Overview

overview

4

Static

static

1

mode/Sentry.dll

windows10-1703-x64

1

mode/Syste...rs.dll

windows10-1703-x64

1

mode/Syste...le.dll

windows10-1703-x64

1

mode/Syste...ry.dll

windows10-1703-x64

1

mode/Syste...rs.dll

windows10-1703-x64

1

mode/Syste...ta.dll

windows10-1703-x64

1

mode/Syste...fe.dll

windows10-1703-x64

1

mode/Syste...ol.dll

windows10-1703-x64

1

mode/Syste...ws.dll

windows10-1703-x64

1

mode/Syste...eb.dll

windows10-1703-x64

1

mode/Syste...on.dll

windows10-1703-x64

1

mode/Syste...ns.dll

windows10-1703-x64

1

mode/Syste...le.dll

windows10-1703-x64

1

mode/Syste...ty.dll

windows10-1703-x64

1

mode/TapIn...CA.dll

windows10-1703-x64

4

mode/TapInstaller.dll

windows10-1703-x64

1

mode/de-DE...es.dll

windows10-1703-x64

1

mode/en-US...es.dll

windows10-1703-x64

1

mode/es-41...es.dll

windows10-1703-x64

1

mode/es-ES...es.dll

windows10-1703-x64

1

mode/fa-IR...es.dll

windows10-1703-x64

1

mode/fr-FR...es.dll

windows10-1703-x64

1

mode/hr-HR...es.dll

windows10-1703-x64

1

mode/id-ID...es.dll

windows10-1703-x64

1

mode/it-IT...es.dll

windows10-1703-x64

1

mode/log4net.dll

windows10-1703-x64

1

mode/nl-NL...es.dll

windows10-1703-x64

1

mode/pl-PL...es.dll

windows10-1703-x64

1

mode/pt-BR...es.dll

windows10-1703-x64

1

mode/pt-PT...es.dll

windows10-1703-x64

1

mode/ru-RU...es.dll

windows10-1703-x64

1

mode/runti...er.dll

windows10-1703-x64

1

Analysis

  • max time kernel
    125s
  • max time network
    138s
  • platform
    windows10-1703_x64
  • resource
    win10-20230915-en
  • resource tags

    arch:x64arch:x86image:win10-20230915-enlocale:en-usos:windows10-1703-x64system
  • submitted
    13-10-2023 18:02

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    mode/nl-NL/ProtonVPN.Translations.resources.dll

  • Size

    92KB

  • MD5

    9c64af94081c2c1fb625ae955f02f4a8

  • SHA1

    2bc8306c68b825d1a25d74b2732b48dec5fa0c7f

  • SHA256

    041c15c069cc09eaef661c776dd710fd38d03359977040c776a15f4ac8e93883

  • SHA512

    ad6a8e5269886e5bef4a34138ec7cb9c4a5913c58648e2d2497e87c46b4734aed2e31bb1e8f33fb635eef2676a7101486271836c7ff3e2f77c1460feb81a2b62

  • SSDEEP

    1536:TF3z6ra6/hptRp0350REo+gaea5ry0AejjwGM3baIrd1:TFD6ra65XRpe50REoPaea5ryjejjwGMH

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\mode\nl-NL\ProtonVPN.Translations.resources.dll,#1
    1⤵
      PID:3852

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads