Overview

overview

10

Static

static

10

TotalAV_Setup.exe

windows11-21h2-x64

8

$APPDATA/T...te.exe

windows11-21h2-x64

1

$APPDATA/T...io.dll

windows11-21h2-x64

3

$APPDATA/T...lt.sys

windows11-21h2-x64

1

$APPDATA/T...bb.sys

windows11-21h2-x64

1

$APPDATA/T...gr.sys

windows11-21h2-x64

1

$APPDATA/T...io.dll

windows11-21h2-x64

3

$APPDATA/T...lt.sys

windows11-21h2-x64

1

$APPDATA/T...bb.sys

windows11-21h2-x64

1

$APPDATA/T...gr.sys

windows11-21h2-x64

1

$APPDATA/T...io.dll

windows11-21h2-x64

3

$APPDATA/T...lt.sys

windows11-21h2-x64

1

$APPDATA/T...bb.sys

windows11-21h2-x64

1

$APPDATA/T...gr.sys

windows11-21h2-x64

1

$APPDATA/T...io.dll

windows11-21h2-x64

3

$APPDATA/T...lt.sys

windows11-21h2-x64

1

Microsoft....cs.dll

windows11-21h2-x64

1

Microsoft....es.dll

windows11-21h2-x64

1

Microsoft.CSharp.dll

windows11-21h2-x64

1

Microsoft....ns.dll

windows11-21h2-x64

1

Microsoft....on.dll

windows11-21h2-x64

1

Microsoft....on.dll

windows11-21h2-x64

Microsoft....ng.dll

windows11-21h2-x64

1

Microsoft....es.dll

windows11-21h2-x64

1

Microsoft....re.dll

windows11-21h2-x64

1

Microsoft....es.dll

windows11-21h2-x64

1

Microsoft....ry.dll

windows11-21h2-x64

1

Mindscape....on.dll

windows11-21h2-x64

1

NamedPipeS...on.dll

windows11-21h2-x64

1

Newtonsoft.Json.dll

windows11-21h2-x64

1

Nito.Async...on.dll

windows11-21h2-x64

1

Nito.AsyncEx.Oop.dll

windows11-21h2-x64

1

Analysis

  • max time kernel
    73s
  • max time network
    102s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240221-en
  • resource tags

    arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    20-03-2024 23:27

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $APPDATA/TotalAV/updates/SAVAPI 11.0.1/on_access/win32/win7/avkmgr.sys

  • Size

    35KB

  • MD5

    20894c53c0b9db8f86993d9ecb78f9d5

  • SHA1

    7c18c5b571c906535d393a5165379f6316143107

  • SHA256

    d5e35a021e2a8e676b9034a2c712907f170d3f5b7315d516f317f51cd03ddd06

  • SHA512

    7fbd637c64a3ed5ce202864197ee26e0d97f84be8bb0bfd5bdbfcf500f370764545489de8d83c347e5f15a414bf5d614377a60983803924935453266f8af5d24

  • SSDEEP

    384:pSxWv2ZhZ4mAjuPUEA1aVrFiFdWeFuu9BTQe7r/nYPLvdJUHeMPP:gS8ZIuPwoz4dWeFuubQEr/KdkP

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c "C:\Users\Admin\AppData\Local\Temp\$APPDATA\TotalAV\updates\SAVAPI 11.0.1\on_access\win32\win7\avkmgr.sys"
    1⤵
      PID:2056
      • C:\Users\Admin\AppData\Local\Temp\$APPDATA\TotalAV\updates\SAVAPI 11.0.1\on_access\win32\win7\avkmgr.sys
        "C:\Users\Admin\AppData\Local\Temp\$APPDATA\TotalAV\updates\SAVAPI 11.0.1\on_access\win32\win7\avkmgr.sys"
        2⤵
          PID:4660

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4660-0-0x0000000000010000-0x000000000001C000-memory.dmp

        Filesize

        48KB

        Download