Overview

overview

3

Static

static

3

AWSSDK.Core.dll

windows7-x64

1

AWSSDK.Core.dll

windows10-2004-x64

1

AWSSDK.Sec...en.dll

windows7-x64

1

AWSSDK.Sec...en.dll

windows10-2004-x64

1

Agent.exe

windows7-x64

1

Agent.exe

windows10-2004-x64

1

Agent.exe

windows7-x64

1

Agent.exe

windows10-2004-x64

1

AudioSwitc...io.dll

windows7-x64

1

AudioSwitc...io.dll

windows10-2004-x64

1

AudioSwitc...pi.dll

windows7-x64

1

AudioSwitc...pi.dll

windows10-2004-x64

1

Core.Logger.dll

windows7-x64

1

Core.Logger.dll

windows10-2004-x64

1

DnsClient.dll

windows7-x64

1

DnsClient.dll

windows10-2004-x64

1

EmbedIO.dll

windows7-x64

1

EmbedIO.dll

windows10-2004-x64

1

GpuLoadWatcher.dll

windows7-x64

1

GpuLoadWatcher.dll

windows10-2004-x64

1

GpuProcessInfo.dll

windows7-x64

1

GpuProcessInfo.dll

windows10-2004-x64

1

HTTPProtorol.dll

windows7-x64

1

HTTPProtorol.dll

windows10-2004-x64

1

HidSharp.dll

windows7-x64

1

HidSharp.dll

windows10-2004-x64

1

JsonFlatFi...re.dll

windows7-x64

1

JsonFlatFi...re.dll

windows10-2004-x64

1

LibreHardw...ib.dll

windows7-x64

1

LibreHardw...ib.dll

windows10-2004-x64

1

Logger.Serilog.dll

windows7-x64

1

Logger.Serilog.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    330s
  • max time network
    404s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/11/2023, 14:09

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    DnsClient.dll

  • Size

    150KB

  • MD5

    7d10cea283102f320a2d0c8c9af4832f

  • SHA1

    6de9ad9137a59ab85f59b1d961b1c3e10ff0a0e4

  • SHA256

    a6aa942bf9f1ce3ecfb52c29f0735c557d542d85d128ffb29b48612cd6298ec9

  • SHA512

    7c2ba5299354bdb5a10162bcae628da50064f9e5a25e9bb1903cf097668593a1e59e197b41aae4a85ea75431a5278a2d59960cae589f64688a34e606aa10a235

  • SSDEEP

    3072:6DAQGODbQBfwQP2FwwaUhOIrbx/zh4D4KhqQpF3/pUA:eABfwl8g/F4D1h

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\DnsClient.dll,#1
    1⤵
      PID:4748

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads