Overview
overview
7Static
static
3Xtool 3.rar
windows7-x64
3Xtool 3.rar
windows10-2004-x64
7Xtool 3/De...ha.dll
windows7-x64
1Xtool 3/De...ha.dll
windows10-2004-x64
1Xtool 3/Mi...es.dll
windows7-x64
1Xtool 3/Mi...es.dll
windows10-2004-x64
1Xtool 3/Mi...rs.dll
windows7-x64
1Xtool 3/Mi...rs.dll
windows10-2004-x64
1Xtool 3/Mi...ll.dll
windows7-x64
1Xtool 3/Mi...ll.dll
windows10-2004-x64
1Xtool 3/Mi...ns.dll
windows7-x64
1Xtool 3/Mi...ns.dll
windows10-2004-x64
1Xtool 3/Mi...ck.dll
windows7-x64
1Xtool 3/Mi...ck.dll
windows10-2004-x64
1Xtool 3/README.md
windows7-x64
3Xtool 3/README.md
windows10-2004-x64
3Xtool 3/RestSharp.dll
windows7-x64
1Xtool 3/RestSharp.dll
windows10-2004-x64
1Xtool 3/Sy...om.dll
windows7-x64
1Xtool 3/Sy...om.dll
windows10-2004-x64
1Xtool 3/Up...og.txt
windows7-x64
1Xtool 3/Up...og.txt
windows10-2004-x64
1Xtool 3/Vi...us.dll
windows7-x64
1Xtool 3/Vi...us.dll
windows10-2004-x64
1Xtool 3/Xtool3.exe
windows7-x64
1Xtool 3/Xtool3.exe
windows10-2004-x64
1Analysis
-
max time kernel
115s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
10/04/2024, 23:34
Static task
static1
Behavioral task
behavioral1
Sample
Xtool 3.rar
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Xtool 3.rar
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
Xtool 3/DeathByCaptcha.dll
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
Xtool 3/DeathByCaptcha.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
Xtool 3/Microsoft.WindowsAPICodePack.ExtendedLinguisticServices.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Xtool 3/Microsoft.WindowsAPICodePack.ExtendedLinguisticServices.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
Xtool 3/Microsoft.WindowsAPICodePack.Sensors.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Xtool 3/Microsoft.WindowsAPICodePack.Sensors.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
Xtool 3/Microsoft.WindowsAPICodePack.Shell.dll
Resource
win7-20240319-en
Behavioral task
behavioral10
Sample
Xtool 3/Microsoft.WindowsAPICodePack.Shell.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
Xtool 3/Microsoft.WindowsAPICodePack.ShellExtensions.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
Xtool 3/Microsoft.WindowsAPICodePack.ShellExtensions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
Xtool 3/Microsoft.WindowsAPICodePack.dll
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
Xtool 3/Microsoft.WindowsAPICodePack.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
Xtool 3/README.md
Resource
win7-20240215-en
Behavioral task
behavioral16
Sample
Xtool 3/README.md
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
Xtool 3/RestSharp.dll
Resource
win7-20240220-en
Behavioral task
behavioral18
Sample
Xtool 3/RestSharp.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
Xtool 3/System.CodeDom.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
Xtool 3/System.CodeDom.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
Xtool 3/Update Log.txt
Resource
win7-20240319-en
Behavioral task
behavioral22
Sample
Xtool 3/Update Log.txt
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
Xtool 3/VisualPlus.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
Xtool 3/VisualPlus.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
Xtool 3/Xtool3.exe
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
Xtool 3/Xtool3.exe
Resource
win10v2004-20231215-en
General
-
Target
Xtool 3/System.CodeDom.dll
-
Size
33KB
-
MD5
8da55dede702470c66cd3e2bff562192
-
SHA1
2a5dab71359f6d6a38f44de28a7c3af9ea085e62
-
SHA256
6f93b2f4f3a83f0575a5cbc5bfa962c597bea756d96a26a117d3f464da10e8e4
-
SHA512
037cb271a9f8c20b859fe50e26b5e4d39ba4dab9ec222693322185be7cb786f848cdeef17159d6dcf20fdfd168c428a650a6e4bf47210fb6211cb4223fdc244d
-
SSDEEP
384:TSe6Vw2O1OEeYWLPzr2bAfCqfps7tZ7U6rEAXLWYgWmDrWTgWYDf5OZkum0Gftpx:TVN5EEeYgFfpqJ4DkGDfoVihq+L
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\Xtool 3\System.CodeDom.dll",#11⤵PID:3120
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1408 --field-trial-handle=2280,i,8281149332300504990,9122875031903898779,262144 --variations-seed-version /prefetch:81⤵PID:4792