Overview

overview

10

Static

static

10

a831ab76dc...09.exe

windows7-x64

3

a831ab76dc...09.exe

windows10-2004-x64

3

$PLUGINSDIR/INetC.dll

windows7-x64

3

$PLUGINSDIR/INetC.dll

windows10-2004-x64

3

$PLUGINSDI...re.dll

windows7-x64

3

$PLUGINSDI...re.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

API-MS-Win...-0.dll

windows7-x64

1

API-MS-Win...-0.dll

windows10-2004-x64

3

Accessibility.dll

windows7-x64

1

Accessibility.dll

windows10-2004-x64

1

AviraLib.dll

windows7-x64

1

AviraLib.dll

windows10-2004-x64

1

BouncyCast...to.dll

windows7-x64

1

BouncyCast...to.dll

windows10-2004-x64

1

Branding.Desktop.dll

windows7-x64

1

Branding.Desktop.dll

windows10-2004-x64

1

D3DCompile...r3.dll

windows7-x64

3

D3DCompile...r3.dll

windows10-2004-x64

3

DirectWrit...er.dll

windows7-x64

1

DirectWrit...er.dll

windows10-2004-x64

1

DotNetZip.dll

windows7-x64

1

DotNetZip.dll

windows10-2004-x64

1

Engine.Win.dll

windows7-x64

1

Engine.Win.dll

windows10-2004-x64

1

EntityFram...er.dll

windows7-x64

1

EntityFram...er.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-01-2024 02:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    DirectWriteForwarder.dll

  • Size

    468KB

  • MD5

    a36d73301123334adc95e034b327daad

  • SHA1

    cb4bd930cbe2c930d665dd4467e8b88815de8c1d

  • SHA256

    440c95dcdbe402d843095649773d1fc6da5d035802dd540ce29c71bc915d433b

  • SHA512

    438abf9aa1c00bf1f3e9ec7e9ac6bf5d89c492d68301044ba7fb205d3c5d34aae4940893eff721b91696de4c782a8a3558cdb39955943e350361639893ef3393

  • SSDEEP

    6144:eTDF2kb51CJfk7g9wSikA+6Bl5f7d5rBkwLENfTKSr1dDqY9DGKwHrD:oDVbK6kA+6B/d5rlUfTrDT6KwHr

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\DirectWriteForwarder.dll,#1
    1⤵
      PID:2580
      • C:\Windows\SysWOW64\rundll32.exe
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\DirectWriteForwarder.dll,#1
        2⤵
          PID:2884

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads