Overview

overview

5

Static

static

3

FiveModsSetup.exe

windows10-2004-x64

5

$PLUGINSDI...er.dll

windows10-2004-x64

1

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

resources/...ils.js

windows10-2004-x64

1

resources/...oon.js

windows10-2004-x64

1

resources/...owl.js

windows10-2004-x64

1

resources/...ter.js

windows10-2004-x64

1

resources/...end.js

windows10-2004-x64

1

resources/...ter.js

windows10-2004-x64

1

resources/...tifier

windows10-2004-x64

1

resources/...nt.rtf

windows10-2004-x64

1

resources/...fu.exe

windows10-2004-x64

1

resources/...64.exe

windows10-2004-x64

1

resources/...64.exe

windows10-2004-x64

4

resources/...86.exe

windows10-2004-x64

4

resources/...st.exe

windows10-2004-x64

1

resources/...dex.js

windows10-2004-x64

1

resources/...dex.js

windows10-2004-x64

1

resources/...64.exe

windows10-2004-x64

1

resources/...86.exe

windows10-2004-x64

1

resources/elevate.exe

windows10-2004-x64

1

vk_swiftshader.dll

windows10-2004-x64

1

vulkan-1.dll

windows10-2004-x64

1

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...7z.dll

windows10-2004-x64

3

$R0/Uninst...ds.exe

windows10-2004-x64

5

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

Resubmissions

19/02/2024, 20:31

240219-za6qxsdb56 5

Analysis

  • max time kernel
    133s
  • max time network
    164s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/02/2024, 20:31

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    resources/app.asar.unpacked/node_modules/ps-list/vendor/fastlist-0.3.0-x86.exe

  • Size

    230KB

  • MD5

    4629d4e7ca1e7c9d352becad14d7888d

  • SHA1

    d1fcafe72067cc2a69f2bbaa67a5ba26fb6628f0

  • SHA256

    589ab9b783d4c898d49fb10faa38e3be650fdf6d74942e5f132c49b4e44ccbda

  • SHA512

    6f55d06d8f28acace9d6a36de630a70f5700fa1c180da004d6cd796e5632748aa4e5b18b9dc6f27100eb0742ba53d2e61e44a21c088eabd333c806db63c5a19f

  • SSDEEP

    6144:9uP738wut5T2/efnO310+Hfd+ueCuMvMLAOgp+HQzN2u:9uPL8wut5T2/eCHF+ueCQeQHQv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\resources\app.asar.unpacked\node_modules\ps-list\vendor\fastlist-0.3.0-x86.exe
    "C:\Users\Admin\AppData\Local\Temp\resources\app.asar.unpacked\node_modules\ps-list\vendor\fastlist-0.3.0-x86.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:824

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads