Overview

overview

7

Static

static

3

windirstat...up.exe

windows7-x64

7

windirstat...up.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...al.ini

windows7-x64

1

$PLUGINSDI...al.ini

windows10-2004-x64

1

$PLUGINSDI...rd.bmp

windows7-x64

3

$PLUGINSDI...rd.bmp

windows10-2004-x64

7

$_5_.exe

windows7-x64

7

$_5_.exe

windows10-2004-x64

7

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

shfolder.dll

windows7-x64

1

shfolder.dll

windows10-2004-x64

1

wdsh0407.chm

windows7-x64

1

wdsh0407.chm

windows10-2004-x64

1

wdsh040e.chm

windows7-x64

1

wdsh040e.chm

windows10-2004-x64

1

wdsh0415.chm

windows7-x64

1

wdsh0415.chm

windows10-2004-x64

1

wdsr0405.dll

windows7-x64

1

wdsr0405.dll

windows10-2004-x64

1

wdsr0407.dll

windows7-x64

1

wdsr0407.dll

windows10-2004-x64

1

wdsr040a.dll

windows7-x64

1

wdsr040a.dll

windows10-2004-x64

1

wdsr040b.dll

windows7-x64

1

wdsr040b.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    148s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13-03-2024 08:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    wdsr040a.dll

  • Size

    60KB

  • MD5

    cf69ec4f622ab3efc0d59c94c7861d3c

  • SHA1

    8baa748295cb941e1693e4c2a298343fbfc5c048

  • SHA256

    75ca96992380e5b8e323310a01c8a68805ad76223197d2bdaecc03817d233dea

  • SHA512

    dcc99395fed596e6ef7a959731254093e73fa006a14b0ecbe6f780a9d8236428d9e90024e016d5f1bdbf323e1fe01ffa3727c9d09a8666ef2745dc56462ed6cf

  • SSDEEP

    384:jH6u7Vn2KDadkOKDVdS9Ew5eNC1GF8wcgnSLIdOpAv18/pIaqSivHxACkwYcwiZY:HxKQ8wcgnSQOi16IaavWiZaKCam

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\wdsr040a.dll,#1
    1⤵
      PID:820

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads