Overview
overview
3Static
static
3AdvancedSt...er.dll
windows7-x64
1AdvancedSt...er.dll
windows10-2004-x64
1AngleSharp.dll
windows7-x64
1AngleSharp.dll
windows10-2004-x64
1AsyncKeyedLock.dll
windows7-x64
1AsyncKeyedLock.dll
windows10-2004-x64
1Cogwheel.dll
windows7-x64
1Cogwheel.dll
windows10-2004-x64
1DiscordCha...re.dll
windows7-x64
1DiscordCha...re.dll
windows10-2004-x64
1DiscordCha...er.exe
windows7-x64
1DiscordCha...er.exe
windows10-2004-x64
1DiscordCha...er.exe
windows7-x64
1DiscordCha...er.exe
windows10-2004-x64
1Gress.dll
windows7-x64
1Gress.dll
windows10-2004-x64
1JsonExtensions.dll
windows7-x64
1JsonExtensions.dll
windows10-2004-x64
1MaterialDe...rs.dll
windows7-x64
1MaterialDe...rs.dll
windows10-2004-x64
1MaterialDe...pf.dll
windows7-x64
1MaterialDe...pf.dll
windows10-2004-x64
1Microsoft....rs.dll
windows7-x64
1Microsoft....rs.dll
windows10-2004-x64
1Onova.dll
windows7-x64
1Onova.dll
windows10-2004-x64
1Polly.Core.dll
windows7-x64
1Polly.Core.dll
windows10-2004-x64
1Polly.dll
windows7-x64
1Polly.dll
windows10-2004-x64
1RazorBlade.dll
windows7-x64
1RazorBlade.dll
windows10-2004-x64
1Analysis
-
max time kernel
157s -
max time network
166s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
29/02/2024, 04:54
Static task
static1
Behavioral task
behavioral1
Sample
AdvancedStringBuilder.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
AdvancedStringBuilder.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
AngleSharp.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
AngleSharp.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
AsyncKeyedLock.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
AsyncKeyedLock.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
Cogwheel.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Cogwheel.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
DiscordChatExporter.Core.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
DiscordChatExporter.Core.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
DiscordChatExporter.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
DiscordChatExporter.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
DiscordChatExporter.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
DiscordChatExporter.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
Gress.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
Gress.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
JsonExtensions.dll
Resource
win7-20240215-en
Behavioral task
behavioral18
Sample
JsonExtensions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
MaterialDesignColors.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
MaterialDesignColors.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
MaterialDesignThemes.Wpf.dll
Resource
win7-20240220-en
Behavioral task
behavioral22
Sample
MaterialDesignThemes.Wpf.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
Microsoft.Xaml.Behaviors.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
Microsoft.Xaml.Behaviors.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
Onova.dll
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
Onova.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
Polly.Core.dll
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
Polly.Core.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
Polly.dll
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
Polly.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
RazorBlade.dll
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
RazorBlade.dll
Resource
win10v2004-20240226-en
General
-
Target
Gress.dll
-
Size
69KB
-
MD5
3effb4dc1522d2ec34057c26ae8996f6
-
SHA1
a251a798639f65447fa8ffe132e7b2f8b0501db8
-
SHA256
57734ec3a3412c38f7d14aad6da7cb3d2ffc5c339a269862f172f9c6ee273aca
-
SHA512
b6989ddffc62cbdcc4a8ca1c7e6f15f8222a101722e2b91465d10ce0f17086700d84edcddac86e01f5ead94944651f1629ebe4a39d47b0f0201a1aa8beeb16a4
-
SSDEEP
1536:M5XxjstYJn8De36FrNBQA21jUn58cSWeMHMRG:4xJk3FrNBQA2KrfcG
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Gress.dll,#11⤵PID:2348
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3764 --field-trial-handle=3088,i,14310325015283915034,7660943942870463106,262144 --variations-seed-version /prefetch:81⤵PID:1036