2eea6ce78a42a5c07091a313cfdf13a083e46b493b6c2fb44bacf8626bf5d097 | Triage

Submit
Reports

Overview

overview

7

Static

static

3

ccsetup620.exe

windows7-x64

7

ccsetup620.exe

windows10-2004-x64

6

$PLUGINSDIR/INetC.dll

windows7-x64

3

$PLUGINSDIR/INetC.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$_131_/lang-1025.dll

windows7-x64

1

$_131_/lang-1025.dll

windows10-2004-x64

1

$_131_/lang-1026.dll

windows7-x64

1

$_131_/lang-1026.dll

windows10-2004-x64

1

$_131_/lang-1027.dll

windows7-x64

1

$_131_/lang-1027.dll

windows10-2004-x64

1

$_131_/lang-1028.dll

windows7-x64

1

$_131_/lang-1028.dll

windows10-2004-x64

1

$_131_/lang-1029.dll

windows7-x64

1

$_131_/lang-1029.dll

windows10-2004-x64

1

$_131_/lang-1030.dll

windows7-x64

1

$_131_/lang-1030.dll

windows10-2004-x64

1

$_131_/lang-1031.dll

windows7-x64

1

$_131_/lang-1031.dll

windows10-2004-x64

1

$_131_/lang-1032.dll

windows7-x64

1

$_131_/lang-1032.dll

windows10-2004-x64

1

$_131_/lang-1034.dll

windows7-x64

1

$_131_/lang-1034.dll

windows10-2004-x64

1

$_131_/lang-1035.dll

windows7-x64

1

$_131_/lang-1035.dll

windows10-2004-x64

1

Resubmissions

18/01/2024, 10:46

240118-mt9wgaadd2 7

18/01/2024, 09:27

240118-le4v8shch2 7

18/01/2024, 09:17

240118-k9c6bshbh2 6

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
18/01/2024, 09:27

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ccsetup620.exe

Resource

win7-20231215-en

bootkit discovery persistence spyware stealer

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

ccsetup620.exe

Resource

win10v2004-20231215-en

bootkit discovery persistence

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/INetC.dll

Resource

win7-20231215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/INetC.dll

Resource

win10v2004-20231215-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/System.dll

Resource

win7-20231215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20231215-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win7-20231215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20231222-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/nsExec.dll

Resource

win7-20231215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/nsExec.dll

Resource

win10v2004-20231215-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/nsProcess.dll

Resource

win7-20231215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/nsProcess.dll

Resource

win10v2004-20231215-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

$_131_/lang-1025.dll

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

$_131_/lang-1025.dll

Resource

win10v2004-20231222-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

$_131_/lang-1026.dll

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

$_131_/lang-1026.dll

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

$_131_/lang-1027.dll

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

$_131_/lang-1027.dll

Resource

win10v2004-20231222-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

$_131_/lang-1028.dll

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

$_131_/lang-1028.dll

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

$_131_/lang-1029.dll

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

$_131_/lang-1029.dll

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

$_131_/lang-1030.dll

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

$_131_/lang-1030.dll

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

$_131_/lang-1031.dll

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

$_131_/lang-1031.dll

Resource

win10v2004-20231222-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

$_131_/lang-1032.dll

Resource

win7-20231129-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

$_131_/lang-1032.dll

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

$_131_/lang-1034.dll

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

$_131_/lang-1034.dll

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

$_131_/lang-1035.dll

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

$_131_/lang-1035.dll

Resource

win10v2004-20231222-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

$_131_/lang-1031.dll
Size

285KB
MD5

9c0270dbad21279f2ac5b4f686a841a0
SHA1

2815192bf6339f2c61f4cf66b9b75a5f341e4fb7
SHA256

49496d4bbd3db3e7446749cb7d986cd0c99405c50c5a88bf55606cc87d25cfde
SHA512

25c69520f9175e29821608ecdb60159bf2a8124b98fe59edef39dbfecad2e1602e0f4e0cb55d8a70cede9169ed09f5ec0e946a48dbc8cbcb12266f24b39be2b2
SSDEEP

3072:MCJRKPgjvypvWTChegDQhK7JUfRtR+ga9hI7AlfbamVXu9dIEhpg8XVLZkwwlPaO:3ypvCEFzda9Yhou

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\$_131_\lang-1031.dll,#1
1⤵
PID:5092

C:\Windows\system32\rundll32.exe
"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe
1⤵
PID:1432

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k UnistackSvcGroup
1⤵
PID:1404

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1404-0-0x000001D3E4950000-0x000001D3E4960000-memory.dmp

Filesize
64KB

Download
memory/1404-16-0x000001D3E4A50000-0x000001D3E4A60000-memory.dmp

Filesize
64KB

Download
memory/1404-36-0x000001D3ECF00000-0x000001D3ECF01000-memory.dmp

Filesize
4KB

Download
memory/1404-35-0x000001D3ECDF0000-0x000001D3ECDF1000-memory.dmp

Filesize
4KB

Download
memory/1404-34-0x000001D3ECDF0000-0x000001D3ECDF1000-memory.dmp

Filesize
4KB

Download
memory/1404-32-0x000001D3ECDC0000-0x000001D3ECDC1000-memory.dmp

Filesize
4KB

Download

© 2018-2025

Terms | Privacy