Overview

overview

3

Static

static

3

app_links_plugin.dll

windows10-1703-x64

1

data/app.so

windows10-1703-x64

3

data/flutt...ll.bat

windows10-1703-x64

1

data/flutt...er.exe

windows10-1703-x64

1

data/flutt...ip.exe

windows10-1703-x64

1

data/flutt...op.bat

windows10-1703-x64

1

data/flutt...ar.exe

windows10-1703-x64

3

data/flutt...lt.dll

windows10-1703-x64

1

data/flutt...le.dll

windows10-1703-x64

1

data/flutt...ak.dll

windows10-1703-x64

1

data/flutt...ot.dll

windows10-1703-x64

1

data/flutt...er.exe

windows10-1703-x64

1

data/flutt...ll.bat

windows10-1703-x64

1

data/flutt...ch.exe

windows10-1703-x64

1

data/flutt...at.bat

windows10-1703-x64

1

flutter_ac...in.dll

windows10-1703-x64

1

flutter_windows.dll

windows10-1703-x64

1

reboot_launcher.exe

windows10-1703-x64

1

screen_ret...in.dll

windows10-1703-x64

1

system_the...in.dll

windows10-1703-x64

1

url_launch...in.dll

windows10-1703-x64

1

window_man...in.dll

windows10-1703-x64

1

windows_ta...in.dll

windows10-1703-x64

1

Analysis

  • max time kernel
    9s
  • max time network
    31s
  • platform
    windows10-1703_x64
  • resource
    win10-20240221-en
  • resource tags

    arch:x64arch:x86image:win10-20240221-enlocale:en-usos:windows10-1703-x64system
  • submitted
    21-02-2024 15:27

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    data/flutter_assets/assets/authenticator/lawinserver.exe

  • Size

    55.1MB

  • MD5

    4f58585605e69a9c64057c48c7a29da3

  • SHA1

    2ddaadcdfbd86cd24ec90d77af3bd5e944b5737f

  • SHA256

    a2e90c1992f9357620c4a6d2a87b210f1150c88fe074247e1cf1cfac4b35b61d

  • SHA512

    83271d5f820ef1fe573f6b7f17f28d6e0761f35dc3f5e901ba8e43c5533adde1044c3e88206f9700409316e706c2513f2566321d8c9b89c8cc9499180d9eba4b

  • SSDEEP

    393216:f1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYf7:fMguj8Q4VfviqFTrY3

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\data\flutter_assets\assets\authenticator\lawinserver.exe
    "C:\Users\Admin\AppData\Local\Temp\data\flutter_assets\assets\authenticator\lawinserver.exe"
    1⤵
      PID:2652

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads