Overview

overview

3

Static

static

3

AWSSDK.Core.dll

windows7-x64

1

AWSSDK.Core.dll

windows10-2004-x64

1

AWSSDK.Sec...en.dll

windows7-x64

1

AWSSDK.Sec...en.dll

windows10-2004-x64

1

Agent.exe

windows7-x64

1

Agent.exe

windows10-2004-x64

1

Agent.exe

windows7-x64

1

Agent.exe

windows10-2004-x64

1

AudioSwitc...io.dll

windows7-x64

1

AudioSwitc...io.dll

windows10-2004-x64

1

AudioSwitc...pi.dll

windows7-x64

1

AudioSwitc...pi.dll

windows10-2004-x64

1

Core.Logger.dll

windows7-x64

1

Core.Logger.dll

windows10-2004-x64

1

DnsClient.dll

windows7-x64

1

DnsClient.dll

windows10-2004-x64

1

EmbedIO.dll

windows7-x64

1

EmbedIO.dll

windows10-2004-x64

1

GpuLoadWatcher.dll

windows7-x64

1

GpuLoadWatcher.dll

windows10-2004-x64

1

GpuProcessInfo.dll

windows7-x64

1

GpuProcessInfo.dll

windows10-2004-x64

1

HTTPProtorol.dll

windows7-x64

1

HTTPProtorol.dll

windows10-2004-x64

1

HidSharp.dll

windows7-x64

1

HidSharp.dll

windows10-2004-x64

1

JsonFlatFi...re.dll

windows7-x64

1

JsonFlatFi...re.dll

windows10-2004-x64

1

LibreHardw...ib.dll

windows7-x64

1

LibreHardw...ib.dll

windows10-2004-x64

1

Logger.Serilog.dll

windows7-x64

1

Logger.Serilog.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    161s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    07/11/2023, 14:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Logger.Serilog.dll

  • Size

    11KB

  • MD5

    e826abf4be44540a3a2edf30a3564a10

  • SHA1

    9009defe50d0fa44dd2f4bfffbec32bfba8ab99c

  • SHA256

    801019882403e98178f9264e161b9ae979797bb58bb58af50764462ecab523cd

  • SHA512

    211850e4c38df3abaa96e5e8a3f3305489aeb333b4281186486562211e4fd87397df5b4557ad0f8f36a615ec5df4b382c02bcd00822745444b5e8c352b980fe2

  • SSDEEP

    192:g1c8xdKM+PMao7twlhQz6+IIZwipxuQYbgn4a/qv0KbWVEFGR8:j8xF+boBwlhQm+3Zwc4gn4a9/VfR8

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Logger.Serilog.dll,#1
    1⤵
      PID:2840

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads