Overview
overview
7Static
static
3Acura.exe
windows10-2004-x64
7Monaco/vs/loader.js
windows10-2004-x64
3Newtonsoft.Json.dll
windows10-2004-x64
1System.Buffers.dll
windows10-2004-x64
1System.CodeDom.dll
windows10-2004-x64
1System.Con...er.dll
windows10-2004-x64
1System.Data.Odbc.dll
windows10-2004-x64
1System.Dat...nt.dll
windows10-2004-x64
1System.Dia...og.dll
windows10-2004-x64
1System.Dia...er.dll
windows10-2004-x64
1System.Dra...on.dll
windows10-2004-x64
1System.IO....ol.dll
windows10-2004-x64
1System.IO....ng.dll
windows10-2004-x64
1System.IO....ol.dll
windows10-2004-x64
1System.IO.Ports.dll
windows10-2004-x64
1System.Memory.dll
windows10-2004-x64
1System.Num...rs.dll
windows10-2004-x64
1System.Run...fe.dll
windows10-2004-x64
1System.Sec...ol.dll
windows10-2004-x64
1System.Sec...ng.dll
windows10-2004-x64
1System.Sec...cs.dll
windows10-2004-x64
1System.Sec...ml.dll
windows10-2004-x64
1System.Sec...ns.dll
windows10-2004-x64
1System.Sec...ws.dll
windows10-2004-x64
1System.Ser...ex.dll
windows10-2004-x64
1System.Ser...tp.dll
windows10-2004-x64
1System.Ser...cp.dll
windows10-2004-x64
1System.Ser...es.dll
windows10-2004-x64
1System.Ser...ty.dll
windows10-2004-x64
1System.Ser...on.dll
windows10-2004-x64
1System.Ser...er.dll
windows10-2004-x64
1runtimes/w...er.dll
windows10-2004-x64
1Analysis
- max time kernel
7s - max time network
7s - platform
windows10-2004_x64 - resource
win10v2004-20240611-en - resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system - submitted
13/06/2024, 04:31
Static task
static1
Behavioral task
behavioral1
Sample
Acura.exe
Resource
win10v2004-20240611-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Monaco/vs/loader.js
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
System.Buffers.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
System.CodeDom.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
System.Configuration.ConfigurationManager.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
System.Data.Odbc.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
System.Data.SqlClient.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
System.Diagnostics.EventLog.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
System.Diagnostics.PerformanceCounter.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
System.Drawing.Common.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
System.IO.FileSystem.AccessControl.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
System.IO.Packaging.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
System.IO.Pipes.AccessControl.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
System.IO.Ports.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
System.Memory.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
System.Numerics.Vectors.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
System.Runtime.CompilerServices.Unsafe.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
System.Security.AccessControl.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
System.Security.Cryptography.Cng.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
System.Security.Cryptography.Pkcs.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
System.Security.Cryptography.Xml.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
System.Security.Permissions.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
System.Security.Principal.Windows.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
System.ServiceModel.Duplex.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
System.ServiceModel.Http.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
System.ServiceModel.NetTcp.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral28
Sample
System.ServiceModel.Primitives.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
System.ServiceModel.Security.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral30
Sample
System.ServiceModel.Syndication.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
System.ServiceProcess.ServiceController.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
Behavioral task
behavioral32
Sample
runtimes/win-x64/native/WebView2Loader.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
General
- Target System.ServiceModel.Http.dll
- Size 15KB
- Sample240613-e5rj9sthpc
- SHA256 acf1ee98893feafef0c5d1aac5704a3e45e717635d81a6dc15624a32509f52a3
- MD5 01c04516d0867206d593de53e42f3a32
- SHA1 b300f0ac990d4cbea0fbdeb89ec7acd832a35675
- SHA512 215cef01e1d3f1db52f8edf96f7b75b7d69891855746fe6c36284177d8ed54fd4b77c306de19f85ef471d2ed6974203eb61199d609daac4f36023fa4bacbe8b1
- SSDEEP 192:0nBZsxlVWR+WJeWvcuyjS7HnhWgN7aAWh6Jq21eX01k9z3Ako2DX7:9lVWR+WJ7HRN7XJl8R9z3LX7
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\System.ServiceModel.Http.dll,#11⤵PID:3472
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=1296,i,17325488789339133686,9539570259395798500,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:81⤵PID:116