d3c03c42a42c9b5cd4f3d72a0cfc0859f0099b8199af842da762b0584ab4bea0

Submit
Reports

Overview

overview

Static

static

RStudio-20...02.exe

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...ng.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

Analysis

max time kernel
223s
max time network
1226s
platform
windows10-1703_x64
resource
win10-20240404-es
resource tags

arch:x64arch:x86image:win10-20240404-eslocale:es-esos:windows10-1703-x64systemwindows
submitted
19/04/2024, 06:11

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

RStudio-2023.12.1-402.exe

Resource

win10-20240404-es

discovery

windows10-1703-x64

6 signatures

1200 seconds

Behavioral task

behavioral2

Sample

resources/app/bin/rsclang/x86/api-ms-win-core-sysinfo-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral3

Sample

resources/app/bin/rsclang/x86/api-ms-win-core-timezone-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral4

Sample

resources/app/bin/rsclang/x86/api-ms-win-core-util-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral5

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-conio-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

2 signatures

1200 seconds

Behavioral task

behavioral6

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-convert-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral7

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-environment-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral8

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-filesystem-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

2 signatures

1200 seconds

Behavioral task

behavioral9

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-heap-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

2 signatures

1200 seconds

Behavioral task

behavioral10

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-locale-l1-1-0.dll

Resource

win10-20240319-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral11

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-math-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral12

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-multibyte-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral13

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-private-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

2 signatures

1200 seconds

Behavioral task

behavioral14

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-process-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral15

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-runtime-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral16

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-stdio-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral17

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-string-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral18

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-time-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral19

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-utility-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral20

Sample

resources/app/bin/rsclang/x86/libclang.dll

Resource

win10-20240404-es

windows10-1703-x64

2 signatures

1200 seconds

Behavioral task

behavioral21

Sample

resources/app/bin/rsclang/x86_64/api-ms-win-core-console-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1200 seconds

Behavioral task

behavioral22

Sample

resources/app/bin/rsclang/x86_64/api-ms-win-core-console-l1-2-0.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1200 seconds

Behavioral task

behavioral23

Sample

resources/app/bin/rsclang/x86_64/api-ms-win-core-datetime-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1200 seconds

Behavioral task

behavioral24

Sample

resources/app/bin/rsclang/x86_64/api-ms-win-core-debug-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1200 seconds

Behavioral task

behavioral25

Sample

resources/app/bin/rsclang/x86_64/api-ms-win-core-errorhandling-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1200 seconds

Behavioral task

behavioral26

Sample

resources/app/bin/rsclang/x86_64/api-ms-win-core-file-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1200 seconds

Behavioral task

behavioral27

Sample

resources/app/bin/rsclang/x86_64/api-ms-win-core-file-l1-2-0.dll

Resource

win10-20240319-es

windows10-1703-x64

0 signatures

1200 seconds

Behavioral task

behavioral28

Sample

resources/app/bin/rsclang/x86_64/api-ms-win-core-file-l2-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1200 seconds

Behavioral task

behavioral29

Sample

resources/app/bin/rsclang/x86_64/api-ms-win-core-handle-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1200 seconds

Behavioral task

behavioral30

Sample

resources/app/bin/rsclang/x86_64/api-ms-win-core-heap-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1200 seconds

Behavioral task

behavioral31

Sample

resources/app/bin/rsclang/x86_64/api-ms-win-core-interlocked-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1200 seconds

Behavioral task

behavioral32

Sample

resources/app/bin/rsclang/x86_64/api-ms-win-core-libraryloader-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1200 seconds

Report Analysis Logs

General

Target

resources/app/bin/rsclang/x86/api-ms-win-crt-time-l1-1-0.dll
Size

21KB
MD5

32abf928ec4678c2bd68a894da7de229
SHA1

eccc5e68ecf49a8bc448b88a6a8887a570ce47d4
SHA256

ae60603ed90d3ce024a9c05bdac449abb34ba43251241a27298f4a717a27c249
SHA512

0e71ba1249f65e05461c3e416876502104dc302131312d44151ebde2d95df9433b6faeea3ca0e1afe5831172d59eaf3f348735609894e5ecec3f8d31d199ab2b
SSDEEP

192:muJD2WfhW4g40V2sms/nGfegRnLyFqnajmI6DllKWWFYg7VWQ4mWvaDLyFqnajmi:mucWfhWvLm0Gf9olp6DufolpqjC

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4772 wrote to memory of 5092	4772	rundll32.exe	71
PID 4772 wrote to memory of 5092	4772	rundll32.exe	71
PID 4772 wrote to memory of 5092	4772	rundll32.exe	71

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\resources\app\bin\rsclang\x86\api-ms-win-crt-time-l1-1-0.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4772
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\resources\app\bin\rsclang\x86\api-ms-win-crt-time-l1-1-0.dll,#1
  2⤵
  PID:5092

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads