Overview
overview
10Static
static
8Spyware/Ag...la.exe
windows7-x64
4Spyware/Ag...la.exe
windows10-2004-x64
4MaterialDe...rs.dll
windows7-x64
1MaterialDe...rs.dll
windows10-2004-x64
1MaterialDe...pf.dll
windows7-x64
1MaterialDe...pf.dll
windows10-2004-x64
1Microsoft....re.dll
windows7-x64
1Microsoft....re.dll
windows10-2004-x64
1SharpSteam.dll
windows7-x64
1SharpSteam.dll
windows10-2004-x64
1System.Man...on.dll
windows7-x64
1System.Man...on.dll
windows10-2004-x64
1UWPHook.exe
windows7-x64
1UWPHook.exe
windows10-2004-x64
1VDFParser.dll
windows7-x64
1VDFParser.dll
windows10-2004-x64
1Spyware/HawkEye.exe
windows7-x64
10Spyware/HawkEye.exe
windows10-2004-x64
10Spyware/Kakwa.doc
windows7-x64
10Spyware/Kakwa.doc
windows10-2004-x64
10Spyware/bu...op.exe
windows7-x64
7Spyware/bu...op.exe
windows10-2004-x64
7Analysis
-
max time kernel
142s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
03-03-2024 01:15
Behavioral task
behavioral1
Sample
Spyware/AgentTesla.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Spyware/AgentTesla.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
MaterialDesignColors.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
MaterialDesignColors.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
MaterialDesignThemes.Wpf.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
MaterialDesignThemes.Wpf.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
Microsoft.Management.Infrastructure.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Microsoft.Management.Infrastructure.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
SharpSteam.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
SharpSteam.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
System.Management.Automation.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
System.Management.Automation.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
UWPHook.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
UWPHook.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
VDFParser.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
VDFParser.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
Spyware/HawkEye.exe
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
Spyware/HawkEye.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
Spyware/Kakwa.doc
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
Spyware/Kakwa.doc
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
Spyware/butterflyondesktop.exe
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
Spyware/butterflyondesktop.exe
Resource
win10v2004-20240226-en
General
-
Target
MaterialDesignThemes.Wpf.dll
-
Size
7.1MB
-
MD5
fbd761926164043ac71ee9b83ab37fd1
-
SHA1
38d44b0f40fa31124ba139adeb6f7adc7e53ee19
-
SHA256
013a42b8c6ffa29e2198eed4faf6168247b6550a4c4ed5d82023a1d82a08e27e
-
SHA512
c2a0be2d8b5b98dc19ad167aadc1e68905ad259e3b0e020cfb95a8a816964549c98a9c5bc44b8f4640147bfd8555e799216b8dba13bf0eefed9582782da552d2
-
SSDEEP
98304:OXJDntBksKY+ND3WyA4+TLVei10vMzPv8/4C8B5XVS49Xzy83IiEcJMrCR2fShTf:onJ45/9iD54+V11bFv4z
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\MaterialDesignThemes.Wpf.dll,#11⤵PID:4344
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=2232 --field-trial-handle=2284,i,15722001240173834669,15048020084704567542,262144 --variations-seed-version /prefetch:81⤵PID:3584