Overview
overview
7Static
static
3Xtool 3.rar
windows7-x64
3Xtool 3.rar
windows10-2004-x64
7Xtool 3/De...ha.dll
windows7-x64
1Xtool 3/De...ha.dll
windows10-2004-x64
1Xtool 3/Mi...es.dll
windows7-x64
1Xtool 3/Mi...es.dll
windows10-2004-x64
1Xtool 3/Mi...rs.dll
windows7-x64
1Xtool 3/Mi...rs.dll
windows10-2004-x64
1Xtool 3/Mi...ll.dll
windows7-x64
1Xtool 3/Mi...ll.dll
windows10-2004-x64
1Xtool 3/Mi...ns.dll
windows7-x64
1Xtool 3/Mi...ns.dll
windows10-2004-x64
1Xtool 3/Mi...ck.dll
windows7-x64
1Xtool 3/Mi...ck.dll
windows10-2004-x64
1Xtool 3/README.md
windows7-x64
3Xtool 3/README.md
windows10-2004-x64
3Xtool 3/RestSharp.dll
windows7-x64
1Xtool 3/RestSharp.dll
windows10-2004-x64
1Xtool 3/Sy...om.dll
windows7-x64
1Xtool 3/Sy...om.dll
windows10-2004-x64
1Xtool 3/Up...og.txt
windows7-x64
1Xtool 3/Up...og.txt
windows10-2004-x64
1Xtool 3/Vi...us.dll
windows7-x64
1Xtool 3/Vi...us.dll
windows10-2004-x64
1Xtool 3/Xtool3.exe
windows7-x64
1Xtool 3/Xtool3.exe
windows10-2004-x64
1Analysis
-
max time kernel
142s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
10/04/2024, 23:34
Static task
static1
Behavioral task
behavioral1
Sample
Xtool 3.rar
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Xtool 3.rar
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
Xtool 3/DeathByCaptcha.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
Xtool 3/DeathByCaptcha.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
Xtool 3/Microsoft.WindowsAPICodePack.ExtendedLinguisticServices.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Xtool 3/Microsoft.WindowsAPICodePack.ExtendedLinguisticServices.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
Xtool 3/Microsoft.WindowsAPICodePack.Sensors.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Xtool 3/Microsoft.WindowsAPICodePack.Sensors.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
Xtool 3/Microsoft.WindowsAPICodePack.Shell.dll
Resource
win7-20240319-en
Behavioral task
behavioral10
Sample
Xtool 3/Microsoft.WindowsAPICodePack.Shell.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
Xtool 3/Microsoft.WindowsAPICodePack.ShellExtensions.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
Xtool 3/Microsoft.WindowsAPICodePack.ShellExtensions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
Xtool 3/Microsoft.WindowsAPICodePack.dll
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
Xtool 3/Microsoft.WindowsAPICodePack.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
Xtool 3/README.md
Resource
win7-20240215-en
Behavioral task
behavioral16
Sample
Xtool 3/README.md
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
Xtool 3/RestSharp.dll
Resource
win7-20240220-en
Behavioral task
behavioral18
Sample
Xtool 3/RestSharp.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
Xtool 3/System.CodeDom.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
Xtool 3/System.CodeDom.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
Xtool 3/Update Log.txt
Resource
win7-20240319-en
Behavioral task
behavioral22
Sample
Xtool 3/Update Log.txt
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
Xtool 3/VisualPlus.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
Xtool 3/VisualPlus.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
Xtool 3/Xtool3.exe
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
Xtool 3/Xtool3.exe
Resource
win10v2004-20231215-en
General
-
Target
Xtool 3/Microsoft.WindowsAPICodePack.Shell.dll
-
Size
529KB
-
MD5
54fe9a2748c4a0f282d4ec91e3cadc16
-
SHA1
970b783a697d893ecd4916dd86b5ff7574896c9e
-
SHA256
e6fa9d9e34ff3bf63ce782654b14e4b54a3abd1022c87bc099032c2948157672
-
SHA512
c7d567e3c039f98f3a99249b2d9bc2186c34efd73eec421331732d2307a8af940911381e27b015f58d0f65871bb4b038cc0f27d3fa495acd08994226bb033b7f
-
SSDEEP
6144:KRAFnp++R1yj124hKX97kANqQHlWBwn9dgPan1W86b8c3v6n9c6KwZErn+LYHtA:iApI2D97kANVFWBwn9iPIL9Mwh
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\Xtool 3\Microsoft.WindowsAPICodePack.Shell.dll",#11⤵PID:4156
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1040 --field-trial-handle=2264,i,15001568551143786084,90255922961447677,262144 --variations-seed-version /prefetch:81⤵PID:4232