507641e3047216809af93a127af70a266e273cd95c1cfaa06605a753b9166388 | Triage

Submit
Reports

Overview

overview

6

Static

static

3

Delta V3.61.zip

windows7-x64

1

Delta V3.61.zip

windows10-2004-x64

1

Delta V3.61/Delta.exe

windows7-x64

3

Delta V3.61/Delta.exe

windows10-2004-x64

6

Delta V3.6...it.dll

windows7-x64

1

Delta V3.6...it.dll

windows10-2004-x64

1

Delta V3.6...on.dll

windows7-x64

1

Delta V3.6...on.dll

windows10-2004-x64

1

Delta V3.6...90.dll

windows7-x64

1

Delta V3.6...90.dll

windows10-2004-x64

3

Delta V3.6...92.dll

windows7-x64

1

Delta V3.6...92.dll

windows10-2004-x64

3

Delta V3.6...PI.dll

windows7-x64

1

Delta V3.6...PI.dll

windows10-2004-x64

1

Delta V3.6...ua.xml

windows7-x64

1

Delta V3.6...ua.xml

windows10-2004-x64

1

Delta V3.6...s.json

windows7-x64

3

Delta V3.6...s.json

windows10-2004-x64

3

Delta V3.6...rs.txt

windows7-x64

1

Delta V3.6...rs.txt

windows10-2004-x64

1

Delta V3.6...re.txt

windows7-x64

1

Delta V3.6...re.txt

windows10-2004-x64

1

Analysis

max time kernel
234s
max time network
257s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
21-05-2024 14:33

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Delta V3.61.zip

Resource

win7-20240221-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral2

Sample

Delta V3.61.zip

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral3

Sample

Delta V3.61/Delta.exe

Resource

win7-20240215-en

windows7-x64

2 signatures

300 seconds

Behavioral task

behavioral4

Sample

Delta V3.61/Delta.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

10 signatures

300 seconds

Behavioral task

behavioral5

Sample

Delta V3.61/ICSharpCode.AvalonEdit.dll

Resource

win7-20240508-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral6

Sample

Delta V3.61/ICSharpCode.AvalonEdit.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral7

Sample

Delta V3.61/Newtonsoft.Json.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral8

Sample

Delta V3.61/Newtonsoft.Json.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral9

Sample

Delta V3.61/bin/590.dll

Resource

win7-20240419-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral10

Sample

Delta V3.61/bin/590.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral11

Sample

Delta V3.61/bin/592.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

300 seconds

Behavioral task

behavioral12

Sample

Delta V3.61/bin/592.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral13

Sample

Delta V3.61/bin/Fluxteam_net_API.dll

Resource

win7-20240221-en

windows7-x64

2 signatures

300 seconds

Behavioral task

behavioral14

Sample

Delta V3.61/bin/Fluxteam_net_API.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

2 signatures

300 seconds

Behavioral task

behavioral15

Sample

Delta V3.61/bin/lua.xml

Resource

win7-20240419-en

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral16

Sample

Delta V3.61/bin/lua.xml

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral17

Sample

Delta V3.61/bin/modules.json

Resource

win7-20240221-en

windows7-x64

5 signatures

300 seconds

Behavioral task

behavioral18

Sample

Delta V3.61/bin/modules.json

Resource

win10v2004-20240508-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral19

Sample

Delta V3.61/bin/vers.txt

Resource

win7-20240220-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral20

Sample

Delta V3.61/bin/vers.txt

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral21

Sample

Delta V3.61/scripts/Put your own scripts in here.txt

Resource

win7-20240215-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral22

Sample

Delta V3.61/scripts/Put your own scripts in here.txt

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

300 seconds

Report Analysis Logs

General

Target

Delta V3.61/bin/lua.xml
Size

3KB
MD5

e2b537e027b3251fb82e213739e66376
SHA1

e47888a238dcf90097ecd3c8860b0f9b02ded0e3
SHA256

5c508701141f851aeb0ad9088759f7da15bc33f9e7459ea8c8d4e1ec7b4eaa60
SHA512

1e347301cdc75933d709eddeace7cc9d62a7e9685f5badde3e1ec6f3cdbb37bbb8b95c23632e11b283e0464ab4c84e79c644660a1f0c09f51729e30571555f7e

Score

1^/10

Malware Config

Signatures

Processes

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Delta V3.61\bin\lua.xml"
1⤵
PID:2876

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4200,i,6166776566165096562,4582328833313060853,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:8
1⤵
PID:2264

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2876-0-0x00007FFF70010000-0x00007FFF70020000-memory.dmp

Filesize
64KB

Download
memory/2876-1-0x00007FFFB002D000-0x00007FFFB002E000-memory.dmp

Filesize
4KB

Download
memory/2876-2-0x00007FFFAFF90000-0x00007FFFB0185000-memory.dmp

Filesize
2.0MB

Download
memory/2876-3-0x00007FFFAFF90000-0x00007FFFB0185000-memory.dmp

Filesize
2.0MB

Download

© 2018-2024

Terms | Privacy