Static

static

3

lspdfr_049...up.exe

 

lspdfr_049...up.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

DdsConvert.dll

windows7-x64

1

DdsConvert.dll

windows10-2004-x64

1

DiscordRpcNet.dll

windows7-x64

1

DiscordRpcNet.dll

windows10-2004-x64

1

EasyHook.dll

windows7-x64

1

EasyHook.dll

windows10-2004-x64

1

EasyHook64.dll

windows7-x64

1

EasyHook64.dll

windows10-2004-x64

1

EasyLoad64.dll

windows7-x64

1

EasyLoad64.dll

windows10-2004-x64

1

FW1FontWrapper.dll

windows7-x64

1

FW1FontWrapper.dll

windows10-2004-x64

1

Gwen.UnitTest.dll

windows7-x64

1

Gwen.UnitTest.dll

windows10-2004-x64

1

Gwen.dll

windows7-x64

1

Gwen.dll

windows10-2004-x64

1

LMS.Common.dll

windows7-x64

1

LMS.Common.dll

windows10-2004-x64

1

LMS.Portab...le.dll

windows7-x64

1

LMS.Portab...le.dll

windows10-2004-x64

1

Microsoft....ng.dll

windows7-x64

1

Microsoft....ng.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    134s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/06/2024, 20:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    EasyHook.dll

  • Size

    51KB

  • MD5

    163e0d2a3cccaa53f16bf5d41721730e

  • SHA1

    b3703a4a13f37ec342c1909e7caf30a7ac9cc351

  • SHA256

    3153844bdaee8a55c812d072b0e25f992e716174fc7d987944f4b8cf6ddd1f83

  • SHA512

    d818d5934b47a2a661e5ae5fbe9ae03ce837a43da9c8aca39424e8ab048af6ea36c9bdde06686b82827caf7a2c72544ce895d6e38df73d0c15db281a5b771dc9

  • SSDEEP

    768:MefS0XbE5h5Efo0MisZ7b6y9YVAdB0oP4Ng+C+ab0d++XyCs4ff/8h:5IrEw0MjZ9YVAd6zNPCvbq+Gnfw

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\EasyHook.dll,#1
    1⤵
      PID:2068

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads