750c447d6e3c7d74ccab736a0082ef437b1cd2000d761d3aff2b73227457b29c | Triage

Submit
Reports

Overview

overview

Static

static

3

750c447d6e...9c.exe

windows7-x64

750c447d6e...9c.exe

windows10-2004-x64

AudioManag...le.exe

windows7-x64

AudioManag...le.exe

windows10-2004-x64

Microsoft....ns.dll

windows7-x64

1

Microsoft....ns.dll

windows10-2004-x64

1

PocoInitializer.dll

windows7-x64

1

PocoInitializer.dll

windows10-2004-x64

1

System.Win...ty.dll

windows7-x64

1

System.Win...ty.dll

windows10-2004-x64

1

bass.dll

windows7-x64

1

bass.dll

windows10-2004-x64

1

bzip2.dll

windows7-x64

3

bzip2.dll

windows10-2004-x64

3

d3d10core.dll

windows10-2004-x64

1

iconv.dll

windows7-x64

3

iconv.dll

windows10-2004-x64

3

libgthread-2.0-0.dll

windows7-x64

1

libgthread-2.0-0.dll

windows10-2004-x64

1

wxwidgetsforms2.dll

windows7-x64

wxwidgetsforms2.dll

windows10-2004-x64

xmlparse.dll

windows7-x64

1

xmlparse.dll

windows10-2004-x64

1

Analysis

max time kernel
147s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
10-04-2024 11:54

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

750c447d6e3c7d74ccab736a0082ef437b1cd2000d761d3aff2b73227457b29c.exe

Resource

win7-20240221-en

babadeda outsteel crypter loader spyware stealer

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

750c447d6e3c7d74ccab736a0082ef437b1cd2000d761d3aff2b73227457b29c.exe

Resource

win10v2004-20231215-en

babadeda outsteel crypter loader spyware stealer

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral3

Sample

AudioManagementConsole.exe

Resource

win7-20240221-en

babadeda outsteel crypter loader spyware stealer

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral4

Sample

AudioManagementConsole.exe

Resource

win10v2004-20240226-en

babadeda outsteel crypter loader spyware stealer

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral5

Sample

Microsoft.Expression.Interactions.dll

Resource

win7-20240220-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Microsoft.Expression.Interactions.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

PocoInitializer.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

PocoInitializer.dll

Resource

win10v2004-20240319-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

System.Windows.Interactivity.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

System.Windows.Interactivity.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

bass.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

bass.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

bzip2.dll

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

bzip2.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

d3d10core.dll

Resource

win10v2004-20231215-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

iconv.dll

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

iconv.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

libgthread-2.0-0.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

libgthread-2.0-0.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

wxwidgetsforms2.dll

Resource

win7-20240319-en

babadeda crypter loader

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

wxwidgetsforms2.dll

Resource

win10v2004-20240226-en

babadeda crypter loader

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

xmlparse.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

xmlparse.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

System.Windows.Interactivity.dll
Size

54KB
MD5

580244bc805220253a87196913eb3e5e
SHA1

ce6c4c18cf638f980905b9cb6710ee1fa73bb397
SHA256

93fbc59e4880afc9f136c3ac0976ada7f3faa7cacedce5c824b337cbca9d2ebf
SHA512

2666b594f13ce9df2352d10a3d8836bf447eaf6a08da528b027436bb4affaad9cd5466b4337a3eaf7b41d3021016b53c5448c7a52c037708cae9501db89a73f0
SSDEEP

1536:BYQaIZaEmaOQxn6JxKjtlMZAnuETAV+w4:aIhOQcSLAj4

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\System.Windows.Interactivity.dll,#1
1⤵
PID:3244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy