Overview

overview

7

Static

static

3

962906392f...60.exe

windows7-x64

7

962906392f...60.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

DrvInstall.exe

windows7-x64

1

DrvInstall.exe

windows10-2004-x64

1

VoiceManager.exe

windows7-x64

1

VoiceManager.exe

windows10-2004-x64

1

vadhw.sys

windows7-x64

1

vadhw.sys

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12/02/2024, 03:43

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    vadhw.sys

  • Size

    18KB

  • MD5

    afaad7fa7f8ff51251210a09d0335c1d

  • SHA1

    913fd3c8a020950aa3c28c303c9b0384cfc1064e

  • SHA256

    d849dfd49847e5f32313a2bc3137f4e9666b0d2ef8bc6e28dbb363bd6eae48da

  • SHA512

    b7642e51becac827e10611e2fc1435beab1fdae0ab4fdf63c249ed87d2e1b7dc655ac3e52cd16514768c6e89a8a7a3861e6fe5494a5ddafe0908894120882428

  • SSDEEP

    384:wUlYt+AP7wRpcOZII3yGzEnZTl9KvWxpwTkIBV2o0BLj:/QrknLEZh9KvsY3co0R

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\vadhw.sys
    1⤵
      PID:2440
      • C:\Users\Admin\AppData\Local\Temp\vadhw.sys
        C:\Users\Admin\AppData\Local\Temp\vadhw.sys
        2⤵
          PID:2056

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2056-0-0x0000000000010000-0x0000000000014B00-memory.dmp

        Filesize

        18KB

        Download