Overview

overview

10

Static

static

3

61c8ee9e80...18.exe

windows7-x64

10

61c8ee9e80...18.exe

windows10-2004-x64

10

$APPDATA/1...es.exe

windows7-x64

1

$APPDATA/1...es.exe

windows10-2004-x64

1

$APPDATA/1...de.dll

windows7-x64

1

$APPDATA/1...de.dll

windows10-2004-x64

1

$APPDATA/k...60.dll

windows7-x64

1

$APPDATA/k...60.dll

windows10-2004-x64

1

$APPDATA/k...te.exe

windows7-x64

1

$APPDATA/k...te.exe

windows10-2004-x64

1

$APPDATA/r...cr.dll

windows7-x64

1

$APPDATA/r...cr.dll

windows10-2004-x64

1

$APPDATA/r...ls.dll

windows7-x64

1

$APPDATA/r...ls.dll

windows10-2004-x64

1

$APPDATA/r...om.dll

windows7-x64

1

$APPDATA/r...om.dll

windows10-2004-x64

1

$TEMP/Blackface.dll

windows7-x64

10

$TEMP/Blackface.dll

windows10-2004-x64

10

$TEMP/am/a...UI.dll

windows7-x64

1

$TEMP/am/a...UI.dll

windows10-2004-x64

1

$TEMP/disp...60.dll

windows7-x64

1

$TEMP/disp...60.dll

windows10-2004-x64

1

$TEMP/mcha...60.dll

windows7-x64

1

$TEMP/mcha...60.dll

windows10-2004-x64

1

$TEMP/mcha...60.dll

windows7-x64

1

$TEMP/mcha...60.dll

windows10-2004-x64

1

$TEMP/mcha...ct.dll

windows7-x64

1

$TEMP/mcha...ct.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21-05-2024 02:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $TEMP/mchat/jpa/brands/MicrosoftVisualStudioVCProject.dll

  • Size

    12KB

  • MD5

    764476d7dd24d9985094b893703c286f

  • SHA1

    5457c9241b5c6d5c75ba0d658d7eee9771e2e9df

  • SHA256

    f495e676a55360c516c6c57e20b5839007ac25379b992ec33afcb36e3a5de6ad

  • SHA512

    6fdaea500aa4d357a086149772f9e493bde963c94074c01d0797ac0e4c8ce3a50e30a59f0cdc9f162b0b514deed5d2638ad2896afb2e856dfdbbf650c3d1978c

  • SSDEEP

    192:HuNyzZuu7Ykg2TTv4Sy9PlgV4gViTBUGbLJ37gmEXGk3y6BxtWr89WN:Hhsk9TESoXgViTBUG537sXx3y6LtWI9W

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\$TEMP\mchat\jpa\brands\MicrosoftVisualStudioVCProject.dll,#1
    1⤵
      PID:2956

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads