Overview

overview

4

Static

static

1

mode/Sentry.dll

windows10-1703-x64

1

mode/Syste...rs.dll

windows10-1703-x64

1

mode/Syste...le.dll

windows10-1703-x64

1

mode/Syste...ry.dll

windows10-1703-x64

1

mode/Syste...rs.dll

windows10-1703-x64

1

mode/Syste...ta.dll

windows10-1703-x64

1

mode/Syste...fe.dll

windows10-1703-x64

1

mode/Syste...ol.dll

windows10-1703-x64

1

mode/Syste...ws.dll

windows10-1703-x64

1

mode/Syste...eb.dll

windows10-1703-x64

1

mode/Syste...on.dll

windows10-1703-x64

1

mode/Syste...ns.dll

windows10-1703-x64

1

mode/Syste...le.dll

windows10-1703-x64

1

mode/Syste...ty.dll

windows10-1703-x64

1

mode/TapIn...CA.dll

windows10-1703-x64

4

mode/TapInstaller.dll

windows10-1703-x64

1

mode/de-DE...es.dll

windows10-1703-x64

1

mode/en-US...es.dll

windows10-1703-x64

1

mode/es-41...es.dll

windows10-1703-x64

1

mode/es-ES...es.dll

windows10-1703-x64

1

mode/fa-IR...es.dll

windows10-1703-x64

1

mode/fr-FR...es.dll

windows10-1703-x64

1

mode/hr-HR...es.dll

windows10-1703-x64

1

mode/id-ID...es.dll

windows10-1703-x64

1

mode/it-IT...es.dll

windows10-1703-x64

1

mode/log4net.dll

windows10-1703-x64

1

mode/nl-NL...es.dll

windows10-1703-x64

1

mode/pl-PL...es.dll

windows10-1703-x64

1

mode/pt-BR...es.dll

windows10-1703-x64

1

mode/pt-PT...es.dll

windows10-1703-x64

1

mode/ru-RU...es.dll

windows10-1703-x64

1

mode/runti...er.dll

windows10-1703-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    132s
  • platform
    windows10-1703_x64
  • resource
    win10-20230915-en
  • resource tags

    arch:x64arch:x86image:win10-20230915-enlocale:en-usos:windows10-1703-x64system
  • submitted
    13-10-2023 18:02

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    mode/pt-BR/ProtonVPN.Translations.resources.dll

  • Size

    93KB

  • MD5

    614c22625dee7de8fd46a6c2622d4db9

  • SHA1

    ee09969b055b16a86b6f489d9cf477c464707f6f

  • SHA256

    e33cd2ba1f5d3e4d0918ca28bc3014b1273000028293e5d84119e4fa7bda95f9

  • SHA512

    4fe1bb85b7d8c788b5de06ab2cd481d0ea7117933566dd1059fd8830227294b85c8e132545911c48fe955404580ff85e6f49cb18c9a855086691ac4ec966dd78

  • SSDEEP

    768:BTF62Jnp6ra62/2ubmrfsFDhLyU3wheaM50boOc1TSQSBfIc5SS29aQMKFKcMk:VF3z6ra62dkKhLyUAoQq1TSt55upMIr

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\mode\pt-BR\ProtonVPN.Translations.resources.dll,#1
    1⤵
      PID:2600

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads