c19a446466f794b7916015e94d63b2566fdb1d94ff0bb1a30bbeb5fe3ceb1b38

Submit
Reports

Overview

overview

Static

static

NordVPN Pr...on.zip

windows10-1703-x64

NordVPN Pr...or.dll

windows10-1703-x64

NordVPN Pr...c].exe

windows10-1703-x64

NordVPN Pr...ui.dll

windows10-1703-x64

NordVPN Pr...ty.dll

windows10-1703-x64

NordVPN Pr...mm.dll

windows10-1703-x64

NordVPN Pr...mt.dll

windows10-1703-x64

NordVPN Pr...lp.dll

windows10-1703-x64

NordVPN Pr...ne.dll

windows10-1703-x64

NordVPN Pr...ht.dll

windows10-1703-x64

NordVPN Pr...er.dll

windows10-1703-x64

NordVPN Pr...ok.dll

windows10-1703-x64

NordVPN Pr...it.dll

windows10-1703-x64

NordVPN Pr...ol.dll

windows10-1703-x64

NordVPN Pr...4D.dll

windows10-1703-x64

NordVPN Pr...ol.dll

windows10-1703-x64

NordVPN Pr...on.dll

windows10-1703-x64

NordVPN Pr...GL.dll

windows10-1703-x64

NordVPN Pr...CK.dll

windows10-1703-x64

NordVPN Pr...32.dll

windows10-1703-x64

NordVPN Pr...32.dll

windows10-1703-x64

NordVPN Pr...bS.dll

windows10-1703-x64

NordVPN Pr...bS.dll

windows10-1703-x64

NordVPN Pr...tl.dll

windows10-1703-x64

NordVPN Pr...sw.dll

windows10-1703-x64

Analysis

max time kernel
50s
max time network
51s
platform
windows10-1703_x64
resource
win10-20240221-en
resource tags

arch:x64arch:x86image:win10-20240221-enlocale:en-usos:windows10-1703-x64system
submitted
15/03/2024, 09:29

Sharing

Copy URL

Twitter E-mail

Static task

static1

upx

3 signatures

Behavioral task

behavioral1

Sample

NordVPN Premium 7.2.0 Full Version.zip

Resource

win10-20240221-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/HwidProtector.dll

Resource

win10-20240221-en

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/InstallerTool[Automatic].exe

Resource

win10-20240221-en

redline infostealer

windows10-1703-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/Qt5Gui.dll

Resource

win10-20240221-en

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/Security.dll

Resource

win10-20240221-en

windows10-1703-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/borlndmm.dll

Resource

win10-20240214-en

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/cc32100mt.dll

Resource

win10-20240221-en

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/dbghelp.dll

Resource

win10-20240221-en

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/dll/DLL_AnalyzeGesturesInOne.dll

Resource

win10-20240221-en

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/dll/DLL_AnalyzeGesturesInRight.dll

Resource

win10-20240221-en

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/dll/DLL_MouseDeviceManager.dll

Resource

win10-20240221-en

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/dll/DLL_MouseEventHook.dll

Resource

win10-20240221-en

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/dll/DLL_PenSuit.dll

Resource

win10-20240221-en

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/dll/DLL_ScrollbarControl.dll

Resource

win10-20240221-en

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/dll/DLL_Wheel4D.dll

Resource

win10-20240221-en

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/dll/DLL_ZoomControl.dll

Resource

win10-20240221-en

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/iconengines/qsvgicon.dll

Resource

win10-20240221-en

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/libEGL.dll

Resource

win10-20240221-en

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/ocx/MSWINSCK.dll

Resource

win10-20240221-en

windows10-1703-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/ocx/RICHTX32.dll

Resource

win10-20240221-en

windows10-1703-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/ocx/TABCTL32.dll

Resource

win10-20240214-en

windows10-1703-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/ocx/TabS.dll

Resource

win10-20240221-en

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/ocx/TabS.dll

Resource

win10-20240221-en

upx

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/ocx/mscomctl.dll

Resource

win10-20240221-en

windows10-1703-x64

2 signatures

150 seconds

Behavioral task

behavioral25

Sample

NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/opengl32sw.dll

Resource

win10-20240221-en

windows10-1703-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

NordVPN Premium 7.2.0 Full Version.zip
Size

10.5MB
MD5

6376c394b909fc79e82cd8b1bbbdbea5
SHA1

70dfb4e675b9958cd782087ba0932445938dd377
SHA256

c19a446466f794b7916015e94d63b2566fdb1d94ff0bb1a30bbeb5fe3ceb1b38
SHA512

74ac6170a5beaee3d6692798358831322f1bf252a90a9c01b7ed6ec0987a59f4863d95eee2300dec757e39b5e1be36e51cd8ebb4750e47a781293866208527d2
SSDEEP

196608:60HLI4l71dksQ0V21Oggc4FcQPw5TTmYfoK0bfSoQvhO7Jv:60rzdu0kR4/2XjobbE8Jv

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\NordVPN Premium 7.2.0 Full Version.zip"
1⤵
PID:3328

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1924

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads