Analysis

  • max time kernel
    112s
  • max time network
    130s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240426-en
  • resource tags

    arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    01/05/2024, 11:28

General

  • Target

    AfterFX.exe

  • Size

    1.2MB

  • MD5

    3eb89bb58eb24bb4d00a1fdc358f542c

  • SHA1

    828bd6b98ab8bedeffa33fc08aa973d2bab62194

  • SHA256

    a0b62ee747731cb6af017d6b3e466e2b5ece06680f39bd55bc093038246454fd

  • SHA512

    a718321cdb03b150236f887aa3496da01d22fdfd5713c799f5dee1946fca7805b9847ddd890ade45aec9f4d486fb0f8fec8e25da7d3ecc821eb4a6ef0f9d3c46

  • SSDEEP

    3072:6ND0TJ5eXmVxI9UZlWRhSXLcgSr9uHUIbvEzX2Cqtid9gtO4hNB:6NCJ5eaxIeHGST+OplxB

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\AfterFX.exe
    "C:\Users\Admin\AppData\Local\Temp\AfterFX.exe"
    1⤵
      PID:4516
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:484

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\vcredist2010_x64.log-MSI_vc_red.msi.txt

        Filesize

        379KB

        MD5

        a98fcac112270c9cbfa47633be08a31e

        SHA1

        7d97f6a81c1f6e26662605bc3f671fb52b88d85f

        SHA256

        ca13ea189516bc6cda44d9bedd567c451f0761223a98e95d1e2281cac8e2c481

        SHA512

        5e75b7ed83edb7fbd6d297a782d4ff9e47a9a024afc4b1f6e1ef1d258d38fc5b310a03978740d4063add962047583a352edeb663b29ec018288981731fb0f9b7

      • C:\vcredist2010_x64.log.html

        Filesize

        86KB

        MD5

        4e27562f2e296b1102b0b3fd5e8e832e

        SHA1

        7a2f5481e37e5a88278d374f9d01a60b43ba6354

        SHA256

        d2774b2ebc2383829953e934815b6d488090380959b9240a27704c68444e475e

        SHA512

        b6fcaaf16cb9bba89238c341e68764d74160a0fc4ed1ffc2745f82b81fae01dc7bca66835077de56caae02f7e15d2e92503dfdc95d6158a467b7b1744c606a67

      • C:\vcredist2010_x86.log-MSI_vc_red.msi.txt

        Filesize

        395KB

        MD5

        434a279e7929aa1d7a02b46260bfb96e

        SHA1

        ff9c80c63f9ff08ec42b4d98ddfb7a0ef6fc40c8

        SHA256

        058968cc2d2e974b6fc2945aab3abcd0578c0e447da25ea4ffe2c5f0179b0f5a

        SHA512

        044c02105d354ed70fd3dbaaf3aebb60fdec6a561629c55d11e7dd655271973d66be81c82d6e06f65158a3233cf76f67d2bca63c021f31ff3641eb74cf6b943c

      • C:\vcredist2010_x86.log.html

        Filesize

        81KB

        MD5

        6385bf4c72c26afd2126e35550699f6b

        SHA1

        4438ccaef1a22906b7191c17f763456fa815cd9d

        SHA256

        490a5cce193e3851fd7fa7f2713a8d6c300f225dfc3b280560078e9e840ad8c7

        SHA512

        2b22d7361e08fc96bd2587b61e57b43082ffcf4f2680070c4bf65529e0ab6a1ce1632e6a827f7acbb9b7683947932fe67f52a783cefe54892de05f9faf001fb8

      • C:\vcredist2012_x64_0_vcRuntimeMinimum_x64.log

        Filesize

        167KB

        MD5

        b8e472210cdb0435bbc05fa7f9941892

        SHA1

        5f8e1a5a800cdba0d7d4f8817813b9855a60778f

        SHA256

        13868a69d1120dfb6024faa6f2c38bd222e89898aff34867fea99283c9e68aa4

        SHA512

        1a1b6de16fef21fc07dc9bd586e327ec40832e272db4d0213595c83e1d8d3d974eb978bc31d2c9d571d557bdc7fca3d8987da3e7ee76d0a91a4f098084dedfc0

      • C:\vcredist2012_x64_1_vcRuntimeAdditional_x64.log

        Filesize

        195KB

        MD5

        62487b2f546ceca198817068ff73c01c

        SHA1

        a894f5a33237287d5dd8be0d72ce4f02c65ae57a

        SHA256

        58fa20040005595fd65ac133e107bbe6a0a79471ce544ad6b92838c8038bfe13

        SHA512

        ced71b39870d50711663bbde235f4b0d86420c26478418018fe2dd85594e5b3fbb95e8450f239bcbae15849ac5274102f07e195728558628a69900256a8f7240

      • C:\vcredist2012_x86_0_vcRuntimeMinimum_x86.log

        Filesize

        171KB

        MD5

        40aecbb2b749fedbdb70f7a77c1350ec

        SHA1

        63364662b4f3a6cac5ccaa21a0e4745f88b42971

        SHA256

        80866a7ed51467208e2cac53800b0b9588c20824d5782352bb3979ceb430f078

        SHA512

        2154a87b89fc07b2edc925d45b23af79f33ad7fe73d2ac0dc0014f0a2e9cd8c419077f2d65e1b419a4e8432a671a917989590aebd2f7587c9cb6609a8d0c6aad

      • C:\vcredist2012_x86_1_vcRuntimeAdditional_x86.log

        Filesize

        208KB

        MD5

        4915b8ce5e33d3ab4a689d245fdeeda8

        SHA1

        a3a7580b0ed0c88b943ea0b6f29f9ff767b495d7

        SHA256

        22f0b47d78341b4b8e7cc6a30f263de1e51eba66dbc7a45305edf810df5c2177

        SHA512

        b13894957054cb653136ce976df37e8ecab1cd1f516c599522b0bf22f76eafc5f3165ee03c55bfba9e175da3a5a071b2149d91ba5e61723119494679c1ffd0c0

      • C:\vcredist2013_x64_000_vcRuntimeMinimum_x64.log

        Filesize

        170KB

        MD5

        19cbae431ec12b6c647028e183af7615

        SHA1

        ff5a1cce809cb0bbf27a079b20fdada0acdeefb6

        SHA256

        1fefbdcce142e6ba39d1104faf32fdd11bc566e33187ef236575cdd8827ce28f

        SHA512

        c88606e7de6ada5f7d991161f0e55c207a3ca78057f1768abd6ea09661dd7418e75d6e183cc8db7576cc27d8a7a73db220e6e82c5cc1bc0832b555e1dd2bc71c

      • C:\vcredist2013_x64_001_vcRuntimeAdditional_x64.log

        Filesize

        190KB

        MD5

        ddf4c077546717c199a80f35ebb5a62c

        SHA1

        aceb5d1a144d5926296869ce475c83ed934e09ae

        SHA256

        c90103e8055388849beb6b843bac5247efaaedbf06ed7014c006eeb50f6c66e9

        SHA512

        f50dfd3dcc8b786413105e451b0956c31e70b818365d17cccacdcadf2a3564b80b2ebd52e6478f54a1d3e1feedb13d1d0ea476e58d56033c7f2ff9949b8a38e1

      • C:\vcredist2013_x86_000_vcRuntimeMinimum_x86.log

        Filesize

        170KB

        MD5

        572a4c5e11edeac90f5051cc0e866af0

        SHA1

        d54ce6d3bfc25e7ad929e7ca133180a21d93db10

        SHA256

        992a253aae667769d95fca40d2d36d72c8791974d5bdf302fa50fa2a826eec65

        SHA512

        2e8c3570f6bcf7d48f88e288fd08b93a806fd4772b899821b3cd89702acf12b365ab29057bad5df13f2921e305e57ffc2150a7dfc14280cde51843c16ad1db16

      • C:\vcredist2013_x86_001_vcRuntimeAdditional_x86.log

        Filesize

        198KB

        MD5

        a274761f7c466df599e4d79fb6ba5693

        SHA1

        441df9ea6e0423363a3221c41f8ab663bd18648d

        SHA256

        fa450879d2c2f485374404ef003cb8cc7cb3d7e4022a23d1821af9f449ec5bd2

        SHA512

        389ad26091c9eb81b3b4c3ba2dab4c21042be8bfcf2eb57ee5236318ff38474daf93ed93292ae2327dd077f614b1b4a442faf49a58bacda3ac162e4c0d4e5526

      • C:\vcredist2022_x64_000_vcRuntimeMinimum_x64.log

        Filesize

        123KB

        MD5

        d7c0187b22b91eb7e18905e69cebbd11

        SHA1

        90dce09ca55b276d9fc613da8641f7942c3476d3

        SHA256

        18df64c9f21b2760c32f592f33d1087cccd9b6fd44387b94f04019737408bec3

        SHA512

        a65637de04ac4e1fb368c495f1157194e5582a48ef68498ae285ed5b5cb59a719580ad1f6ca0fc9e54cd03fd2949b2861644d0b87f56992bba3e20c2b9cdc296

      • C:\vcredist2022_x64_001_vcRuntimeAdditional_x64.log

        Filesize

        129KB

        MD5

        69cf3548c72f49d9abdc52f292efc391

        SHA1

        304d001755bd4ddc63c601cc743cca7b75772a95

        SHA256

        864aadcc7c9f81cb15d237af4fe473df9537bc3b8b62987a3b8edba02dcf54d5

        SHA512

        dbffd9d2fdd65a5c9a5eab7fe32d8235837f3ed3a4ec960a75c7e14fe36e7a8c704e1428195be1459399b98d4df9f86b5c38bd70706e6a29ea762c6623be4da1

      • C:\vcredist2022_x86_000_vcRuntimeMinimum_x86.log

        Filesize

        123KB

        MD5

        7988d6c13995b6211b5b30b16cde4323

        SHA1

        bdeed037f504d2196c971a3f5528e01ae6c7c79b

        SHA256

        ae3d0df77b0a8b882b4faf850d3976b674861794f03df7e83f4b22ad77487f72

        SHA512

        4f2483b6d5b7ff1c7445f0b7061c76e1a801bb73fdf769b01f1956aa1d12d2071697592a0b154797efe4a427f1e1ee32e90af88728aa2bd9a62d745f69cc2d68

      • C:\vcredist2022_x86_001_vcRuntimeAdditional_x86.log

        Filesize

        135KB

        MD5

        eecad8ea195c2021aa5be7bc807e3081

        SHA1

        a7304fce4c69e3d644327e4859be5137a8740227

        SHA256

        a04693c869e238cce81da43b42119764fa4ba430f1414440d1acaa6e09784cf4

        SHA512

        15d681d985cb3f2a27a588159ba1e764996801ceff44a0afe49f085ad7762bd9a73f99694255cabe9a75ed13d1769bbdc7a8a5d85b891fa9b8d9457ea49160be