Overview

overview

7

Static

static

7

602984a335...18.exe

windows7-x64

7

602984a335...18.exe

windows10-2004-x64

7

$COMMONFIL...R0.dll

windows7-x64

1

$COMMONFIL...R0.dll

windows10-2004-x64

1

$COMMONFIL...1_.exe

windows7-x64

1

$COMMONFIL...1_.exe

windows10-2004-x64

1

$COMMONFIL...er.dll

windows7-x64

1

$COMMONFIL...er.dll

windows10-2004-x64

1

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$R0.dll

windows7-x64

1

$R0.dll

windows10-2004-x64

1

$R2/NSIS.L...1_.exe

windows7-x64

1

$R2/NSIS.L...1_.exe

windows10-2004-x64

1

1041/LogSysServer.dll

windows7-x64

1

1041/LogSysServer.dll

windows10-2004-x64

1

ActiveBand.dll

windows7-x64

1

ActiveBand.dll

windows10-2004-x64

1

BBIPP.dll

windows7-x64

3

BBIPP.dll

windows10-2004-x64

3

CheckForUpdate.dll

windows7-x64

1

CheckForUpdate.dll

windows10-2004-x64

5

FLVScreenVideo.dll

windows7-x64

3

FLVScreenVideo.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 16:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1041/LogSysServer.dll

  • Size

    160KB

  • MD5

    cb9d5d57b10a3529aa0b3ae70ab56325

  • SHA1

    db2c0e4de6af27df0409b27f8c40df4481c13b8b

  • SHA256

    ce7907e12c1774c0620efab22eb97f9c46925ad93bbe151f8ad37f188df96977

  • SHA512

    352684b297269cc9d217701511d92659a4b2b16856911b11b67c080d5b1670a9068f84329d1450f741f8af14d421f38759a8929c70b48a9d527ad1110a8eaea0

  • SSDEEP

    1536:2PLWaYhnkALzau3dq3LdY2PCIDNvxrkPI8xzdfW+iEnSPxX83V:6Bm53I3LdrPC5zdfWESPxX8l

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1041\LogSysServer.dll,#1
    1⤵
      PID:1708

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads