4cdb5a1fbe2b961c6ee7aa63411a44eee1d86671053ba877c2a5d4e3fcb673eb | Triage

Submit
Reports

Overview

overview

8

Static

static

7

workwinScr...��.doc

windows7-x64

4

workwinScr...��.doc

windows10-2004-x64

1

workwinScr...60.dll

windows7-x64

1

workwinScr...60.dll

windows10-2004-x64

1

workwinScr...up.exe

windows7-x64

4

workwinScr...up.exe

windows10-2004-x64

4

workwinScr...hs.dll

windows7-x64

1

workwinScr...hs.dll

windows10-2004-x64

1

workwinScr...tv.exe

windows7-x64

8

workwinScr...tv.exe

windows10-2004-x64

8

workwinScr...rk.dll

windows7-x64

1

workwinScr...rk.dll

windows10-2004-x64

1

workwinScr...up.exe

windows7-x64

1

workwinScr...up.exe

windows10-2004-x64

1

workwinScr...tv.exe

windows7-x64

8

workwinScr...tv.exe

windows10-2004-x64

8

workwinScr...rk.dll

windows7-x64

1

workwinScr...rk.dll

windows10-2004-x64

1

workwinScr...tv.exe

windows7-x64

8

workwinScr...tv.exe

windows10-2004-x64

8

workwinScr...rk.dll

windows7-x64

1

workwinScr...rk.dll

windows10-2004-x64

1

workwinScr...TL.dll

windows7-x64

1

workwinScr...TL.dll

windows10-2004-x64

1

workwinScr...CK.dll

windows7-x64

1

workwinScr...CK.dll

windows10-2004-x64

1

workwinScr...er.exe

windows7-x64

1

workwinScr...er.exe

windows10-2004-x64

8

workwinScr...le.dll

windows7-x64

1

workwinScr...le.dll

windows10-2004-x64

1

workwinScr...��.exe

windows7-x64

1

workwinScr...��.exe

windows10-2004-x64

1

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
11-03-2024 01:56

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

workwinScreen/WorkWinǽƤ.doc

Resource

win7-20240221-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

workwinScreen/WorkWinǽƤ.doc

Resource

win10v2004-20240226-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

workwinScreen/Ӷ(Ա)/Ϊװ/Msvbvm60.dll

Resource

win7-20240215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

workwinScreen/Ӷ(Ա)/Ϊװ/Msvbvm60.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

workwinScreen/Ӷ(Ա)/Ϊװ/Setup.exe

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

workwinScreen/Ӷ(Ա)/Ϊװ/Setup.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

workwinScreen/Ӷ(Ա)/Ϊװ/Vb6chs.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

workwinScreen/Ӷ(Ա)/Ϊװ/Vb6chs.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

workwinScreen/Ӷ(Ա)/Ϊװ/WorkWintv.exe

Resource

win7-20240221-en

evasion persistence

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral10

Sample

workwinScreen/Ӷ(Ա)/Ϊװ/WorkWintv.exe

Resource

win10v2004-20240226-en

evasion persistence

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral11

Sample

workwinScreen/Ӷ(Ա)/Ϊװ/wintvwork.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

workwinScreen/Ӷ(Ա)/Ϊװ/wintvwork.dll

Resource

win10v2004-20231215-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

workwinScreen/Ӷ(Ա)/Ϊװ/Setup.exe

Resource

win7-20240220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

workwinScreen/Ӷ(Ա)/Ϊװ/Setup.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

workwinScreen/Ӷ(Ա)/Ϊװ/WorkWintv.exe

Resource

win7-20240221-en

evasion persistence

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral16

Sample

workwinScreen/Ӷ(Ա)/Ϊװ/WorkWintv.exe

Resource

win10v2004-20240226-en

evasion persistence

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral17

Sample

workwinScreen/Ӷ(Ա)/Ϊװ/wintvwork.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

workwinScreen/Ӷ(Ա)/Ϊװ/wintvwork.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

workwinScreen/Ӷ(Ա)/ⰲװɫ/WorkWintv.exe

Resource

win7-20240221-en

evasion persistence

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral20

Sample

workwinScreen/Ӷ(Ա)/ⰲװɫ/WorkWintv.exe

Resource

win10v2004-20240226-en

evasion persistence

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral21

Sample

workwinScreen/Ӷ(Ա)/ⰲװɫ/wintvwork.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

workwinScreen/Ӷ(Ա)/ⰲװɫ/wintvwork.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

workwinScreen//MSCOMCTL.dll

Resource

win7-20240220-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

workwinScreen//MSCOMCTL.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

workwinScreen//MSWINSCK.dll

Resource

win7-20231129-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

workwinScreen//MSWINSCK.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

workwinScreen//WorkWinTvServer.exe

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

workwinScreen//WorkWinTvServer.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral29

Sample

workwinScreen//eaagle.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

workwinScreen//eaagle.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

workwinScreen//бʧܵ޸.exe

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

workwinScreen//бʧܵ޸.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

workwinScreen/Ӷ(Ա)/Ϊװ/Vb6chs.dll
Size

99KB
MD5

4eb560ad85cc7924f507fbe5a901577a
SHA1

574f6a47a809d91dd122f68bd5cc14d9d66aad37
SHA256

e6b4aec131b5dd42342d57f0fd9075873527569631e8ce5f411811202103aec3
SHA512

3a736fadf1b962b0c39e1215bf3279ef75cc14e37f9923e2380577b030dd45c150a684158dbc3e542bcabfaf9d4636f343dfe0bb9b6a10e6eb02cfaecfd24f54
SSDEEP

768:8+0pMmmRv2IKP857UdtzuJRkfYzvL3IW:8+MS2BP854d5TYz

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\workwinScreen\Ӷ(Ա)\Ϊװ\Vb6chs.dll,#1
1⤵
PID:3896

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy