Overview

overview

10

Static

static

3

61c8ee9e80...18.exe

windows7-x64

10

61c8ee9e80...18.exe

windows10-2004-x64

10

$APPDATA/1...es.exe

windows7-x64

1

$APPDATA/1...es.exe

windows10-2004-x64

1

$APPDATA/1...de.dll

windows7-x64

1

$APPDATA/1...de.dll

windows10-2004-x64

1

$APPDATA/k...60.dll

windows7-x64

1

$APPDATA/k...60.dll

windows10-2004-x64

1

$APPDATA/k...te.exe

windows7-x64

1

$APPDATA/k...te.exe

windows10-2004-x64

1

$APPDATA/r...cr.dll

windows7-x64

1

$APPDATA/r...cr.dll

windows10-2004-x64

1

$APPDATA/r...ls.dll

windows7-x64

1

$APPDATA/r...ls.dll

windows10-2004-x64

1

$APPDATA/r...om.dll

windows7-x64

1

$APPDATA/r...om.dll

windows10-2004-x64

1

$TEMP/Blackface.dll

windows7-x64

10

$TEMP/Blackface.dll

windows10-2004-x64

10

$TEMP/am/a...UI.dll

windows7-x64

1

$TEMP/am/a...UI.dll

windows10-2004-x64

1

$TEMP/disp...60.dll

windows7-x64

1

$TEMP/disp...60.dll

windows10-2004-x64

1

$TEMP/mcha...60.dll

windows7-x64

1

$TEMP/mcha...60.dll

windows10-2004-x64

1

$TEMP/mcha...60.dll

windows7-x64

1

$TEMP/mcha...60.dll

windows10-2004-x64

1

$TEMP/mcha...ct.dll

windows7-x64

1

$TEMP/mcha...ct.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    21-05-2024 02:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $APPDATA/rss/mscorsecr.dll

  • Size

    22KB

  • MD5

    e8578ddd3ba0d1a0675e4c57da032f95

  • SHA1

    2afc96c75a344140a7f7bb0fa23ea23aaf5794fb

  • SHA256

    fc78f8747f8b57bc340ca6b5055133450e33571a02449069542c91f1d9070b80

  • SHA512

    81614b26683c9e1fad857c961298d8d4f5a1205074ab25755328948d9846163cd360e47327bc5524738318ca4daac6458b336ddc24723b4cc9f4c66c9e3e55a9

  • SSDEEP

    192:IWkcNZ3W/L6fT62gd+XS+aJfT62gc424ct:IWk0Z3Wz6L62S+XS+aJL62

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\$APPDATA\rss\mscorsecr.dll,#1
    1⤵
      PID:2232

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads