Overview

overview

7

Static

static

7

807579e491...18.exe

windows7-x64

4

807579e491...18.exe

windows10-2004-x64

4

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/nsDui.dll

windows7-x64

3

$PLUGINSDIR/nsDui.dll

windows10-2004-x64

3

$PLUGINSDI...7z.dll

windows7-x64

3

$PLUGINSDI...7z.dll

windows10-2004-x64

3

SearchCommon.dll

windows7-x64

1

SearchCommon.dll

windows10-2004-x64

3

QuickSearch.exe

windows7-x64

7

QuickSearch.exe

windows10-2004-x64

7

Update.exe

windows7-x64

1

Update.exe

windows10-2004-x64

1

htmlayout.dll

windows7-x64

7

htmlayout.dll

windows10-2004-x64

7

uninst.exe

windows7-x64

4

uninst.exe

windows10-2004-x64

4

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/nsDui.dll

windows7-x64

3

$PLUGINSDIR/nsDui.dll

windows10-2004-x64

3

searchshelp.dll

windows7-x64

4

searchshelp.dll

windows10-2004-x64

4

searchshelpx64.dll

windows7-x64

4

searchshelpx64.dll

windows10-2004-x64

4

Analysis

  • max time kernel
    95s
  • max time network
    96s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/05/2024, 10:39

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Update.exe
  • Size 193KB
  • Sample240529-mqe7pace72
  • SHA256 3b26c0ecb57ccf158d45fdd711ca67a9532e50e12125bda4e696579bb7b4ca6d
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Update.exe
    "C:\Users\Admin\AppData\Local\Temp\Update.exe"
    1⤵
      PID:812

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          memory/812-1-0x0000000002630000-0x0000000002730000-memory.dmp
          Download

          memory/812-2-0x0000000002630000-0x0000000002730000-memory.dmp
          Download