Overview

overview

9

Static

static

3

6ac1811d11...18.exe

windows7-x64

7

6ac1811d11...18.exe

windows10-2004-x64

7

InstallTools.exe

windows7-x64

1

InstallTools.exe

windows10-2004-x64

1

bytefence-....7.exe

windows7-x64

4

bytefence-....7.exe

windows10-2004-x64

4

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

ByteFence.exe

windows7-x64

9

ByteFence.exe

windows10-2004-x64

6

ByteFenceGUI.dll

windows7-x64

1

ByteFenceGUI.dll

windows10-2004-x64

1

ByteFenceScan.exe

windows7-x64

1

ByteFenceScan.exe

windows10-2004-x64

1

ByteFenceService.exe

windows7-x64

1

ByteFenceService.exe

windows10-2004-x64

1

Microsoft....nt.dll

windows7-x64

1

Microsoft....nt.dll

windows10-2004-x64

1

Microsoft....er.dll

windows7-x64

1

Microsoft....er.dll

windows10-2004-x64

1

amd64/Kern...ol.dll

windows10-2004-x64

1

amd64/msdia140.dll

windows7-x64

7

amd64/msdia140.dll

windows10-2004-x64

7

protobuf-net.dll

windows7-x64

1

protobuf-net.dll

windows10-2004-x64

1

rsEngine.dll

windows7-x64

1

Analysis

  • max time kernel
    142s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-05-2024 11:14

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    protobuf-net.dll

  • Size

    205KB

  • MD5

    1ef639ae78e59f44b0ef43bbcbb893f4

  • SHA1

    a78cc9f87e611a017080ad9b28d0c344d58bac0e

  • SHA256

    ce817ea26d88d86ab917460039b0bfabb311790cd702285c92f977ca6c293508

  • SHA512

    3b7d7e57b2db0a5c68e38ab2494995098d91ed32de4bb092a4947e17cec800c725d879aa8a106b46c714945b2358d2e37e62813d88d772bc4a9c1ee05bc12559

  • SSDEEP

    3072:cDS6s11CNtSu01ck48ChK8CShUlNIUAQwXaQ5edod9hoiexKcMva3rdYg8CUD:zzWMGN8CckUnAt5edod9hoisKbvydDUD

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\protobuf-net.dll,#1
    1⤵
      PID:5044
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4132 --field-trial-handle=2692,i,8678872182442199182,12502579059484928042,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:4588

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads