Overview

overview

10

Static

static

1

IRomvWG3/HTCTL32.dll

windows7-x64

1

IRomvWG3/HTCTL32.dll

windows10-2004-x64

3

IRomvWG3/PCICHEK.dll

windows7-x64

1

IRomvWG3/PCICHEK.dll

windows10-2004-x64

1

IRomvWG3/PCICL32.dll

windows7-x64

1

IRomvWG3/PCICL32.dll

windows10-2004-x64

1

IRomvWG3/TCCTL32.dll

windows7-x64

1

IRomvWG3/TCCTL32.dll

windows10-2004-x64

1

IRomvWG3/msvcr100.dll

windows7-x64

3

IRomvWG3/msvcr100.dll

windows10-2004-x64

3

IRomvWG3/pcicapi.dll

windows7-x64

1

IRomvWG3/pcicapi.dll

windows10-2004-x64

1

IRomvWG3/p...st.exe

windows7-x64

10

IRomvWG3/p...st.exe

windows10-2004-x64

10

IRomvWG3/r...ub.exe

windows7-x64

1

IRomvWG3/r...ub.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    02/11/2023, 09:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    IRomvWG3/remcmdstub.exe

  • Size

    62KB

  • MD5

    6fca49b85aa38ee016e39e14b9f9d6d9

  • SHA1

    b0d689c70e91d5600ccc2a4e533ff89bf4ca388b

  • SHA256

    fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814

  • SHA512

    f9c90029ff3dea84df853db63dace97d1c835a8cf7b6a6227a5b6db4abe25e9912dfed6967a88a128d11ab584663e099bf80c50dd879242432312961c0cfe622

  • SSDEEP

    1536:Tf6fvDuNcAjJMBUHYBlXU1wT2JFqy9BQhiK:D6f7cjJ4U4I1jFqy92hiK

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\IRomvWG3\remcmdstub.exe
    "C:\Users\Admin\AppData\Local\Temp\IRomvWG3\remcmdstub.exe"
    1⤵
      PID:1408

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads