0bd48f713b543fa69cebab66718e20c33defff30e49894d0587ef2e5f6b6e5f9

Login
Reports

Overview

overview

Static

static

Ruination....r3.dll

windows10-2004-x64

Ruination....r3.dll

windows7-x64

Ruination....r3.dll

windows10-2004-x64

Ruination....r3.dll

windows7-x64

Ruination....r3.dll

windows10-2004-x64

Ruination....on.exe

windows7-x64

Ruination....on.exe

windows10-2004-x64

Ruination....er.dll

windows7-x64

Ruination....er.dll

windows10-2004-x64

Ruination....ss.dll

windows7-x64

Ruination....ss.dll

windows10-2004-x64

Ruination....64.dll

windows7-x64

Ruination....64.dll

windows10-2004-x64

Ruination....r3.dll

windows7-x64

Ruination....r3.dll

windows10-2004-x64

Ruination....r3.dll

windows7-x64

Ruination....r3.dll

windows10-2004-x64

Ruination....64.dll

windows7-x64

Ruination....64.dll

windows10-2004-x64

Ruination....64.dll

windows7-x64

Ruination....64.dll

windows10-2004-x64

Ruination....ts.jar

windows7-x64

Ruination....ts.jar

windows10-2004-x64

Ruination....oy.jar

windows7-x64

Ruination....oy.jar

windows10-2004-x64

Ruination....ws.jar

windows7-x64

Ruination....ws.jar

windows10-2004-x64

Ruination....se.jar

windows7-x64

Ruination....se.jar

windows10-2004-x64

Ruination....ce.jar

windows7-x64

Ruination....ce.jar

windows10-2004-x64

Ruination....fr.jar

windows7-x64

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10/04/2024, 04:33

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Ruination.Swapper 2.0.8/D3DCompiler_47_cor3.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Ruination.Swapper 2.0.8/PenImc_cor3.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Ruination.Swapper 2.0.8/PenImc_cor3.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Ruination.Swapper 2.0.8/PresentationNative_cor3.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Ruination.Swapper 2.0.8/PresentationNative_cor3.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Ruination.Swapper 2.0.8/Ruination.exe

Resource

win7-20240221-en

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral7

Sample

Ruination.Swapper 2.0.8/Ruination.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

9 signatures

150 seconds

redline discovery infostealer spyware stealer

Behavioral task

behavioral8

Sample

Ruination.Swapper 2.0.8/WebView2Loader.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Ruination.Swapper 2.0.8/WebView2Loader.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Ruination.Swapper 2.0.8/aspnetcorev2_inprocess.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

Ruination.Swapper 2.0.8/aspnetcorev2_inprocess.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Ruination.Swapper 2.0.8/oo2core_9_win64.dll

Resource

win7-20231129-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

Ruination.Swapper 2.0.8/oo2core_9_win64.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Ruination.Swapper 2.0.8/vcruntime140_cor3.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

Ruination.Swapper 2.0.8/vcruntime140_cor3.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Ruination.Swapper 2.0.8/wpfgfx_cor3.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Ruination.Swapper 2.0.8/wpfgfx_cor3.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Ruination.Swapper 2.0.8/wwwroot/aopaliance/lince/NVSPCAPS/_nvspcaps64.dll

Resource

win7-20240319-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Ruination.Swapper 2.0.8/wwwroot/aopaliance/lince/NVSPCAPS/_nvspcaps64.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Ruination.Swapper 2.0.8/wwwroot/aopaliance/lince/Plugins/LocalSystem/_nvspserviceplugin64.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Ruination.Swapper 2.0.8/wwwroot/aopaliance/lince/Plugins/LocalSystem/_nvspserviceplugin64.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Ruination.Swapper 2.0.8/wwwroot/backup/amd64/cmm/charsets.jar

Resource

win7-20240215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Ruination.Swapper 2.0.8/wwwroot/backup/amd64/cmm/charsets.jar

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral24

Sample

Ruination.Swapper 2.0.8/wwwroot/backup/amd64/cmm/deploy.jar

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Ruination.Swapper 2.0.8/wwwroot/backup/amd64/cmm/deploy.jar

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral26

Sample

Ruination.Swapper 2.0.8/wwwroot/backup/amd64/cmm/javaws.jar

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Ruination.Swapper 2.0.8/wwwroot/backup/amd64/cmm/javaws.jar

Resource

win10v2004-20231215-en

windows10-2004-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral28

Sample

Ruination.Swapper 2.0.8/wwwroot/backup/amd64/cmm/jsse.jar

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Ruination.Swapper 2.0.8/wwwroot/backup/amd64/cmm/jsse.jar

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral30

Sample

Ruination.Swapper 2.0.8/wwwroot/backup/ext/deploy/jce.jar

Resource

win7-20240319-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Ruination.Swapper 2.0.8/wwwroot/backup/ext/deploy/jce.jar

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral32

Sample

Ruination.Swapper 2.0.8/wwwroot/backup/ext/deploy/jfr.jar

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target
Ruination.Swapper 2.0.8/PenImc_cor3.dll
Size 158KB
Sample240410-e6l16sgc8y
SHA256 bed3c7f6cf295929504239543c8fd948ed9f53a032e5282399d57e8b03525da3
MD5 f8852f500b48675d752c7aef6fbc8b30
SHA1 d553939d34896fb0a80ccc31ce5250c4881a1340
SHA512 e4a874c8168c5e0cdbedf951ddd5f1c0bc0e85b8f5da6a76a871927d3387bf3b26ba3a1c1ad2635b13d6186d80199888c53f9c6442cd988e6acd216cdc0145f1
SSDEEP 3072:izAUq2kMBlUb8BQLBzDUw7aaHSuEm8WPuoATZ+AiRvsY4Jib:izHkMTvmLtDUw2huEmb2LbYv/
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\regsvr32.exe
regsvr32 /s "C:\Users\Admin\AppData\Local\Temp\Ruination.Swapper 2.0.8\PenImc_cor3.dll"
1⤵
PID:2316

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads