Static

static

3

lspdfr_049...up.exe

 

lspdfr_049...up.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

DdsConvert.dll

windows7-x64

1

DdsConvert.dll

windows10-2004-x64

1

DiscordRpcNet.dll

windows7-x64

1

DiscordRpcNet.dll

windows10-2004-x64

1

EasyHook.dll

windows7-x64

1

EasyHook.dll

windows10-2004-x64

1

EasyHook64.dll

windows7-x64

1

EasyHook64.dll

windows10-2004-x64

1

EasyLoad64.dll

windows7-x64

1

EasyLoad64.dll

windows10-2004-x64

1

FW1FontWrapper.dll

windows7-x64

1

FW1FontWrapper.dll

windows10-2004-x64

1

Gwen.UnitTest.dll

windows7-x64

1

Gwen.UnitTest.dll

windows10-2004-x64

1

Gwen.dll

windows7-x64

1

Gwen.dll

windows10-2004-x64

1

LMS.Common.dll

windows7-x64

1

LMS.Common.dll

windows10-2004-x64

1

LMS.Portab...le.dll

windows7-x64

1

LMS.Portab...le.dll

windows10-2004-x64

1

Microsoft....ng.dll

windows7-x64

1

Microsoft....ng.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    91s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/06/2024, 20:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Gwen.dll

  • Size

    191KB

  • MD5

    367a1b17121dfc7c2347984380939bc2

  • SHA1

    5407a022865656494b3427cfd22d72c2d6965819

  • SHA256

    33275af76fcd12157732a80df4795590d409a1df46b2b32a5112ca11d6aa5267

  • SHA512

    ff79cb21e08cc4825e1bc20f7938965ba5f09c8df60f9c21e1af11f58742f596daef30e762950171be447bdb772334234e0d0b7e03f0ffe30ac0822fba69c0cb

  • SSDEEP

    3072:6LGNlqI9IIjDVjUhNOkDRrQXwwZsiaMDGoaAfokaEwYGpZ7hxrZI6rdOW4K6lmuS:6LqqIVPVjUhNOkDRrQXdZsiaMDGoaAfv

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Gwen.dll,#1
    1⤵
      PID:1208

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads