Overview
overview
10Static
static
3TradingViewPRM.exe
windows7-x64
10TradingViewPRM.exe
windows10-2004-x64
10d3dcompiler_47.dll
windows10-2004-x64
1dxcompiler.dll
windows7-x64
1dxcompiler.dll
windows10-2004-x64
1tflasher.dll
windows7-x64
1tflasher.dll
windows10-2004-x64
1thunder.dll
windows7-x64
1thunder.dll
windows10-2004-x64
1vk_swiftshader.dll
windows7-x64
1vk_swiftshader.dll
windows10-2004-x64
1vulkan-1.dll
windows7-x64
1vulkan-1.dll
windows10-2004-x64
1Analysis
- max time kernel
141s - max time network
131s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
19/05/2024, 23:00
Static task
static1
Behavioral task
behavioral1
Sample
TradingViewPRM.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
TradingViewPRM.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
d3dcompiler_47.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral4
Sample
dxcompiler.dll
Resource
win7-20240221-en
Behavioral task
behavioral5
Sample
dxcompiler.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral6
Sample
tflasher.dll
Resource
win7-20240221-en
Behavioral task
behavioral7
Sample
tflasher.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral8
Sample
thunder.dll
Resource
win7-20240221-en
Behavioral task
behavioral9
Sample
thunder.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral10
Sample
vk_swiftshader.dll
Resource
win7-20240508-en
Behavioral task
behavioral11
Sample
vk_swiftshader.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral12
Sample
vulkan-1.dll
Resource
win7-20240220-en
Behavioral task
behavioral13
Sample
vulkan-1.dll
Resource
win10v2004-20240508-en
General
- Target d3dcompiler_47.dll
- Size 4.7MB
- Sample240519-2y95csfg38
- SHA256 7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d
- MD5 2191e768cc2e19009dad20dc999135a3
- SHA1 f49a46ba0e954e657aaed1c9019a53d194272b6a
- SHA512 5adcb00162f284c16ec78016d301fc11559dd0a781ffbeff822db22efbed168b11d7e5586ea82388e9503b0c7d3740cf2a08e243877f5319202491c8a641c970
- SSDEEP 49152:KCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvhiD0N+YEzI4og/RfzHLeHTRhFRNc:xG2QCwmHPnog/pzHAo/A6l
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d3dcompiler_47.dll,#11⤵PID:1772
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4432,i,16710585221322798697,8586257254049248207,262144 --variations-seed-version --mojo-platform-channel-handle=4612 /prefetch:81⤵PID:2316