Overview

overview

3

Static

static

3

ConfigKelmis.exe

windows7-x64

1

ConfigKelmis.exe

windows10-2004-x64

1

Kelmis.exe

windows7-x64

1

Kelmis.exe

windows10-2004-x64

1

Kelmis_Dat...ty.dll

windows7-x64

1

Kelmis_Dat...ty.dll

windows10-2004-x64

1

Kelmis_Dat...rp.dll

windows7-x64

1

Kelmis_Dat...rp.dll

windows10-2004-x64

1

Kelmis_Dat...UI.dll

windows7-x64

1

Kelmis_Dat...UI.dll

windows10-2004-x64

1

Kelmis_Dat...ib.dll

windows7-x64

1

Kelmis_Dat...ib.dll

windows10-2004-x64

1

Kelmis_Dat...te.dll

windows7-x64

1

Kelmis_Dat...te.dll

windows10-2004-x64

1

Kelmis_Dat...ix.dll

windows7-x64

1

Kelmis_Dat...ix.dll

windows10-2004-x64

1

Kelmis_Dat...ty.dll

windows7-x64

1

Kelmis_Dat...ty.dll

windows10-2004-x64

1

Kelmis_Dat...er.dll

windows7-x64

1

Kelmis_Dat...er.dll

windows10-2004-x64

1

Kelmis_Dat...on.dll

windows7-x64

1

Kelmis_Dat...on.dll

windows10-2004-x64

1

Kelmis_Dat...ap.dll

windows7-x64

1

Kelmis_Dat...ap.dll

windows10-2004-x64

1

Kelmis_Dat...on.dll

windows7-x64

1

Kelmis_Dat...on.dll

windows10-2004-x64

1

Kelmis_Dat...ns.dll

windows7-x64

1

Kelmis_Dat...ns.dll

windows10-2004-x64

1

Kelmis_Dat...on.dll

windows7-x64

1

Kelmis_Dat...on.dll

windows10-2004-x64

1

Kelmis_Dat...re.dll

windows7-x64

1

Kelmis_Dat...re.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    07-11-2023 14:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Kelmis_Data/Managed/System.ComponentModel.Composition.dll

  • Size

    250KB

  • MD5

    a286ba1c012b3f0e0015f2206d7c4345

  • SHA1

    9cfbf75ad321a8670ebf9ae4415c9e24436ffb05

  • SHA256

    9bdc792fab55d5820bc9157258c322e447b103e4078dbcb3849ffe0a17e54f17

  • SHA512

    2d6ba24e8e85acd949fc50067bec3397cc7964d419ac4ccfa410a9fdcdfd4afe878e8baef6d5a64288f8d232186d6d51a70653a2074f238ab5ddb05b8e8c93f4

  • SSDEEP

    3072:1yNoMHX71VOFhbrHtfPe7Ex/EGgDX/sogRGTQRVlHHQVpjtCMa2+KF:eZ3JybrFWZgRsIy3tCMaa

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Kelmis_Data\Managed\System.ComponentModel.Composition.dll,#1
    1⤵
      PID:2172

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads