Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    22/02/2024, 20:27

General

  • Target

    RzChromaSDK64.dll

  • Size

    91KB

  • MD5

    c77d2f017a03f41de170f5cf9fb8bd27

  • SHA1

    e287c9e7390f909e9f1442cb05d98c99287980e5

  • SHA256

    2d2e8cf5684b2eb17d1edb85a5b90e691e167ed9f6a2ae0ab9a93ef3c1acb7fb

  • SHA512

    a5f239727ee1fa78443368d469b839f7c1effcc15b40c3aef1f33366f5c028a4c9172f329d3ec85eb06e48576e0171e534c060d553a4fb572181df2c2d395440

  • SSDEEP

    1536:SyTDAdMlIgGNfppcX51FcD4nCuqoiP4Kk+LDHC4Q:n4IDJ1FaoWI+LDPQ

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\RzChromaSDK64.dll,#1
    1⤵
      PID:2908

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\Desktop\ApproveComplete.ps1xml

      Filesize

      472KB

      MD5

      3edc2c4ee240968a1868fa7615df2614

      SHA1

      128f5f41c9de4b8a9a655fbd498d9601da0827e0

      SHA256

      54361e3a33d4ca8a7991258d8f9171801064e8218ec17fb3f9eb347a325aba2e

      SHA512

      12af3301c03eefe387c80af9835b2b710d328be57fc5bc9c1f289baba845a5068870208934aa631dea4fd0e78b87704759d6b8dd72ebd35eb2a60ba67c447ac7

    • C:\Users\Admin\Desktop\BackupApprove.wmf

      Filesize

      255KB

      MD5

      e990e7dadc29b4af0524aeff29f6eec1

      SHA1

      1f0945a5d1bb267a9cd680c025029f9a7b05a986

      SHA256

      0c602095c39810b118665b39cb8fe557a28e98b417435604aadd1a446b7f1d7a

      SHA512

      e094d11831417ae1c1bb8662ed94b73106689f969f4ba2801a5f2c04ec2441c808b39121bee3d049d5c77e0c963a9b44e94724407f5681cbe6253019bde8e405

    • C:\Users\Admin\Desktop\BackupProtect.avi

      Filesize

      224KB

      MD5

      5d69ba92d4e9f917807d4218514fcfb9

      SHA1

      6f03305d158e9a10331025a9ff889af5e4e91512

      SHA256

      bf6a9bf78e01697793583cae50bb449a4f4f1b0607ff2741dc427ca7c34682cc

      SHA512

      4f9860989c68c950e9985358f36c5b18648174fef46cd7898f99651616e1773b217076e33da2e2cea8be7db93588dbcf3ae40b5ae67a09f88c573bcc6293833e

    • C:\Users\Admin\Desktop\ConvertToDeny.wax

      Filesize

      286KB

      MD5

      906617f7345a76c03569f1d9e4503316

      SHA1

      7c57178ef49847ab3bcad32aa17f53fc5864ba7a

      SHA256

      f1708f087c2b602715fb14ffeeffb36b3457d31e2a2748dd9e4008e73f905362

      SHA512

      8436e93fcc3a2d1a2220846a8b46203aa9447d4752d3a9955f699d32aaae821f891943b7519929872e2ab9f9ceae40c15da954702691446e49cb81b048dc7de0

    • C:\Users\Admin\Desktop\DisableImport.dotm

      Filesize

      410KB

      MD5

      e69b9a3ac18455a5a5eafff6fa7daa0f

      SHA1

      b568c8c25ee700bc737b34a4c1f112ae7c73b07f

      SHA256

      94c3d8c80f5284897c53d686980f2549869d16410b8dd8fb2c6a4ec3e8e8e8da

      SHA512

      2c72fe95b81f4119d63ae859015d582fe4425e4bee810b246f5669d9774beffc9483cdee0990122b2ce6da4f2b0a58d6d432d9ae5051d3db79b85d5c9b36846d

    • C:\Users\Admin\Desktop\FindSync.pub

      Filesize

      332KB

      MD5

      52ef30038d1eda5ea6c38330ed2b4aea

      SHA1

      8a81e6312981f37f3b6b453e5266e4e9cf6428ce

      SHA256

      ce602ff9fde7b27ccd89615a8d0d930afbc705ba7f1835cb3c3532d241585e87

      SHA512

      8a683d6cf9a10db83556657700d478561f4936f947d988cfbf350fbf32061c7e07e9daa834bab8ff30896a9190818da3665dc7630c819c75fc10bf89c94cf976

    • C:\Users\Admin\Desktop\GroupUse.asx

      Filesize

      270KB

      MD5

      cd733664387ea92d35e0792ff6872b9b

      SHA1

      8b53ec052e0325566aa2fd1800442bb69c11035f

      SHA256

      9666a7331c35afd238f0c1ef0626c8bd94ee0c9d7fe3f54c7e7cf1d3713362f4

      SHA512

      9e00a3e9f5005f197a58cc79aaaf93539ae7ab4453728aeeb449558b59904f26bb493540b6760432d82b66843dda40b901406f8fe5b3170f99525d386908fb9b

    • C:\Users\Admin\Desktop\InvokeApprove.mpeg3

      Filesize

      425KB

      MD5

      b64806c0535358143b23bf50f64b58a5

      SHA1

      7273df201fb8441125b1e8f1d4359592e55f58ae

      SHA256

      c7642c3b3d7cb4c55759924c3c5a3ed2bc5f9c8e31b5a6368da0d1357f2a4e6e

      SHA512

      28a4043aeb4c2ad45074c1e124c43f9820054dd222319412d9923810a08bb8548c63082ecfa88dcb7f788718c584c019a7952de64041f88caee5e007615b7e70

    • C:\Users\Admin\Desktop\MergeRevoke.xml

      Filesize

      379KB

      MD5

      f5a362c194b64ad345240b5ddf71e309

      SHA1

      62f71edf0826737480963fa830e4861533b00896

      SHA256

      e13cb1d55928845ff7616770e0217e2aa8023f857665c6c593b899393374b14d

      SHA512

      26ffdec20f7b562129e4f09da9f8ef87a4f003bc1d5189696957307c07bc77cd4b771bb56557f9b3394d2d0785d0dafc3075061bbe26036aafa21b364bd4c97a

    • C:\Users\Admin\Desktop\PopExit.jfif

      Filesize

      441KB

      MD5

      de6220c506a3182c614d270c448413f9

      SHA1

      c9647aa0487ff332bb0e419fa2dd2dcea550518f

      SHA256

      5b7cd6eace68c0852e52846cb30473f5c4b4585f6c03bd08664701690e1f26d3

      SHA512

      5a5db66c7583943df151f854986c47a351ea2dad114f52d0d23a3d631c733f98e92ad5c1c05b894621c49f7f4c6b48dfd173e445c896b3455ed8f4d618c2d6ab

    • C:\Users\Admin\Desktop\ResetOut.edrwx

      Filesize

      456KB

      MD5

      470bf58f74a95bade6d1f71ccca0d65c

      SHA1

      67a98ac650add14345d38e1bf497f2da9c9c232d

      SHA256

      ce8083f93c9ace67c1e66c38813ea258617721695b24592f84adea332879b5d9

      SHA512

      c1e6aff141ac3ef24016bf7fb9293cc0149cdb76f5568c43307c11b2457d49996e27cb6b1ee7bdb50b750ac8498ce59997e57fa1361c77dc5d9eed74f9e33be3

    • C:\Users\Admin\Desktop\RestoreLock.cab

      Filesize

      348KB

      MD5

      eabab74a37b39915da568228083f46ff

      SHA1

      3cda1713ab380d8f9656594bb9b7c03a612e5208

      SHA256

      d9b1b7aa832c440d280f2ba0c2adbd569e564d907b1f9dbd6d5b49a0db45c29c

      SHA512

      14ff12ba82c277833c791ca0b03844225a3f9f8f8ae2ed831b47df56a9be573dc72494ea5dcf68a7290f2626b746248d58e9f13c79d00de1c6f15b4ed1bb747a

    • C:\Users\Admin\Desktop\ShowRepair.wmx

      Filesize

      240KB

      MD5

      253eb40d44ae673a6d57f4070f5b8cef

      SHA1

      8bea01c32aa45f55e341543f7381d39285c4c64b

      SHA256

      521d5e5f76ba511ee98dfda58f9de4335df6826a9fc24056a5bbd892e6911928

      SHA512

      6fb2da616a97d3502a0768d9edd3d293c90836a5aca409dd4683f70bf7a4c48f5b543e0034ddce68587ae0b518759ff72359b4f9fedf779f02770860216e96fb

    • C:\Users\Admin\Desktop\ShowTest.eps

      Filesize

      487KB

      MD5

      3e8d516e51ce1b5fbd020a61e9eff46d

      SHA1

      94b5e38cdaf0c9f347b027547d084d93f690906f

      SHA256

      cea1a7dda94c3e8d431f3d90903bc4d67f5af7959dc13ad3ae79a66e383bd9f9

      SHA512

      9bcc5b326780871db0366dd1909bf458c978867a86b6c968c44fb8ddebe9adaca62ad61eb24564dfb24b3fb95ddf0360a1d35c7c5505017e632e7f7897b8910d

    • C:\Users\Admin\Desktop\StartUndo.vstm

      Filesize

      301KB

      MD5

      0a9df654d5dac6bdcf3f05f5ee8e1685

      SHA1

      26a1c4357370398685e78f8205575bd9e6f770c8

      SHA256

      5944c1bec12eb1be7fe97f10ccd7dc6c397c3b7e3332e6964a1454404b179047

      SHA512

      496df3290807b1976d939e064300ebd73fc7ae14fb25062788e3f64bb3fa804544e00329cd904f8b3b30a718251f1ca9bf9b1d42731f7337e4a0450e14208c62

    • C:\Users\Admin\Desktop\StopAdd.lnk

      Filesize

      193KB

      MD5

      79a8b10aab7716557aa4a1040de70bc1

      SHA1

      912c2160a08498a00980d6b3ac6c02be91fec4eb

      SHA256

      2694081e00b7bae3ddfe0b2c778caa5af0fbdbd0fa3eb7c128fd445c638b7583

      SHA512

      2c1ecc449e563fe5141210074fcf80fa4e9b4c214e5e012b86f6df9aa5ec8d0dfa0269c0fffc7a87b19372c1ba9ec9bdc7c1b2dc9ee4fad4a4e70ca9a7a93feb

    • C:\Users\Admin\Desktop\UnblockMerge.bin

      Filesize

      503KB

      MD5

      98688409ffdea82c9d22d66244271ef6

      SHA1

      2b80812d7c70e2d5a8d58b3ea23b109aaaa2c3d1

      SHA256

      60b2b57cd7941a3ea3b0e429ea42cf298043ab98d03b4a8467981d07e8ad9bb0

      SHA512

      c092b409a844991bc4e024fa6416e791efeacae3a34613d01c8d5c30f0eabf1a6badde1ab05344dc3cdb940e41494ebbb81ecd398a5a56115437b62e4ab13776

    • C:\Users\Admin\Desktop\UndoRead.mp3

      Filesize

      363KB

      MD5

      6c25ee2cee727817948765fba2a66108

      SHA1

      80ffecb19e5953897ed0fdacf4b882c364987964

      SHA256

      fa2e26f2304b79b83da4f0ff0951ee1b8c0345b6b325dbf413ddcdaf02a4ebb1

      SHA512

      5cea026dc7eeda18df1198f831c1ab39bab5c64702800475b416041453bef3e79e2b880801e85db49a29e5891160abb0ff49335679ebc303402b72ec589cc315

    • C:\Users\Admin\Desktop\UninstallSkip.iso

      Filesize

      394KB

      MD5

      c94e55e3ae5fe9f176d8a05e8b0330fe

      SHA1

      4a8aed7920fa3a03900db20386390efa88ad640f

      SHA256

      195aebeb8ddf17e6a66c0f3a803f94a6a4c6617228405df03ac1e0da75421401

      SHA512

      027c26815912fe6a3161ee110426b272bf1fedc5c346d38b331339685e0bf34b4e2972dc44c55d4b7276fd92658a057ff60bfc62c2dc0bd50e3e861b282032d4

    • C:\Users\Admin\Desktop\UnlockFormat.ADT

      Filesize

      317KB

      MD5

      8ab076ef15eadbbb1ad5ecab478baae5

      SHA1

      4c0353700af735e6425fd56d302eab3fdfd17b6f

      SHA256

      a53b5b7b18b0573abdc09637d348cf708612b0f2d85c4821d4c6472ac15c23a6

      SHA512

      80d9ea826ba2ac2fee2629b6af6a4f3ff1639d97a90f02037f7c28b8dd52912010495e77f080e949e176be3df6950caee4833a362a0199313b4f1f894e09becd

    • C:\Users\Admin\Desktop\UpdateClear.cfg

      Filesize

      209KB

      MD5

      ce3228b443201678ef350fb839cc8647

      SHA1

      e33681f7ed22b58acc020e4684c74a9b40aad922

      SHA256

      aa1369ba7f85492fc19760b44825551b04fa9926071427358f67f34058ac3649

      SHA512

      097da7e5d0f95e0e2dadab0371bfa75f29db5ba05a1542da3a7cd6d7ba29af2c9efaa8dfe431c76d6a9c096c6b5cd22302ea2606d7db2d79195e4ebe9693f434

    • C:\Users\Admin\Desktop\WriteInvoke.jpeg

      Filesize

      697KB

      MD5

      584f22ed603aaf29050e2cb1c2e1168f

      SHA1

      053123c5023275c323b0f8a3cb76f668adf876a0

      SHA256

      8b8078127ab792848e30e228ed87a0e8d9a501e52806cb8c32dba4cdfc56d8bd

      SHA512

      521aab478278273391aec2eae4a6960cda2eaa300e918651320401b51fd24297b327491b2594fb869610addfea16e62b72f4ea9435e80d398fdedbfa8815dee9