Overview

overview

3

Static

static

3

Agent.exe

windows7-x64

1

Agent.exe

windows10-2004-x64

1

Agent.exe

windows7-x64

1

Agent.exe

windows10-2004-x64

1

Agent.sys

windows7-x64

1

Agent.sys

windows10-2004-x64

1

AudioSwitc...io.dll

windows7-x64

1

AudioSwitc...io.dll

windows10-2004-x64

1

AudioSwitc...pi.dll

windows7-x64

1

AudioSwitc...pi.dll

windows10-2004-x64

1

Core.Logger.dll

windows7-x64

1

Core.Logger.dll

windows10-2004-x64

1

EmbedIO.dll

windows7-x64

1

EmbedIO.dll

windows10-2004-x64

1

HTTPProtorol.dll

windows7-x64

1

HTTPProtorol.dll

windows10-2004-x64

1

HidSharp.dll

windows7-x64

1

HidSharp.dll

windows10-2004-x64

1

JsonFlatFi...re.dll

windows7-x64

1

JsonFlatFi...re.dll

windows10-2004-x64

1

LibreHardw...ib.dll

windows7-x64

1

LibreHardw...ib.dll

windows10-2004-x64

1

Logger.NLog.dll

windows7-x64

1

Logger.NLog.dll

windows10-2004-x64

1

Logger.Serilog.dll

windows7-x64

1

Logger.Serilog.dll

windows10-2004-x64

1

Microsoft....er.dll

windows7-x64

1

Microsoft....er.dll

windows10-2004-x64

1

Microsoft....ch.dll

windows7-x64

1

Microsoft....ch.dll

windows10-2004-x64

1

Microsoft....on.dll

windows7-x64

1

Microsoft....on.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    79s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-11-2023 14:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Logger.NLog.dll

  • Size

    9KB

  • MD5

    b3e9db523b2840c0f3319dfb1098a357

  • SHA1

    e05a16467d6408613e8e6eed14ba7d13866b7e79

  • SHA256

    4cc76c36ebaa61a093f6fca53c12f2f661ed7247be683ed22ef096fc2d1defb0

  • SHA512

    74c5749a11e68e7f73eae9aae814bd7da2b2df82a0eb0901a69e43107f804bccd04ecf6198c449d6a894c1cdcdbe81b996d21c394678117e527f8cbd2c375655

  • SSDEEP

    96:mwC1zeZ1GnVRtAST4z/WNZXqByfr0WnfVbqUnFZt218H1zk8j+Of8h91:2zme2SQ7Byj0W9lnFZY18Vzk1O0h91

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Logger.NLog.dll,#1
    1⤵
      PID:4316

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads