d3c03c42a42c9b5cd4f3d72a0cfc0859f0099b8199af842da762b0584ab4bea0

Submit
Reports

Overview

overview

Static

static

RStudio-20...02.exe

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...ng.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

resources/...-0.dll

windows10-1703-x64

Analysis

max time kernel
323s
max time network
1226s
platform
windows10-1703_x64
resource
win10-20240404-es
resource tags

arch:x64arch:x86image:win10-20240404-eslocale:es-esos:windows10-1703-x64systemwindows
submitted
19/04/2024, 06:11

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

RStudio-2023.12.1-402.exe

Resource

win10-20240404-es

discovery

windows10-1703-x64

6 signatures

1200 seconds

Behavioral task

behavioral2

Sample

resources/app/bin/rsclang/x86/api-ms-win-core-sysinfo-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral3

Sample

resources/app/bin/rsclang/x86/api-ms-win-core-timezone-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral4

Sample

resources/app/bin/rsclang/x86/api-ms-win-core-util-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral5

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-conio-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

2 signatures

1200 seconds

Behavioral task

behavioral6

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-convert-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral7

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-environment-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral8

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-filesystem-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

2 signatures

1200 seconds

Behavioral task

behavioral9

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-heap-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

2 signatures

1200 seconds

Behavioral task

behavioral10

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-locale-l1-1-0.dll

Resource

win10-20240319-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral11

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-math-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral12

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-multibyte-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral13

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-private-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

2 signatures

1200 seconds

Behavioral task

behavioral14

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-process-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral15

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-runtime-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral16

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-stdio-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral17

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-string-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral18

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-time-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral19

Sample

resources/app/bin/rsclang/x86/api-ms-win-crt-utility-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

1 signatures

1200 seconds

Behavioral task

behavioral20

Sample

resources/app/bin/rsclang/x86/libclang.dll

Resource

win10-20240404-es

windows10-1703-x64

2 signatures

1200 seconds

Behavioral task

behavioral21

Sample

resources/app/bin/rsclang/x86_64/api-ms-win-core-console-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1200 seconds

Behavioral task

behavioral22

Sample

resources/app/bin/rsclang/x86_64/api-ms-win-core-console-l1-2-0.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1200 seconds

Behavioral task

behavioral23

Sample

resources/app/bin/rsclang/x86_64/api-ms-win-core-datetime-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1200 seconds

Behavioral task

behavioral24

Sample

resources/app/bin/rsclang/x86_64/api-ms-win-core-debug-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1200 seconds

Behavioral task

behavioral25

Sample

resources/app/bin/rsclang/x86_64/api-ms-win-core-errorhandling-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1200 seconds

Behavioral task

behavioral26

Sample

resources/app/bin/rsclang/x86_64/api-ms-win-core-file-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1200 seconds

Behavioral task

behavioral27

Sample

resources/app/bin/rsclang/x86_64/api-ms-win-core-file-l1-2-0.dll

Resource

win10-20240319-es

windows10-1703-x64

0 signatures

1200 seconds

Behavioral task

behavioral28

Sample

resources/app/bin/rsclang/x86_64/api-ms-win-core-file-l2-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1200 seconds

Behavioral task

behavioral29

Sample

resources/app/bin/rsclang/x86_64/api-ms-win-core-handle-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1200 seconds

Behavioral task

behavioral30

Sample

resources/app/bin/rsclang/x86_64/api-ms-win-core-heap-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1200 seconds

Behavioral task

behavioral31

Sample

resources/app/bin/rsclang/x86_64/api-ms-win-core-interlocked-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1200 seconds

Behavioral task

behavioral32

Sample

resources/app/bin/rsclang/x86_64/api-ms-win-core-libraryloader-l1-1-0.dll

Resource

win10-20240404-es

windows10-1703-x64

0 signatures

1200 seconds

Report Analysis Logs

General

Target

resources/app/bin/rsclang/x86/libclang.dll
Size

74.5MB
MD5

d6553de4d0f414dba39f4d4335f49fdd
SHA1

4987051e49ee6c41ca1c08d39ac09c6bca836b5c
SHA256

7ba970792013e6f48bfd9f6d75becbddb7a83444d4633bc75d5837b25c994d88
SHA512

f7e0927a62f42d510ab34bea6ca036f4537d690926a7b0ab26d8dcbfb11139f39e4fe153fca68d50e448a39c0958479a07b996b6ea7da82bbadbdb1c8209f969
SSDEEP

786432:oOXQ1dqzrW2Nk+t8mwi035dzK9IBhuSFWoIFIHwMsOmwlC:K1diN3t8vbBUIQ1OmwQ

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
996	3056	WerFault.exe	72

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1796 wrote to memory of 3056	1796	rundll32.exe	72
PID 1796 wrote to memory of 3056	1796	rundll32.exe	72
PID 1796 wrote to memory of 3056	1796	rundll32.exe	72

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\resources\app\bin\rsclang\x86\libclang.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1796
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\resources\app\bin\rsclang\x86\libclang.dll,#1
  2⤵
  PID:3056
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 3056 -s 628
    3⤵
    - Program crash
    PID:996

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads