Overview

overview

3

Static

static

3

Themes/Aer....theme

windows7-x64

1

Themes/Aer....theme

windows10-2004-x64

1

Themes/Aer....theme

windows7-x64

1

Themes/Aer....theme

windows10-2004-x64

1

Themes/Aer....theme

windows7-x64

1

Themes/Aer....theme

windows10-2004-x64

1

Themes/Aer....theme

windows7-x64

1

Themes/Aer....theme

windows10-2004-x64

1

Themes/Aer....theme

windows7-x64

1

Themes/Aer....theme

windows10-2004-x64

1

Themes/Aer....theme

windows7-x64

1

Themes/Aer....theme

windows10-2004-x64

1

Themes/Aer...le.dll

windows10-2004-x64

1

Themes/Aer...le.dll

windows10-2004-x64

1

Themes/Aer...en.dll

windows7-x64

1

Themes/Aer...en.dll

windows10-2004-x64

1

Themes/Aer...ic.dll

windows7-x64

1

Themes/Aer...ic.dll

windows10-2004-x64

1

Themes/Aer...ny.dll

windows7-x64

1

Themes/Aer...ny.dll

windows10-2004-x64

1

Themes/Aer...le.dll

windows10-2004-x64

1

Themes/Aer...le.dll

windows10-2004-x64

1

Themes/Aer...ta.dll

windows7-x64

1

Themes/Aer...ta.dll

windows10-2004-x64

1

Themes/Aer...ic.dll

windows7-x64

1

Themes/Aer...ic.dll

windows10-2004-x64

1

Themes/Aer...ny.dll

windows7-x64

1

Themes/Aer...ny.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    48s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/04/2024, 10:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Themes/Aero10 Vista.theme

  • Size

    1KB

  • MD5

    4dd4da8a4cd4c7985f3ae2cacb980cd4

  • SHA1

    1edeb225cb98fbaf35dfaaf7c089c86984a2a63d

  • SHA256

    dce708d7619a9daa587988decb696c4941432c3f892565ff5ed78a670c806c3c

  • SHA512

    2e6ae7818587cf73d544293b9a10b8ed48731a4cd47c5d54edc7be068f89ceadf592c4a28818a372936120ef55328fad448832248e79d95ed740238d1f79313a

Score
1/10

Malware Config

Signatures

  • Modifies Control Panel 1 IoCs
    evasion

Processes

  • C:\Windows\system32\rundll32.exe
    C:\Windows\system32\rundll32.exe C:\Windows\system32\shell32.dll,Control_RunDLL C:\Windows\system32\desk.cpl desk,@Themes /Action:OpenTheme /file:"C:\Users\Admin\AppData\Local\Temp\Themes\Aero10 Vista.theme"
    1⤵
    • Modifies Control Panel
    PID:2512

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Themes\Custom.theme
    Filesize

    1KB

    MD5

    05471356f0ea1c0f5f5b8deb29c3ebd1

    SHA1

    12b14b737d1e0f76ca2494fb7a6841e5792a0504

    SHA256

    cf59479c75a8803468dd2a2c1d2803a2694c41992d5a0b3b65b1c69c28d1eac7

    SHA512

    942285259612792c2b3a45a65483e0775314841e397e815d447fd8f69f63f5de1ac48653a051c0121bd73415655c468772d39ce72bb1ba3d8ae367f78143502b

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Themes\Custom.theme
    Filesize

    1KB

    MD5

    159bd6a587f370f16522b2a6f690bcc3

    SHA1

    c07d14fc439997e2f65b982c0702a985b36b9cf8

    SHA256

    9193c9b28f4e19c5fbd00340dce578825fbc6ce6ab67b1c9082c0d8f64446993

    SHA512

    a1ddc058193d778b3935ef8f158bb06f014de72124d5561a4d7af99e77921bcfe5ffcb24a1375917d5e438e0f2a1dccb96c1bdc2fa5b6aaf75ca5cabe1788e46

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Themes\Custom.theme
    Filesize

    1KB

    MD5

    7c048eaacd1820ac933dccc0b872fa05

    SHA1

    955999eb7463f7e4031d551e24fbd1e1fb812197

    SHA256

    614d7a9ca519b3aa741a512e95f6f99aedd25e8c1630d30d13dd9735b562b3be

    SHA512

    09f35a1a69344e64b13f0a54ecc82cd7dd1ee9124bfc274fcd5fe8af2a07e30bbf0841d9230591cbbe12bc8f066f5f36e1577b82d5d1f3f0eb6b9b5154ce5d4b

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Themes\Custom.theme
    Filesize

    1KB

    MD5

    b65aeb1b3da0b96313cc6e10dde4afe0

    SHA1

    34039989280d6d5a45793deaab79665c79b74b8d

    SHA256

    0254d776e25aeb83f195aacc7d477cd37683932586b27fdb7f09836d08296a3c

    SHA512

    be5c22848ee3491061feaab9c8e708e04e5d34bc0d8b46e816e059e6616c0114cfe5f40aee935f9d5dee546a990efa3bca00bdec03bcc29fedad37d0dbda95ea

    Download Submit

  • memory/2512-657-0x0000000001DD0000-0x0000000001DD1000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2512-658-0x0000000001DD0000-0x0000000001DD1000-memory.dmp

    Filesize

    4KB

    Download