Overview

overview

10

Static

static

3

671c2e2710...18.exe

windows7-x64

10

671c2e2710...18.exe

windows10-2004-x64

10

$APPDATA/o...60.dll

windows7-x64

1

$APPDATA/o...60.dll

windows10-2004-x64

1

$APPDATA/o...60.dll

windows7-x64

1

$APPDATA/o...60.dll

windows10-2004-x64

1

$APPDATA/o...60.dll

windows7-x64

1

$APPDATA/o...60.dll

windows10-2004-x64

1

$APPDATA/o...60.dll

windows7-x64

1

$APPDATA/o...60.dll

windows10-2004-x64

1

$APPDATA/o...Vb.dll

windows7-x64

1

$APPDATA/o...Vb.dll

windows10-2004-x64

1

$APPDATA/o...nu.dll

windows7-x64

1

$APPDATA/o...nu.dll

windows10-2004-x64

1

$APPDATA/v...60.dll

windows7-x64

1

$APPDATA/v...60.dll

windows10-2004-x64

1

$APPDATA/v...UI.dll

windows7-x64

1

$APPDATA/v...UI.dll

windows10-2004-x64

1

$APPDATA/v...rc.dll

windows7-x64

1

$APPDATA/v...rc.dll

windows10-2004-x64

1

$APPDATA/v...ui.dll

windows7-x64

1

$APPDATA/v...ui.dll

windows10-2004-x64

1

$TEMP/Kine...ph.dll

windows7-x64

1

$TEMP/Kine...ph.dll

windows10-2004-x64

1

$TEMP/boondocks.exe

windows7-x64

3

$TEMP/boondocks.exe

windows10-2004-x64

10

$TEMP/cust...60.dll

windows7-x64

1

$TEMP/cust...60.dll

windows10-2004-x64

1

$TEMP/cust...re.dll

windows7-x64

1

$TEMP/cust...re.dll

windows10-2004-x64

1

$TEMP/cust...UI.dll

windows7-x64

1

$TEMP/cust...UI.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 11:31

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $APPDATA/operations/MicrosoftVsaVb.dll

  • Size

    7KB

  • MD5

    c7e1b994c3f732b1c8b4f08881ac4982

  • SHA1

    1fc521fbefba01af142dc0d677900114cecaaaa2

  • SHA256

    236ffe70834dbc7805bd717f610702ac78f1abf22c3de7827cca00bd68c534cf

  • SHA512

    c94d79d372dfeda2dc08477de291754a854bfd395f1b2b4844dff2bed80308cdb7e504ec8ec3e6581046153981a1f4b4b653d7a1dbd70bcd06f78f0f62dfb7db

  • SSDEEP

    96:vLmJ2tWUGRZO9Vx0vg/a1Dkfrf+hzq8nWn4CykZoiB2xv5hPfEWtNE8WPV:Dk2tWUGRg0IPE6y2B2xPP8WtNE8WN

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\$APPDATA\operations\MicrosoftVsaVb.dll,#1
    1⤵
      PID:2856

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads