Overview

overview

7

Static

static

3

pvz.exe

windows7-x64

7

pvz.exe

windows10-2004-x64

7

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...os.dll

windows7-x64

3

$PLUGINSDI...os.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...se.rtf

windows7-x64

4

$PLUGINSDI...se.rtf

windows10-2004-x64

1

$PLUGINSDI...in.dll

windows7-x64

1

$PLUGINSDI...in.dll

windows10-2004-x64

1

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$PLUGINSDI...zU.dll

windows7-x64

3

$PLUGINSDI...zU.dll

windows10-2004-x64

3

PlantsVsZombies.exe

windows7-x64

1

PlantsVsZombies.exe

windows10-2004-x64

6

bass.dll

windows7-x64

1

bass.dll

windows10-2004-x64

1

gdi42.dll

windows7-x64

1

gdi42.dll

windows10-2004-x64

1

pvzHE-Laun...XP.exe

windows7-x64

1

pvzHE-Laun...XP.exe

windows10-2004-x64

6

pvzHE-Launcher.exe

windows7-x64

1

pvzHE-Launcher.exe

windows10-2004-x64

6

pvzHE-Save...te.exe

windows7-x64

1

pvzHE-Save...te.exe

windows10-2004-x64

1

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    149s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/05/2024, 10:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    pvzHE-Save-Relocate.exe

  • Size

    1.7MB

  • MD5

    c7afc46bb41f5d7f97e60b76329a2398

  • SHA1

    d18fd7153023ebca9cdc7df6d25a4142aae8e79c

  • SHA256

    269c238bbfd9f30c4490235cb403e2dfea3fbdc3db7c8dc367db0403ea908295

  • SHA512

    5766213d579891763220a6c7ae1fea317721b091e3b02fad2141cf75a5e44afa99a9320f0a74faa6dd1a590ba24668a1a90d6d368ecf8b0614689764253ab9bc

  • SSDEEP

    24576:Smv0snC10P8NbLM6MUWeBBmb/Le8EZj2RTDhX3wLaWA/xgkcQrYNe5tKX5c54Klx:89NPw1LfXhXFgkcQrv

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\pvzHE-Save-Relocate.exe
    "C:\Users\Admin\AppData\Local\Temp\pvzHE-Save-Relocate.exe"
    1⤵
      PID:3136

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads