Overview

overview

4

Static

static

3

McTools 2.zip

windows10-1703-x64

1

McTools 2/...eys.js

windows10-1703-x64

4

McTools 2/...ace.js

windows10-1703-x64

3

McTools 2/...ils.js

windows10-1703-x64

3

McTools 2/...pt.dll

windows10-1703-x64

1

McTools 2/...on.dll

windows10-1703-x64

1

McTools 2/...pt.dll

windows10-1703-x64

1

McTools 2/...ram.js

windows10-1703-x64

3

McTools 2/...er.vbs

windows10-1703-x64

1

McTools 2/...es.vbs

windows10-1703-x64

1

McTools 2/...pt.dll

windows10-1703-x64

1

McTools 2/...or.exe

windows10-1703-x64

1

McTools 2/...on.dll

windows10-1703-x64

1

McTools 2/...or.exe

windows10-1703-x64

1

McTools 2/...pt.dll

windows10-1703-x64

1

McTools 2/...or.exe

windows10-1703-x64

1

McTools 2/...on.dll

windows10-1703-x64

1

McTools 2/...or.exe

windows10-1703-x64

3

McTools 2/...on.dll

windows10-1703-x64

1

McTools 2/...on.dll

windows10-1703-x64

1

McTools 2/...on.dll

windows10-1703-x64

1

McTools 2/...on.dll

windows10-1703-x64

1

McTools 2/...on.dll

windows10-1703-x64

1

McTools 2/...on.dll

windows10-1703-x64

1

McTools 2/...on.dll

windows10-1703-x64

1

Analysis

  • max time kernel
    315s
  • max time network
    1579s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-es
  • resource tags

    arch:x64arch:x86image:win10-20240404-eslocale:es-esos:windows10-1703-x64systemwindows
  • submitted
    30-05-2024 11:54

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    McTools 2/packages/Newtonsoft.Json.13.0.1/lib/netstandard1.0/Newtonsoft.Json.dll

  • Size

    655KB

  • MD5

    a8494341b73a5eb47c01be10f7412ee5

  • SHA1

    130cb87f8ed5b7bb142f3d1523d4fd50024dce91

  • SHA256

    65cd9c5a731d8761a0753ea6cb5d569e751207b0bbc9fde3c9679d445908027c

  • SHA512

    730fcff11016f77c47f2ed37a07e96871d9521170e324a4a1d157611131a785738f78be1b8860e5ab77fd934e606afc7ca87d4219c18f645789ca7910c6e3c21

  • SSDEEP

    12288:yN9pZk5zWS0uWAOwI2EpInqAKCMKYBtAN24+:Mk5z10EOwIjyHP0BtAA

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\McTools 2\packages\Newtonsoft.Json.13.0.1\lib\netstandard1.0\Newtonsoft.Json.dll",#1
    1⤵
      PID:4980

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads