c12d214be49bde58e11dba129

  • SHA1

    114bffbf5bcf6efaf3b7bcd12d3f3b9a1f2084fc

  • SHA256

    da4511cfc71cecc54d368f025ad490eee61075323669391afeb4733f461c39bf

  • SHA512

    bf0b21c58efb30a77d00955b044f56c627c7f40fb92363e280f26d67aa856234181d549d88d1db74ebfc551f84b5d46840b0eb65888f00ce58c211b97ce56841

  • SSDEEP

    1536:sF3z6ra6T25jGP9CmYUCNrjbx8BuqWPPd/0TdPIr:sFD6ra6T3P9CmYUCNrjbEuqGF8TlI

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\mode\fr-FR\ProtonVPN.Translations.resources.dll,#1
    1⤵
      PID:4548

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads