Overview

overview

7

Static

static

3

20d7aa58c4...18.exe

windows7-x64

7

20d7aa58c4...18.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$TEMP/tap-windows.exe

windows7-x64

7

$TEMP/tap-windows.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

bin/tapinstall.exe

windows7-x64

1

bin/tapinstall.exe

windows10-2004-x64

1

driver/tap0901.sys

windows7-x64

1

driver/tap0901.sys

windows10-2004-x64

1

bin/libeay32.dll

windows7-x64

1

bin/libeay32.dll

windows10-2004-x64

1

bin/liblzo2-2.dll

windows7-x64

1

bin/liblzo2-2.dll

windows10-2004-x64

1

bin/libpkc...-1.dll

windows7-x64

1

bin/libpkc...-1.dll

windows10-2004-x64

1

bin/openssl.exe

windows7-x64

1

bin/openssl.exe

windows10-2004-x64

1

bin/openvpn-gui.exe

windows7-x64

1

bin/openvpn-gui.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/05/2024, 14:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bin/liblzo2-2.dll

  • Size

    219KB

  • MD5

    94cc5c9574eb1fe385023ca3381410e3

  • SHA1

    5a23f573b530d32eb05b7ff7a977d6eaf643ec55

  • SHA256

    d05121096f74aaa5ce072847fa0423674c10dd00732e15fe3ff167788f62b365

  • SHA512

    ec0936954373a6fdc70abd7645067edcea69fd21a561d9a435cd901f2b80fb473a3f56196e3d6d71956699fc839998715818524475719d583f2abca2c0e8997e

  • SSDEEP

    1536:riQDI9iB5P86xhPOkxDCCvgPplTKlTnHIWOF37oe3:fPZPNdgPpRKBHUF37z

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\bin\liblzo2-2.dll,#1
    1⤵
      PID:1680

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads