Overview

overview

7

Static

static

3

DWMBG.7z

windows11-21h2-x64

3

ButtonGlowExt.res

windows11-21h2-x64

3

DWMBlurGlass.exe

windows11-21h2-x64

7

cstealer.pyc

windows11-21h2-x64

3

DWMBlurGlassExt.dll

windows11-21h2-x64

1

data/AeroPeek.png

windows11-21h2-x64

3

data/btngl...se.png

windows11-21h2-x64

3

data/btngl...er.png

windows11-21h2-x64

3

data/config.ini

windows11-21h2-x64

3

data/defaultres.dmres

windows11-21h2-x64

3

data/glass.png

windows11-21h2-x64

3

data/lang/de-DE.xml

windows11-21h2-x64

1

data/lang/en-US.xml

windows11-21h2-x64

1

data/lang/es-MX.xml

windows11-21h2-x64

1

data/lang/fr-FR.xml

windows11-21h2-x64

1

data/lang/id-ID.xml

windows11-21h2-x64

1

data/lang/it-IT.xml

windows11-21h2-x64

1

data/lang/ja-JP.xml

windows11-21h2-x64

1

data/lang/ko-KR.xml

windows11-21h2-x64

1

data/lang/pt-BR.xml

windows11-21h2-x64

1

data/lang/ru-RU.xml

windows11-21h2-x64

1

data/lang/sv-SE.xml

windows11-21h2-x64

1

data/lang/tr-TR.xml

windows11-21h2-x64

1

data/lang/zh-CN.xml

windows11-21h2-x64

1

data/lang/zh-SG.xml

windows11-21h2-x64

1

data/lang/zh-TW.xml

windows11-21h2-x64

1

data/symbo...re.pdb

windows11-21h2-x64

3

data/symbo...WM.pdb

windows11-21h2-x64

3

dbghelp.dll

windows11-21h2-x64

1

symsrv.dll

windows11-21h2-x64

1

Analysis

  • max time kernel
    0s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240508-en
  • resource tags

    arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    12/05/2024, 10:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    symsrv.dll

  • Size

    377KB

  • MD5

    497fa5a31783c8c4f01868f148af3051

  • SHA1

    b1eeb2cd1b5830d04b2e7af8f77f7f29d92051e7

  • SHA256

    0c86ecde02f6f1914bb28cee8f0fe24d61514b64ec245e2205058bfbcddffe82

  • SHA512

    f8df4f56086bd6013b3fb4644bca586f7685a42c7181dfccf55fae07354173b69884438dc1e79705423cded01be7a96a0b9bc550dd7a75febedbe55bb9a2f7f3

  • SSDEEP

    6144:QaTukwLaV09TycV2GTEGkzYiYSmav6LtHNQbgjpeWhSGu:QtGV0pycV2kFkzHYSp6LccleN

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\symsrv.dll,#1
    1⤵
      PID:4940

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads