Overview

overview

10

Static

static

3

##!!SetUp_...re.dll

windows7-x64

1

##!!SetUp_...re.dll

windows10-2004-x64

1

##!!SetUp_...rk.dll

windows7-x64

1

##!!SetUp_...rk.dll

windows10-2004-x64

1

##!!SetUp_...up.exe

windows7-x64

10

##!!SetUp_...up.exe

windows10-2004-x64

10

##!!SetUp_...g.pptx

windows7-x64

1

##!!SetUp_...g.pptx

windows10-2004-x64

1

##!!SetUp_...64.dll

windows7-x64

1

##!!SetUp_...64.dll

windows10-2004-x64

1

##!!SetUp_...64.dll

windows7-x64

1

##!!SetUp_...64.dll

windows10-2004-x64

1

##!!SetUp_...40.dll

windows7-x64

1

##!!SetUp_...40.dll

windows10-2004-x64

1

##!!SetUp_..._1.dll

windows7-x64

1

##!!SetUp_..._1.dll

windows10-2004-x64

1

##!!SetUp_...64.dll

windows7-x64

1

##!!SetUp_...64.dll

windows10-2004-x64

1

##!!SetUp_...40.dll

windows7-x64

1

##!!SetUp_...40.dll

windows10-2004-x64

1

##!!SetUp_..._1.dll

windows7-x64

1

##!!SetUp_..._1.dll

windows10-2004-x64

1

##!!SetUp_...pp.dll

windows7-x64

3

##!!SetUp_...pp.dll

windows10-2004-x64

3

##!!SetUp_...1].exe

windows7-x64

1

##!!SetUp_...1].exe

windows10-2004-x64

1

##!!SetUp_...1].exe

windows7-x64

1

##!!SetUp_...1].exe

windows10-2004-x64

3

##!!SetUp_...1].exe

windows7-x64

1

##!!SetUp_...1].exe

windows10-2004-x64

1

##!!SetUp_...-1.dll

windows10-2004-x64

1

##!!SetUp_...-0.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 01:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ##!!SetUp_5566_Pa$sW0rd$$!!/vcruntime140_1.dll

  • Size

    48KB

  • MD5

    cf0a1c4776ffe23ada5e570fc36e39fe

  • SHA1

    2050fadecc11550ad9bde0b542bcf87e19d37f1a

  • SHA256

    6fd366a691ed68430bcd0a3de3d8d19a0cb2102952bfc140bbef4354ed082c47

  • SHA512

    d95cd98d22ca048d0fc5bca551c9db13d6fa705f6af120bbbb621cf2b30284bfdc7320d0a819bb26dab1e0a46253cc311a370bed4ef72ecb60c69791ed720168

  • SSDEEP

    768:a0Q4HUcGJZekJSam1BbuBSYcCZbiLzlSHji9z4GwZHji9znwT:afnDex5izbiLzlE+z4Gwl+zwT

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\##!!SetUp_5566_Pa$sW0rd$$!!\vcruntime140_1.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1528
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -u -p 1528 -s 80
      2⤵
        PID:1736

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads