Overview
overview
3Static
static
3RoundedTB_...r3.dll
windows10-2004-x64
1RoundedTB_...r3.dll
windows7-x64
1RoundedTB_...r3.dll
windows10-2004-x64
1RoundedTB_...r3.dll
windows7-x64
1RoundedTB_...r3.dll
windows10-2004-x64
1RoundedTB_...TB.exe
windows7-x64
1RoundedTB_...TB.exe
windows10-2004-x64
1RoundedTB_...ni.dll
windows7-x64
1RoundedTB_...ni.dll
windows10-2004-x64
1RoundedTB_...r3.dll
windows7-x64
1RoundedTB_...r3.dll
windows10-2004-x64
1RoundedTB_...r3.dll
windows7-x64
1RoundedTB_...r3.dll
windows10-2004-x64
1Analysis
- max time kernel
151s - max time network
166s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
06/03/2024, 12:54
Static task
static1
Behavioral task
behavioral1
Sample
RoundedTB_canary20231016_2/RoundedTB/D3DCompiler_47_cor3.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
RoundedTB_canary20231016_2/RoundedTB/PenImc_cor3.dll
Resource
win7-20240221-en
Behavioral task
behavioral3
Sample
RoundedTB_canary20231016_2/RoundedTB/PenImc_cor3.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral4
Sample
RoundedTB_canary20231016_2/RoundedTB/PresentationNative_cor3.dll
Resource
win7-20240221-en
Behavioral task
behavioral5
Sample
RoundedTB_canary20231016_2/RoundedTB/PresentationNative_cor3.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral6
Sample
RoundedTB_canary20231016_2/RoundedTB/RoundedTB.exe
Resource
win7-20240215-en
Behavioral task
behavioral7
Sample
RoundedTB_canary20231016_2/RoundedTB/RoundedTB.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral8
Sample
RoundedTB_canary20231016_2/RoundedTB/sni.dll
Resource
win7-20240221-en
Behavioral task
behavioral9
Sample
RoundedTB_canary20231016_2/RoundedTB/sni.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral10
Sample
RoundedTB_canary20231016_2/RoundedTB/vcruntime140_cor3.dll
Resource
win7-20240221-en
Behavioral task
behavioral11
Sample
RoundedTB_canary20231016_2/RoundedTB/vcruntime140_cor3.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral12
Sample
RoundedTB_canary20231016_2/RoundedTB/wpfgfx_cor3.dll
Resource
win7-20240221-en
Behavioral task
behavioral13
Sample
RoundedTB_canary20231016_2/RoundedTB/wpfgfx_cor3.dll
Resource
win10v2004-20240226-en
General
- Target RoundedTB_canary20231016_2/RoundedTB/wpfgfx_cor3.dll
- Size 1.9MB
- Sample240306-p476qscc94
- SHA256 09c4b6806b59060339ce6e8fdaf4da145a88179328dedff9534b9483a66566f0
- MD5 b6ceca7dfded8815e1968d8bd2377ea3
- SHA1 6dfd0f8bdab3f8ce796a3bc18cf9ac32dd8b8d9e
- SHA512 a6b058494d7e741f36e5ed60e6d9cd49b8f7ceb9bd14f40bf2c02b63355dee74f99c27f75c82e180ef2342287f02e798be99f9bdec879574e78151f0819fc20d
- SSDEEP 24576:J/XEktqAzKItIzYa7p3NmIvLOnHcjDet6EEC8jml8htD8kqDD1K:CrAzzI8a13NmfH8e1EC+h+1RK
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\RoundedTB_canary20231016_2\RoundedTB\wpfgfx_cor3.dll,#11⤵PID:416
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4356 --field-trial-handle=2256,i,6670388345726423024,18382795228658886258,262144 --variations-seed-version /prefetch:81⤵PID:2024