4c20e2852335a40add0c4e0d9f6e5e81cb3cb760f7e4eeda16ab13941e97fc28 | Triage

Submit
Reports

Overview

overview

Static

static

3

PROCESO JU...AL.exe

windows7-x64

PROCESO JU...AL.exe

windows10-2004-x64

PROCESO JU...re.dll

windows7-x64

1

PROCESO JU...re.dll

windows10-2004-x64

1

PROCESO JU...rk.dll

windows7-x64

1

PROCESO JU...rk.dll

windows10-2004-x64

1

PROCESO JU...64.dll

windows7-x64

1

PROCESO JU...64.dll

windows10-2004-x64

1

PROCESO JU...64.dll

windows7-x64

1

PROCESO JU...64.dll

windows10-2004-x64

1

PROCESO JU...40.dll

windows7-x64

1

PROCESO JU...40.dll

windows10-2004-x64

1

PROCESO JU..._1.dll

windows7-x64

1

PROCESO JU..._1.dll

windows10-2004-x64

1

PROCESO JU...64.dll

windows7-x64

1

PROCESO JU...64.dll

windows10-2004-x64

1

PROCESO JU...40.dll

windows7-x64

1

PROCESO JU...40.dll

windows10-2004-x64

1

PROCESO JU..._1.dll

windows7-x64

1

PROCESO JU..._1.dll

windows10-2004-x64

1

Analysis

max time kernel
141s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
30-05-2024 21:00

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

PROCESO JUDICIAL JUZGADO CIVIL 02 DEL CIRCUITO/01 PROCESO JUDICIAL.exe

Resource

win7-20240221-en

asyncrat default rat

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

PROCESO JUDICIAL JUZGADO CIVIL 02 DEL CIRCUITO/01 PROCESO JUDICIAL.exe

Resource

win10v2004-20240426-en

asyncrat default rat

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral3

Sample

PROCESO JUDICIAL JUZGADO CIVIL 02 DEL CIRCUITO/Qt5Core.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

PROCESO JUDICIAL JUZGADO CIVIL 02 DEL CIRCUITO/Qt5Core.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

PROCESO JUDICIAL JUZGADO CIVIL 02 DEL CIRCUITO/Qt5Network.dll

Resource

win7-20240215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

PROCESO JUDICIAL JUZGADO CIVIL 02 DEL CIRCUITO/Qt5Network.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

PROCESO JUDICIAL JUZGADO CIVIL 02 DEL CIRCUITO/libcrypto-1_1-x64.dll

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

PROCESO JUDICIAL JUZGADO CIVIL 02 DEL CIRCUITO/libcrypto-1_1-x64.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

PROCESO JUDICIAL JUZGADO CIVIL 02 DEL CIRCUITO/libssl-1_1-x64.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

PROCESO JUDICIAL JUZGADO CIVIL 02 DEL CIRCUITO/libssl-1_1-x64.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

PROCESO JUDICIAL JUZGADO CIVIL 02 DEL CIRCUITO/msvcp140.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

PROCESO JUDICIAL JUZGADO CIVIL 02 DEL CIRCUITO/msvcp140.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

PROCESO JUDICIAL JUZGADO CIVIL 02 DEL CIRCUITO/msvcp140_1.dll

Resource

win7-20240508-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

PROCESO JUDICIAL JUZGADO CIVIL 02 DEL CIRCUITO/msvcp140_1.dll

Resource

win10v2004-20240426-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

PROCESO JUDICIAL JUZGADO CIVIL 02 DEL CIRCUITO/steam_api64.dll

Resource

win7-20240221-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

PROCESO JUDICIAL JUZGADO CIVIL 02 DEL CIRCUITO/steam_api64.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

PROCESO JUDICIAL JUZGADO CIVIL 02 DEL CIRCUITO/vcruntime140.dll

Resource

win7-20240221-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

PROCESO JUDICIAL JUZGADO CIVIL 02 DEL CIRCUITO/vcruntime140.dll

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

PROCESO JUDICIAL JUZGADO CIVIL 02 DEL CIRCUITO/vcruntime140_1.dll

Resource

win7-20240419-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

PROCESO JUDICIAL JUZGADO CIVIL 02 DEL CIRCUITO/vcruntime140_1.dll

Resource

win10v2004-20240508-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

PROCESO JUDICIAL JUZGADO CIVIL 02 DEL CIRCUITO/Qt5Core.dll
Size

6.0MB
MD5

41dc9ae1fd9ed3ac3a2b2b756b14a1e6
SHA1

ea9884197acaf277b47f59711edba22b100519fd
SHA256

97fe174f5d78a12e60b5528bb1b5cfaad33126c0e908f8d3d74ef054c850b5bc
SHA512

fb59a5502471a5eb4c94836eda73f6c8d6da1e5992ef98260dbaf571d09716f0241b0ab3c11bbff33813d66be7060a3dbe9cbed6af1cf43bbd96a2b19e147170
SSDEEP

98304:VE5jJSnL0VxTPnyEJsv6tWKFdu9Cs/CzYnxqfhgw:VE5NSn0x2EJsv6tWKFdu9CMkexqfhF

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\PROCESO JUDICIAL JUZGADO CIVIL 02 DEL CIRCUITO\Qt5Core.dll",#1
1⤵
PID:1480

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1416 --field-trial-handle=3240,i,13319578961094268484,16557498665191861597,262144 --variations-seed-version /prefetch:8
1⤵
PID:3796

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy