Overview

overview

7

Static

static

3

internatio...df.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...er.bmp

windows10-2004-x64

7

$PLUGINSDI...rd.bmp

windows10-2004-x64

7

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$WINDIR/primopdf.ini

windows10-2004-x64

1

Online_UG.url

windows10-2004-x64

3

PrimDel.exe

windows10-2004-x64

1

PrimInst.exe

windows10-2004-x64

1

PrimoRun.exe

windows10-2004-x64

1

gsdll32.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    145s
  • max time network
    204s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/04/2024, 02:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $WINDIR/primopdf.ini

  • Size

    196B

  • MD5

    a735ff9da3f85c2f4ee958b01d754002

  • SHA1

    4c51b5cc0c605f74a616987f41f43adfd7240382

  • SHA256

    0d99ed6d0b9dbc2ec60a58a564d8ede94b557a77d98a1dca29384255fa7345de

  • SHA512

    0a15c8e0e99dd1d624691c3bee4b198ac046c73f6bd0afb809e1c06fcbcbc77fdb9918333df177b84f4ec8e27c152838ca4b7fb3e125484391b67bf0593b6bd1

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\$WINDIR\primopdf.ini
    1⤵
      PID:1744

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads