Overview

overview

10

Static

static

7

Vortax App Setup.exe

windows10-2004-x64

10

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Accessibility.dll

windows10-2004-x64

1

D3DCompile...r3.dll

windows10-2004-x64

1

DirectWrit...er.dll

windows10-2004-x64

1

Microsoft.CSharp.dll

windows10-2004-x64

1

Microsoft....64.dll

windows10-2004-x64

1

Microsoft....re.dll

windows10-2004-x64

1

Microsoft....ms.dll

windows10-2004-x64

1

Microsoft....ic.dll

windows10-2004-x64

Microsoft....es.dll

windows10-2004-x64

1

Microsoft....ol.dll

windows10-2004-x64

1

Microsoft....ry.dll

windows10-2004-x64

1

Microsoft....ts.dll

windows10-2004-x64

1

PenImc_cor3.dll

windows10-2004-x64

1

PresentationCore.dll

windows10-2004-x64

1

Presentati...re.dll

windows10-2004-x64

1

Presentati...ta.dll

windows10-2004-x64

1

Presentati...ng.dll

windows10-2004-x64

1

Presentati...ml.dll

windows10-2004-x64

1

Presentati...nq.dll

windows10-2004-x64

1

Presentati...ro.dll

windows10-2004-x64

1

Presentati...o2.dll

windows10-2004-x64

1

Presentati...te.dll

windows10-2004-x64

1

Presentati...ic.dll

windows10-2004-x64

1

Presentati...na.dll

windows10-2004-x64

1

Presentati...le.dll

windows10-2004-x64

1

Presentati...rk.dll

windows10-2004-x64

1

Presentati...r3.dll

windows10-2004-x64

1

PresentationUI.dll

windows10-2004-x64

1

Resubmissions

19-07-2024 16:44

240719-t9bryatfme 10

02-05-2024 07:54

240502-jrj1gseg96 10

Analysis

  • max time kernel
    146s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-05-2024 07:54

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    PresentationFramework.AeroLite.dll

  • Size

    234KB

  • MD5

    8bc611a7167eee966c126c294bfc4a42

  • SHA1

    387c1f1c4283fc895c7408308bfafe4c5104fb6d

  • SHA256

    c646fe54a9e2ee2349bdc25a3d3be095728b1d6bfa9743dc80829115b8169535

  • SHA512

    3e2f900667fcb01b7a8b78915a8dd1f9c835ef9c3e441b1e548b1257fc3e7e3f3c62f33e5c376e0e998424d79bd89e52b0937354e49d1777ef8ebaafc86021c8

  • SSDEEP

    3072:UU05HdISwFhxxtKriVWOFm7Y9Eq/2StV3feKu:r0JdINHdEq/ttV3i

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\PresentationFramework.AeroLite.dll,#1
    1⤵
      PID:3100

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads